macOS Setup Guide

1. Double-click the downloaded .dmg file to mount it.
2. In the window that opens, drag Canvas Downloader onto the Applications folder.
3. Eject the DMG - the app now lives in your Applications folder and is ready to open.

Drag the icon onto the Applications folder, just like the clip above.

The full first-open process, start to finish (shown on macOS Sequoia).

Open your Applications folder and double-click Canvas Downloader. To keep this app completely free for students, I don't pay Apple the $99/year developer fee required to sign the app. Because it is an independent app without this certificate, macOS blocks it on the first attempt - this is completely normal for free, independent apps.

First, you'll see this:

Click Done (not "Move to Trash"). Then open Apple menu → System Settings → Privacy & Security and scroll to the Security section. You'll see "Canvas Downloader was blocked…" - click Open Anyway.

macOS then asks you to confirm your identity:

Canvas Downloader is completely open-source - you can read every line of what it does on GitHub. The password step is macOS's standard safety gate for all unsigned apps from independent developers.

When the app opens, macOS shows a notification permission prompt in the top-right corner of your screen. Click it to open the permission dialog:

Once allowed, the toggle in Notification Settings looks like this:

Canvas Downloader sends one "Download Complete" or "Sync Complete" banner when a long run finishes - so you can step away and get notified when it's done. No other notifications are ever sent.

Creating a Canvas Access Token takes about 30 seconds - the clip shows exactly how.

The app opens on a login screen asking for two things: your school's Canvas address and a personal Canvas Access Token.

For the address, use Find your institution beside the field and type your school's name - the address fills itself in. Not listed? Paste it yourself (e.g. https://school.instructure.com); every Canvas works, listed or not.

For the token, click Get a token beside the token field: it opens your own Canvas token page, where Approved Integrations → + New Access Token generates one in about 30 seconds. Copy it straight away - Canvas shows it only once - and paste it in. The step-by-step walkthrough has the whole thing in pictures.

When you start your first download or sync, Canvas Downloader asks macOS for the Office permissions up front - in one batch, so they don't interrupt the run later. Up to five dialogs appear in sequence, depending on which Microsoft Office apps you have installed. A sixth, for System Events, arrives at the end of that first run - see dialog 6.

1

App Data Access macOS 15 + only

"Canvas Downloader" would like to access data from other apps.
"Keeping app data separate makes it easier to manage your privacy and security."

→ Click Allow.

PDF conversions use a private scratch folder inside Microsoft Office's own app container - macOS 15 Sequoia flags that as "another app's data." On macOS 14 and earlier this dialog simply never appears.

The one repeat offender: unlike every other dialog on this page, macOS deliberately forgets this consent when the app quits - Apple designed it to last only while the app is open. So expect it once per session: after reopening Canvas Downloader, your first download or sync with conversions asks again, right at the start of the run. One click, then the whole session is covered.

▶ Never want to see it again? Grant Full Disk Access (optional, one-time).

Apps with Full Disk Access are exempt from the App Data check - it is the only permanent silence macOS offers. Recommended if you use the hands-off daily sync.

Go to System Settings → Privacy & Security → Full Disk Access, click +, choose Canvas Downloader from Applications and switch it on, then quit and reopen the app.

2

Downloads Folder

"Canvas Downloader" would like to access files in your Downloads folder.
"Canvas Downloader may save downloaded course files to your Downloads folder."

→ Click Allow.

macOS asks once per protected folder. If you save files to a custom folder (Documents, Desktop, or elsewhere) you'll see this dialog for that folder instead.

3

Microsoft PowerPoint

"Canvas Downloader" wants access to control "Microsoft PowerPoint".
"Allowing control will provide access to documents and data in "Microsoft PowerPoint", and to perform actions within that app."

→ Click Allow.

This is the PDF-conversion permission. Canvas Downloader opens each .pptx file in PowerPoint, exports a PDF locally, and closes it again - nothing is uploaded anywhere.

4

Microsoft Word

"Canvas Downloader" wants access to control "Microsoft Word".
"Allowing control will provide access to documents and data in "Microsoft Word", and to perform actions within that app."

→ Click Allow.

5

Microsoft Excel

"Canvas Downloader" wants access to control "Microsoft Excel".
"Allowing control will provide access to documents and data in "Microsoft Excel", and to perform actions within that app."

→ Click Allow.

Dialogs 3-5 only appear for Office apps you have installed. If you don't have Office, none of them appear and original files are always kept as-is.

6

System Events at the end of the run

"Canvas Downloader" wants access to control "System Events".
"Allowing control will provide access to documents and data in "System Events", and to perform actions within that app."

→ Click Allow.

This one is the tidy-up. When the run finishes, Canvas Downloader closes the Word, Excel and PowerPoint windows it opened for the conversions and clears its temporary files out of your Office Recent lists. System Events is how macOS lets it check which of those apps are still running - it never touches documents you opened yourself.

It appears later than the others, once the download or sync is complete, so don't be surprised by a dialog after the run. If you miss it, nothing is lost - the Office apps just stay open and you can quit them by hand.

That's everything. Every later download and sync runs hands-free - the only possible repeat is the macOS 15+ App Data dialog (1), once per app session, unless you've granted Full Disk Access.