diff --git a/CHANGELOG.md b/CHANGELOG.md
index 599065d..d95a016 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,12 @@ commands, `--json` output and exit codes. Each release's notes start with its se
 
 ## [Unreleased]
 
+### Fixed
+
+- The README now describes the two macOS steps to allow a blocked browser download: **Allow Anyway** in
+  System Settings → Privacy & Security, then **Open Anyway** in the dialog shown on the next run
+  (measured on macOS 27.0.1 with 0.6.1).
+
 ## [0.6.1] - 2026-10-29
 
 ### Fixed
diff --git a/README.md b/README.md
index 5d3080c..466e312 100644
--- a/README.md
+++ b/README.md
@@ -434,8 +434,10 @@ the proof that the file is genuine; once it passes, unblock the binary as follow
 **macOS.** Gatekeeper may refuse to open `hodeishield` ("Apple could not verify… is free of
 malware"). Verify the download first, then allow the binary in System Settings: after the first
 blocked attempt, open **System Settings → Privacy & Security**, scroll down to the message about
-`hodeishield`, click **Open Anyway**, confirm, and run the command again. The dialog's wording and
-button labels follow the system language, so they may differ from the English text quoted here.
+`hodeishield`, click **Allow Anyway** and authenticate. Then run the command again and choose
+**Open Anyway** in the dialog that appears; later runs show no dialog. Older macOS versions may show
+**Open Anyway** directly in System Settings. The dialog's wording and button labels follow the
+system language, so they may differ from the English text quoted here.
 
 Or remove the quarantine attribute from the unpacked binary: