diff --git a/tools/macos/build.sh b/tools/macos/build.sh
index f0864d954..0e7f0d3df 100755
--- a/tools/macos/build.sh
+++ b/tools/macos/build.sh
@@ -271,7 +271,10 @@ function build_dmg {
   ${RAKE} install prefix=${dmgcnt}
   test -f ${dmgmac}/mkvtoolnix-gui
 
-  strip ${dmgcnt}/MacOS/mkv{merge,info,info-gui,extract,propedit,toolnix-gui}
+  for APP in ${dmgcnt}/MacOS/mkv{merge,info,info-gui,extract,propedit,toolnix-gui}; do
+    strip ${APP}
+    if [[ -n ${SIGNATURE_IDENTITY} ]] codesign --force -s ${SIGNATURE_IDENTITY} ${APP}
+  done
 
   mv ${dmgmac}/mkvtoolnix/sounds ${dmgmac}/sounds
   rmdir ${dmgmac}/mkvtoolnix
@@ -388,6 +391,9 @@ EOF
   hdiutil create -srcfolder ${dmgbase} -volname ${volumename} \
     -fs HFS+ -fsargs "-c c=64,a=16,e=16" -format UDZO -imagekey zlib-level=9 \
     ${CMPL}/MKVToolNix-${MTX_VER}
+
+  if [[ -n ${SIGNATURE_IDENTITY} ]] codesign --force -s ${SIGNATURE_IDENTITY} ${dmgname}
+
   if [[ ${dmgname} != ${dmgbuildname} ]] mv ${dmgname} ${dmgbuildname}
 
   ln -s ${dmgbuildname} ${latest_link}
diff --git a/tools/macos/config.sh b/tools/macos/config.sh
index 9e8f17ea5..7f3ed4d31 100644
--- a/tools/macos/config.sh
+++ b/tools/macos/config.sh
@@ -16,3 +16,4 @@ export DRAKETHREADS=${DRAKETHREADS:-4}
 export MAKEFLAGS="-j ${DRAKETHREADS}"
 export SHARED_QT=1
 export QTVER=${QTVER:-5.7.1}
+export SIGNATURE_IDENTITY="Mac Developer: Moritz Bunkus (R3F3XVNCQW)"