diff --git a/apps/desktop/resources/entitlements.mas.plist b/apps/desktop/resources/entitlements.mas.plist
index 5fdeefe6a4a..bb06ae10431 100644
--- a/apps/desktop/resources/entitlements.mas.plist
+++ b/apps/desktop/resources/entitlements.mas.plist
@@ -1,34 +1,42 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
-	<dict>
-		<key>com.apple.application-identifier</key>
+<dict>
+	<key>com.apple.application-identifier</key>
+	<string>LTZ2PFU5D6.com.bitwarden.desktop</string>
+	<key>com.apple.developer.team-identifier</key>
+	<string>LTZ2PFU5D6</string>
+	<key>com.apple.security.app-sandbox</key>
+	<true/>
+	<key>com.apple.security.application-groups</key>
+	<array>
 		<string>LTZ2PFU5D6.com.bitwarden.desktop</string>
-		<key>com.apple.security.network.client</key>
-		<true />
-		<key>com.apple.security.files.user-selected.read-write</key>
-		<true />
-		<key>com.apple.security.device.usb</key>
-		<true />
-		<!--
-		<key>com.apple.developer.authentication-services.autofill-credential-provider</key>
-		<true/>
-		-->
-		<key>com.apple.security.temporary-exception.files.home-relative-path.read-write</key>
-		<array>
-			<string>/Library/Application Support/Mozilla/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Google/Chrome/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Google/Chrome Beta/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Google/Chrome Dev/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Google/Chrome Canary/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Chromium/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Microsoft Edge/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Microsoft Edge Beta/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Microsoft Edge Dev/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Microsoft Edge Canary/NativeMessagingHosts/</string>
-			<string>/Library/Application Support/Vivaldi/NativeMessagingHosts/</string>
-		</array>
-		<key>com.apple.security.cs.allow-jit</key>
-		<true />
-	</dict>
-</plist>
\ No newline at end of file
+	</array>
+	<key>com.apple.security.network.client</key>
+	<true/>
+	<key>com.apple.security.files.user-selected.read-write</key>
+	<true/>
+	<key>com.apple.security.device.usb</key>
+	<true/>
+	<!--
+	<key>com.apple.developer.authentication-services.autofill-credential-provider</key>
+	<true/>
+	-->
+	<key>com.apple.security.temporary-exception.files.home-relative-path.read-write</key>
+	<array>
+		<string>/Library/Application Support/Mozilla/NativeMessagingHosts/</string>
+		<string>/Library/Application Support/Google/Chrome/NativeMessagingHosts/</string>
+		<string>/Library/Application Support/Google/Chrome Beta/NativeMessagingHosts/</string>
+		<string>/Library/Application Support/Google/Chrome Dev/NativeMessagingHosts/</string>
+		<string>/Library/Application Support/Google/Chrome Canary/NativeMessagingHosts/</string>
+		<string>/Library/Application Support/Chromium/NativeMessagingHosts/</string>
+		<string>/Library/Application Support/Microsoft Edge/NativeMessagingHosts/</string>
+		<string>/Library/Application Support/Microsoft Edge Beta/NativeMessagingHosts/</string>
+		<string>/Library/Application Support/Microsoft Edge Dev/NativeMessagingHosts/</string>
+		<string>/Library/Application Support/Microsoft Edge Canary/NativeMessagingHosts/</string>
+        <string>/Library/Application Support/Vivaldi/NativeMessagingHosts/</string>
+	</array>
+	<key>com.apple.security.cs.allow-jit</key>
+	<true/>
+</dict>
+</plist>