Hardware-attested · App Attest + Secure Enclave

Proof your Mac is real.

A 30-day cryptographic certificate for high-value used Macs. The seller runs a notarized macOS app; the buyer verifies on receipt that the device they got is the device that was certified. $39, one-time.

✓ Notarized macOS app✓ No account, no login✓ Refund if cert fails
Macfax · Hardware Attestation
Macfax
Cert
K7M4-Q9XA

Subject Device
Mac Studio (2025)
M3 Ultra · 512 GB · 8 TB

Activation LockOff
MDM / DEPNone
SSD wear2%
Memory test0 errors
Burn-in15 min · pass
Logic-boardmatch
Verified Verified
macfax.com/r/k7m4q9xa
How it works · 30 seconds

Three steps. One device. One certificate that buyers can re-verify on arrival.

Step 01

Seller pays $39 and runs the app

Notarized macOS app. Five-minute fast checks, then a 30–45 minute supervised burn-in for CPU, GPU, memory, and SSD.

Step 02

Cert URL is generated and signed

The diagnostic payload is signed by the Mac's Secure Enclave. The seller shares macfax.com/r/{id} with prospective buyers.

Step 03

Buyer re-attests on receipt

On delivery, the buyer runs a 30-second check. If the enclave key matches the cert, the device is what was certified. If not, refuse delivery.

What we verify

30+ checks across identity, spec, health, and tamper.

The same diagnostic Apple's authorized service providers run, plus sustained burn-in workloads tuned for the buyers who care: ML researchers, devs, and Mac Studio resellers. Every result lands on the cert, signed.

Read the full diagnostic stack →
Identity
  • VerifiedSerial valid · Apple Coverage
  • VerifiedActivation Lock state
  • VerifiedFind My Mac
  • VerifiedMDM / DEP enrollment
  • VerifiediCloud account state
Spec match
  • VerifiedChip variant + cores
  • VerifiedMemory size and type
  • VerifiedStorage size and type
  • VerifiedGPU core count
  • VerifiedListed-vs-actual
Hardware health
  • VerifiedSSD wear, hours, writes
  • VerifiedBattery cycles (laptops)
  • VerifiedCPU sustained burn-in
  • VerifiedGPU MLX inference burn
  • VerifiedMemory 30-min memtest
Tamper & integrity
  • VerifiedLogic-board ↔ chassis match
  • VerifiedService History pane
  • VerifiedSecure Boot / SIP / FileVault
  • VerifiedFan / thermal anomalies
  • VerifiedEnclave attestation
Honest scope

What software cannot prove — and we won't pretend otherwise.

A Macfax cert is a snapshot of the device's technical state, signed by the device itself. It cannot certify cosmetic condition, prior liquid exposure, whether the case has been opened, or repair history beyond what's in the macOS Service History pane. We say so on every cert.

The case-swap moat

A PDF report can be re-used on a different device. A Macfax cert can't.

The cert is signed by the Mac's Secure Enclave key, fused to the logic board. On receipt, the buyer re-attests in 30 seconds. If the enclave key doesn't match, the cert fails — and the deal stops at the doorstep.

Macfax
Hardware-bound
PDF inspection report
Reusable on any device
Apple Coverage Check
Serial only
Verifies the serial is realVerifiedVerifiedVerified
Catches case-swap fraudVerified
Diagnostic burn-inVerifiedpartial
Buyer re-verifies on receiptVerified
Tamper-evident signatureVerified
Pricing

$39 once. Free for the buyer. No subscription.

Most common
Single cert
One signed cert, valid 30 days. What most sellers buy.
$39one-time
  • VerifiedHardware-attested via App Attest
  • Verified30-day cert with re-issue option
  • VerifiedBuyer re-attestation included free
  • VerifiedRefund within 60s if cert generation fails
Buyer verification
The 30-second receipt-side check. No account, no payment.
Freeanonymous
  • VerifiedRe-attests the device's enclave key
  • VerifiedCompares against the cert's signature
  • VerifiedReturns match or mismatch in plain language
  • VerifiedIf mismatch — refuse delivery
FAQ

Common questions.

What does $39 actually cover?
One signed cert, valid 30 days from issuance. Re-issuance is free within 14 days for the same Mac. Buyer verification is always free.
What if my Mac fails the diagnostic?
Automatic refund within 60 seconds. We don't issue a cert for a Mac that doesn't pass — and we don't charge you to find out it didn't.
Why isn't this just an Apple service?
Apple has every primitive needed but hasn't shipped a P2P verification product. We're filling the gap until they do — or until they don't.
How does the buyer verify on receipt?
They open the cert URL, click "Verify on receipt," and run the 30-second check. The same notarized app re-attests the device's enclave key. If it matches, the cert is valid. If not, refuse delivery and contact the seller.
What happens if a cert is contested?
MVP-tier dispute handling is by email; we mediate between buyer and seller using the cryptographic evidence on file. Higher-tier dispute kits are post-MVP.