cert.fish Guide

Apple sideloading knowledge base

Methods, tools, compatibility, security, and troubleshooting for apps outside the App Store.

Use this knowledge base to choose a method, complete a task, or diagnose a failure. “Sideloading” covers several unrelated systems; identify the system before applying advice.

Start here

NeedPage
Select a methodMethod comparison
Check current OS and tool statusCurrent state
Understand certificates and profilesSigning model
Fix an errorError index
Assess an IPAIPA safety
Inspect an IPA or profileLocal inspection commands

Browse by topic

Official Apple distribution

App Store alternatives that Apple defines: TestFlight, unlisted and Custom Apps, regional marketplaces, Web Distribution, Xcode, ad hoc, Enterprise, and MDM.

Open official distribution

Signing tools and accounts

Personal Team limits, paid membership, AltStore, SideStore, Sideloadly, Feather, other on-device signers, certificate providers, and Linux.

Open signing methods

Advanced and version-locked methods

TrollStore, LiveContainer, JIT, jailbreak/AppSync, legacy limit bypasses, and other Apple platforms.

Open advanced methods

Technical foundations

IPA structure, code signing, P12 files, provisioning profiles, App IDs, bundle IDs, entitlements, extensions, updates, and data containers.

Open foundations

Security and privacy

Threat models, app provenance, modified IPAs, signing credentials, UDIDs, pairing records, and configuration profiles.

Open security guidance

Troubleshooting

Symptom-first diagnosis for install, integrity, trust, expiry, refresh, app-limit, crash, network, and Feather failures.

Open troubleshooting

Core rules

  1. Signing proves integrity from a signer; it does not prove an app is safe.
  2. The certificate, profile, App ID, entitlements, bundle ID, and device must agree.
  3. Free Personal Team profiles expire after seven days and have app/App ID limits (Apple).
  4. JIT is separate from signing and installation.
  5. Do not delete an installed app before protecting its local data.

For citations and update policy, see Sources.

Paid CertificatesFrom cert.fish: no computer, no weekly refresh. One purchase for one iPhone.Buy - £6.75