cert.fish Guide
Advanced and version-locked methods

Restore-based customization

Change hidden iOS settings with Nugget or Misaka26 restore methods, without jailbreaking or signing anything.

Restore-based tools change hidden system settings through backup and restore behavior. They install no apps, sign nothing, and need no jailbreak. Nugget and Misaka26 switch on options such as Dynamic Island on unsupported models, Stage Manager, Always-on Display, boot chime, charge limit, and status bar text.

Use when

The goal is system settings or feature flags rather than IPA installation, the exact iOS release sits inside the tool's supported range, and a current backup exists. Do not use these tools for installing apps, enabling JIT, or removing signing limits. Those goals each need their own method.

Supported ranges

  • Nugget: desktop tool for Windows, macOS, and Linux. General tweaks list iOS 17.0 through 26.0 and later; MobileGestalt device options and feature flags list 17.0 through 26.1. The project warns against any use on iOS 27, where Apple patched the partial restore method (Nugget).
  • Misaka26: macOS app built on the restore method behind TrollRestore. The project lists iOS and iPadOS 16.0 through 26.1 plus the 26.2 beta 1. It can also install TrollStore on eligible 15.2 through 17.0 firmware from the same workflow (misaka26).

Limits and failure modes

  • A wrong option or an interrupted restore can bootloop the device. Both projects tell users to back up first and accept that risk.
  • These tools grant no entitlements and change no signing state. An app that needs installing, a capability, or JIT still needs its own method.
  • Nugget states its region option does not enable EU sideloading outside the EU. Do not pay for a tool that promises otherwise.
  • Treat restore behavior on iOS 27 and later as unsupported until the projects document it.

Primary sources

Paid CertificatesFrom cert.fish: no computer, no weekly refresh. One purchase for one iPhone.Buy - £6.75