cert.fish Guide
Advanced and version-locked methods

TrollStore

Permanent IPA installation through CoreTrust bugs, with the exact firmware boundary and risks explained.

TrollStore is not ordinary signing and not a jailbreak. It uses AMFI/CoreTrust signature-verification bugs to install apps persistently with powerful entitlements on specific old firmware.

Hard compatibility boundary

The official project lists:

  • iOS/iPadOS 14.0 beta 2 through 16.6.1;
  • iOS/iPadOS 16.7 RC build 20H18;
  • iOS/iPadOS 17.0.

The maintainer states that 16.7.x other than that RC and 17.0.1 or later are unsupported unless another CoreTrust bug is discovered (TrollStore). A website claiming TrollStore support on current iOS should be treated as misleading or as a different product using the name.

Exploit compatibility is not installer compatibility

A device can contain the CoreTrust bug but still need a separate installation vector appropriate to its chip and exact build. Installer names and supported paths vary across 14, 15, 16.6.1, 16.7 RC, and 17.0.

Use the official project and its linked installation guide. Never select an installer from a search result based only on the major iOS number.

Match the installer family to firmware and chip

The linked guide assigns one installer family per exact firmware and chip class. The families are not interchangeable:

RangeDirection
14.0 beta 2 through 16.6.1, most devicesTrollInstallerX or TrollHelperOTA
15.5 through 15.8.6 pocketsTrollInstallerMDC or TrollMisaka for the exact subrange
15.8.7 and later 15.x, 16.7 RC, 17.0TrollRestore

Confirm the exact cell at ios.cfw.guide before running anything. A tool that offers one universal installer for every version is not following this table.

Why people preserve it

  • Installed apps do not follow the seven-day Personal Team cycle.
  • Apps can receive entitlements unavailable through normal free signing.
  • Installation and updating happen on-device after TrollStore is established.
  • TrollStore itself does not require the device to remain jailbroken.

What it does not promise

  • Compatibility with 17.0.1 or newer.
  • Safety of arbitrary IPA files.
  • App Store services tied to a legitimate App ID.
  • Normal sandbox assumptions for apps granted elevated entitlements.
  • Protection after an OS restore or update that removes the installation path.

Update decision

Staying on vulnerable firmware preserves TrollStore but also preserves security flaws. Updating takes security fixes and permanently loses this CoreTrust route on unsupported versions. Make that decision deliberately. Do not delay updates based on rumours of a future installer.

Keep it installed and preserve firmware

  • In TrollStore settings, install the persistence helper into a system app. Without it, an icon cache reload returns TrollStore and its apps to an unlaunchable state (TrollStore).
  • Turn off automatic iOS updates while preserving firmware.
  • Supervised devices can defer offered updates up to 90 days under Apple's declarative management policy (Apple Developer). Supervision is itself a device management commitment, so research its effects before applying it to a daily phone.
  • Update TrollStore itself from its settings screen or with the TrollStore.tar release file, never by reinstalling through an unrelated tool.

Fake-site warning

TrollStore is free and open source. The canonical repository is opa334/TrollStore. Avoid “TrollStore for iOS 26/27” profiles, paid unlocks, and cloned download sites.

Paid CertificatesFrom cert.fish: no computer, no weekly refresh. One purchase for one iPhone.Buy - £6.75