cert.fish Guide

Method comparison

Select an Apple app-installation route by cost, computer use, expiry, limits, review, and OS compatibility.

Arbitrary IPA installation

MethodComputerLifecycleMain limitUse when
Paid CertificateNoneNo refresh, commonly up to 1 yearCertificate revoke possibleNo computer, no weekly refresh
AltStore ClassicSetup + refresh access7 days with free account3 apps, 10 App IDsEstablished free workflow
SideStoreInitial setup7 days with free account3 apps, 10 App IDsOn-device refresh matters
Paid Developer accountTool-dependentCommonly up to 1 yearAnnual membership/device policyYou want account control
SideloadlyMac/Windows, USB or Wi-Fi7 days free; longer paidAccount/profile limitsDirect install and logs
LiveContainerInitial host setupHost app must stay validGuest compatibilityMany apps in one host slot
TrollStoreInstaller-dependentPersistentiOS 14.0 beta 2 to 16.6.1, 16.7 RC, 17.0Compatible old firmware
AppSyncWorkflow-dependentJailbreak-dependentRequires jailbreakDevice is already jailbroken

Apple documents free Personal Team limits at three apps, ten App IDs, and seven-day profiles (Apple Developer).

Paid CertificatesFrom cert.fish: no computer, no weekly refresh. One purchase for one iPhone.Buy - £6.75

Apple-managed distribution

RouteReviewAudienceUse when
TestFlightBeta review for external testersInvited/public-link testersPre-release testing
Unlisted AppFull App ReviewAnyone with linkPublic app without discovery
Custom AppFull App ReviewNamed organizationsBusiness/school distribution
Alternative marketplaceApple notarization + marketplace policyEligible regionsMarketplace carries the app
EU Web DistributionApple notarizationEligible EU usersApproved developer hosts own app
Ad hocNo App ReviewRegistered devicesSmall controlled test fleet
Enterprise/MDMOrganization responsibilityEmployees/internal usersEligible organization owns deployment

Compare official routes in detail.

Selection rules

  1. Prefer App Store, TestFlight, or official alternative distribution when the app is available there.
  2. For free arbitrary-IPAs, choose AltStore for maturity, SideStore for computer-free refresh after setup, or Sideloadly for a direct desktop workflow.
  3. Use a paid account when ownership and capabilities justify annual cost.
  4. Use a certificate provider only after assessing identity custody, UDID handling, revocation, and replacement terms. Compare providers by price and replacement terms. If you use cert.fish for this, see what it supplies for this workflow.
  5. Use TrollStore only on the exact supported firmware.
  6. Add JIT only when the target app requires it. JIT is a separate runtime problem.

Quick recommendations

  • Beginner: AltStore, SideStore, or a reputable registered-device certificate.
  • App developer: Xcode, TestFlight, then the appropriate Apple distribution route.
  • Organization: Custom Apps or MDM before Enterprise.
  • Linux user: SideStore's supported installer path or maintained cross-platform tooling.
  • Old compatible firmware: TrollStore, after verifying exact build and official installer.
  • Many low-risk apps: LiveContainer, if its guest limitations are acceptable.