Refresh failures and App ID limits
Fix seven-day expiry, three-app limits, ten-App-ID exhaustion, and refresh connectivity.
Free signing has two ceilings: three installed apps per device and ten registered App IDs during the seven-day window. Extensions can make one app consume multiple IDs.
Three-app limit
AltStore or SideStore itself counts. Deactivate or remove a less important app, use LiveContainer for compatible guests, move to paid membership, or choose a certificate model. Version-specific limit bypasses do not necessarily remove the App ID limit.
Ten-App-ID limit
App IDs expire on their own schedule. Deleting the app does not immediately release them. Check the App ID list and wait. Remove optional extensions only if you accept losing their features.
AltStore refresh
Confirm AltServer, firewall permission, same usable network or USB, Wi-Fi sync, device trust, account session, and that another tool has not replaced the signing certificate.
SideStore refresh
Confirm LocalDevVPN, Wi-Fi as required, correct device IP, current pairing file, supported SideStore release, and a healthy account/anisette path.
Recover without deleting
Re-sign and install over the existing app with the same Apple Account and bundle ID. AltServer can reinstall AltStore over an expired copy. SideStore may need its host refreshed before managed apps.
“The identity used to sign the executable is no longer valid”
What install error 0xe8008018 means, how to check whether the signing certificate is revoked or expired, and what to do when it is not.
“The provisioning profile is banned”
What the banned provisioning profile error means for free Apple ID signing in Sideloadly and SideStore, and which options do not depend on that Apple ID.