“Unable to Verify App”
Why iOS cannot verify a sideloaded app's developer, often after a restart, and how to tell a blocked check from a revoked certificate.
iOS shows “Unable to Verify App” or leaves the developer “Not Verified” when it cannot confirm with Apple that the signing certificate is still valid. Either the check could not reach Apple, or Apple answered that the certificate is no longer valid.
Use when
- an app that worked stops opening after a restart, an update or a day offline;
- Settings > General > VPN & Device Management shows the developer as not verified;
- tapping Verify App fails or does nothing.
If the app never installed in the first place, use Integrity could not be verified instead.
Why it happens
Apple states that development and ad hoc apps from developer teams created after June 6, 2021 must check in with its PPQ service on first launch, that the device needs an internet connection for this, and that firewalls must allow https://ppq.apple.com. If the check cannot complete, the app may not launch.
Anything that blocks that host breaks verification. The usual cause is a DNS profile or blocklist installed to stop revocation: it hides ppq.apple.com from the phone, so a check that is due cannot run.
Fix it in this order
- Turn on Settings > General > Date & Time > Set Automatically.
- Turn off any DNS profile, ad blocker or VPN that filters Apple hosts. Check Settings > General > VPN & Device Management for one you forgot.
- Connect to a normal Wi-Fi network.
- Open Settings > General > VPN & Device Management, tap the developer and tap Verify App.
- Open the app once while still online.
If it verifies, the network was the cause. Turning the blocker back on will cause the same failure at the next check.
If it still fails while online
Then Apple has most likely refused the certificate. Check it before doing anything else: the certificate checker reads your P12 or profile in the browser and asks Apple whether the certificate is revoked.
| Checker result | What it means | Next step |
|---|---|---|
| Not revoked, not expired | The certificate is fine | Look at the network again, or at the error index |
| Revoked | Apple has invalidated it; every app signed with it fails | Ask your provider for a replacement, or get a new certificate |
| Expired | Its validity has ended | Get a new certificate |
A revoked or expired certificate cannot be verified again. Reinstalling, restarting or changing DNS does not change Apple's answer.
Limits
- Blocking
ppq.apple.comkeeps the check from running; it does not make a revoked certificate valid. - Apple does not document how often a device rechecks an installed app, so a blocked app can work for days and then fail.
- Back up app data before you re-sign. See revoked, expired or just broken.
Sources
- Apple Developer: Provisioning profile updates
- Apple Developer Forums: ppq.apple.com returning 502, unable to verify developer apps