sign-decrypted-ipa.sh — resign & sideload an IPA

This repository contains a script to sign a decrypted IPA with your own Apple signing identity so it can be sideloaded onto a device.

Note: This guide requires you to have a MacOS device with Xcode installed.

Note 2: Due to the limitation of a free developer certificate, certain advanced entitlements and app extensions (such as Network Extensions or Push Notifications) may be restricted or unavailable. This is the common cause of "installation of stuck at 49%", "AMDeviceSecureInstallApplication".

Requirements

• macOS with Xcode + Command Line Tools (codesign, security, PlistBuddy).
• ios-deploy: brew install ios-deploy.

Guide

1. Make sure you have installed Xcode, after that launch Xcode and open Settings.

2. Navigate to Apple Accounts and add your Apple account there:

After finish, it should look like this:

3. Create a project in Xcode. Note that you can name the Product Name and the Organization Identifier anything you want.

Note: the side effect of this is that the IPA will be installed with this identifier, not the app's expected identifier. For example, Apollo Reborn has the original identifier com.christianselig.Apollo, if you sign with this guide, it will be named under the name you chosen.

4. Xcode will launch, at this stage, you should got your phone plugged in.

5. Click as in the photo, then choose the team that's available. This should show your Apple ID:

At this point, you can close Xcode.

6. Launch sign-decrypted-ipa.sh

Note: If you do not trust my script, you can feed it to any virus-scanning tool like VirusTotal or ask an AI assistant to analyze it.

./sign-decrypted-ipa.sh <input.ipa> --install

At this step, it should automatically run, but I have several projects so I just select the newly created one then press Enter:

Now just wait: