Signme.
Sign an app with your Apple certificate.
Your private key stays on this device.
Nothing is uploaded during signing.
Ready to Install
Install with Safari
iOS needs an HTTPS file URL. Optionally upload only the signed IPA to temporary Cloudflare storage. Links expire after 15 minutes from upload creation. No R2.
What You Need to Know
- Use an IPA you are authorized to sign and a valid Apple signing identity. This does not create certificates, register devices or bypass Apple restrictions.
- Safari over-the-air installation needs an eligible ad hoc or enterprise distribution profile. Ad hoc devices must already be registered in the profile. Development/free Apple ID and App Store profiles do not work for this flow.
- Signing success does not guarantee installation: certificate trust/revocation, entitlements, device eligibility and iOS version still apply. Some devices need Developer Mode or Settings → General → VPN & Device Management trust steps; manually installed enterprise apps may require a restart.
- Large apps may exceed Safari’s memory budget. Keep this tab open; try a smaller IPA if it closes. Encrypted App Store IPAs and symbolic links are not supported.
- Local signing uses a disposable Web Worker and WebAssembly. No Apple login, analytics, third-party CDN, IndexedDB or localStorage.
- Temporary hosting uses Durable Object SQLite, not server-memory-only storage. The signed IPA includes a public certificate and provisioning profile. Anyone with the random install URL can download it until expiry. Deletion removes active storage, not necessarily platform backups.