Installing Third-Party Apps on iOS Without Jailbreak
Apple’s ecosystem is often called a “walled garden” for a reason: the company tightly controls what users can and cannot do with their devices. On iOS and iPadOS, this control reaches the point where even the legitimate owner of a device cannot install apps outside of the curated and censored App Store. In this article, we’ll look at ways to bypass this limitation, from the simplest “one-click” methods to more complex but reliable solutions.
Why You Can’t Just Install an App
Modern mobile platforms only allow code to run if it’s digitally signed. On Android, you can install an app package signed with a regular digital certificate. On iOS, it’s more complicated: the package is signed at installation, and the unique digital signature for each device only allows the app to run on the device it was created for.
On top of that, only Apple can issue (and revoke!) these digital signatures. This means that any unsigned (or “incorrectly” signed) code simply won’t run on your device.
The Official Way: Developer Account
The simplest and only fully legitimate way to install apps outside the App Store is through official channels. This path is complicated and generally unavailable to regular users.
One method is enterprise and special distribution. For example, with enterprise distribution, an organization (like a school or large company) registers a corporate account, allowing them to sign app packages and distribute them to corporate devices via MDM (Mobile Device Management). This uses a special enterprise certificate, usually valid for one year, with no limit on the number of apps signed. When launching an app signed this way, users may need to add the certificate to their trusted list in settings, which requires contacting Apple’s servers for approval.
There are several catches: only organizations (not individuals) can participate, it’s a paid program, and Apple still controls whether an app can run on a specific device. If Apple suspects misuse, the certificate can be instantly revoked, disabling all apps signed with it. These certificates often leak and are used by “alternative app stores.”
Another variation is special distribution for Apple Developer Program members, mainly for developers to test their own apps on their devices. This requires a developer account ($99/year) and allows installing apps on up to 100 devices per year. However, removing a device from your account does not free up a slot. This method also requires a Mac with Xcode, making it less accessible and more expensive for those without a Mac. Apple may also deny registration for a developer account without explanation, especially if you use a new Apple ID or unverifiable information.
Semi-Official Method: Cydia Impactor
This method uses an official developer account, but instead of Xcode, you use Cydia Impactor to sign and install the app. Cydia Impactor is simpler than Xcode and works on macOS, Windows, and Linux. However, you still need an Apple ID registered in the Apple Developer Program. You’ll also need to create an app-specific password for your Apple ID.
- Connect your iPhone to your computer and establish a trusted connection.
- Launch Cydia Impactor.
- Drag the IPA file of the app onto the Cydia Impactor window.
- Enter your developer Apple ID and app-specific password.
- If your Apple ID is registered in multiple developer programs, select the correct one.
- Confirm the prompt, and Cydia Impactor will sign and install the IPA on your device.
That’s it! The app is ready to use. This method is correct, but what if you want to use a regular Apple ID? It’s possible, but with limitations.
Going Gray: Signing with a Regular Apple ID
Signing an app with a regular (non-developer) Apple ID used to be possible, though with restrictions: the app would only work for seven days, and you could only have up to three such apps installed at once. Apple tried to close this loophole in 2019, but it still works on macOS. If you have a Mac, you can try the following tools:
Nullximpactor
Nullximpactor is an alternative to Cydia Impactor for macOS that allows signing with regular Apple IDs. The developer recommends using disposable Apple IDs without two-factor authentication, or you’ll need to create an app-specific password. It’s easy to use after initial setup, but only works on macOS, requires AltDeploy setup, and still has the seven-day/three-app limit.
iOS App Signer
iOS App Signer uses Xcode to sign apps, bypassing the need for a developer account (but the seven-day/three-app limit still applies). It’s more complex to set up, but detailed instructions are available on GitHub. It only works on macOS and requires Xcode.
AltDeploy and AltStore
AltStore is a popular way to install unofficial apps and emulators on iOS without jailbreak. You can find installation instructions on the project website. AltStore lets you control the IPA source and uses your own certificate, so Apple can’t suddenly revoke it like with some online services. However, you’re still limited to three apps for seven days, and you need to install and configure both iTunes (with Wi-Fi sync enabled) and the AltServer app on your computer to automatically re-sign apps every week. This is a lot of effort for just three apps, but with a developer account, it becomes more practical.
AltDeploy is a fork of AltStore that lets you sign and install apps directly from your Mac, but requires the same setup as AltServer. Instructions here.
Online Signing Services
There are free services that let you sign IPA files online, without connecting your device to a computer. For example, IPASign asks you to upload your IPA, p12 certificate, password, and provisioning file, then gives you a QR code to install the signed app on your iPhone. Be cautious about uploading your own certificate to anonymous services. If you have a leaked enterprise certificate and want to test it, this is an option.
IPAWind is another such service, allowing you to sign with your own or their certificate. As a bonus, you can edit the manifest to install duplicate apps (e.g., two WhatsApp accounts) or enable iTunes Sharing for app files.
Alternative App Stores
The above methods are official or semi-official. The following methods clearly violate Apple’s policies and may infringe on other rights holders.
Third-party app stores are easy to install and use (just open the store’s page in Safari, tap a button, and install the alternative app store, then trust the certificate). There are both free and paid options. The most popular include:
- Ignition – specializes in jailbreak utilities, tweaks, and patched apps.
- TweakBox – offers utilities, emulators, jailbreaks, and more (catalog).
- iPASTORE – a paid (subscription) third-party app store.
Other options include AppValley, CokernutX, Panda Helper, AppDB (paid), TweakDoor, Emus4u, iPABox, Zestia, and more. Not all survived iOS 14, but many still work.
All these stores violate Apple’s policies by misusing developer or leaked enterprise certificates. Apple regularly blocks these certificates, but services quickly replace them and re-sign both the store app and installed utilities. There are risks: a revoked certificate can make your app unusable, and modified apps may contain malware or even compromise your device, especially on older iOS versions. Use at your own risk.
For jailbroken devices, there are several app stores: Cydia, Sileo, Zebra, Installer 5. Developers often have a preferred store, but you can install multiple stores in parallel. Jailbroken devices have no limits on the number of installed apps or their duration.
TestFlight
TestFlight is Apple’s official beta testing service and app. It simplifies distributing test builds and collecting device UDIDs. Test builds are temporary; when the certificate expires, you must update to the official version or install a new test build. Both organizations and individual developers can use TestFlight, but individuals are limited to 100 devices per year. Some developers use TestFlight to distribute apps that aren’t accepted in the App Store, such as Soap4me for iOS. However, this method is too complex for most users.
Where to Get IPA Packages?
The most well-known IPA repository is iOS Ninja. You can download IPA packages and Apple firmware images for various devices. Downloaded IPA files must be signed using one of the methods described above before installing on your iPhone.
Conclusion
“Pay or suffer”—that’s the takeaway from this article. If you pay for a developer account, you can forget about sketchy (and often not free) services and their risks. However, getting into the Apple Developer Program is not always easy. The free alternative, AltStore, requires significant effort to set up and constant re-signing of installed apps, which needs a server running on your computer. Jailbreaking is a universal solution, but you lose one of iOS’s main advantages: regular updates. Which method to use—and whether it’s worth it—is up to you.