How to Sign IPA Files Free
Apple requires every iOS app to be cryptographically signed before it can run on an iPhone or iPad. Whether you download an app from a third-party source, install an emulator, or sideload a modified IPA, that file needs to pass through a signing process before your device will accept it. That's what this guide covers.
What Is IPA Signing?
An IPA file is an iOS application package — essentially a ZIP archive containing the app binary and all its resources. When you download an app from the App Store, Apple signs it automatically. But for apps outside the App Store, someone needs to sign them with a valid Apple Developer certificate.
Signing assigns your identity (the developer certificate) to the app. When iOS sees the app, it checks the signature against Apple's certificate authorities. A valid signature means the app is allowed to run. No signature — no install.
This is why sideloading apps requires a developer certificate. Without one, even a perfectly functional IPA file is rejected by iOS.
What You Need to Sign an IPA
Before you can sign an IPA, you'll need four things:
- IPA file — The app you want to install. Must be an uncompressed .ipa file.
- .p12 certificate file — Your Apple Developer certificate in p12 format, exported from Keychain Access on macOS or provided by your certificate vendor.
- .mobileprovision provisioning profile — Links your certificate to specific device UDIDs. Must include your device's UDID, or the signed app won't install.
- Certificate password — The password you set (or received) when exporting the .p12 file.
All four files are required. If any one is missing or incorrect, the signing process will fail.
Step-by-Step: Using CertDrop's Free IPA Signer
Step 1: Open the Free IPA Signer
Go to https://signer.certdrop.app/signer. The signer works on desktop and mobile — upload your files directly from your device.
Step 2: Upload Your IPA File
Click the IPA upload area or drag-and-drop your .ipa file. The signer accepts files up to 500MB. You'll see a confirmation once the file is uploaded.
Step 3: Upload Your .p12 Certificate and .mobileprovision Profile
Upload your .p12 certificate file and your .mobileprovision profile. Make sure both files correspond to the same developer account — mixing certificates from different accounts will cause signing to fail.
Step 4: Enter Your Certificate Password
Type in the password you used when exporting the .p12 file. The signer uses this to decrypt the certificate in memory during the signing process. The password is never stored after signing completes.
Step 5: Click "Sign IPA"
The signing process takes 15–30 seconds depending on the IPA size. A progress indicator shows you where in the process you are. Don't close the browser window during this step.
Step 6: Get Your Install Link
Once the IPA is signed, you'll receive an install link. Clicking the link on your iPhone opens the installation prompt. The signed IPA and install link are valid for 24 hours before auto-deletion.
Step 7: Install on Your iPhone
Open the install link on your iPhone. Tap "Install" when prompted, then trust the certificate in Settings → General → VPN & Device Management (or "Profiles & Device Management"). After trusting, the app launches normally.
Don't Have a Certificate?
If you don't have a .p12 certificate and .mobileprovision profile yet, you can purchase one from CertDrop. We sell 360-day Apple Developer certificates starting at $12 (crypto) or $14 (card).
CertDrop certificates work with Feather, ESign, and Scarlet — three popular iOS signing tools that handle the certificate import and app installation process. Once your certificate is installed in one of these apps, you can sign and install any IPA without needing a Mac or an Apple Developer account of your own.
Certificates are delivered instantly by email after payment. No Mac required. No developer account needed.
Get an Apple Developer Certificate — From $12
Frequently Asked Questions
Is IPA signing free?
Yes — CertDrop's free IPA signer is completely free to use. You only need to provide your own .p12 certificate and .mobileprovision profile. If you don't have one, you can purchase a certificate separately.
How long does the install link last?
The install link and your signed IPA are stored for 24 hours before being automatically deleted. After that, you'll need to sign the IPA again. Keep a backup of your original IPA file so you can re-sign if needed.
What file types do I need to sign an IPA?
You need four files: your .ipa file (the app), your .p12 certificate, your .mobileprovision profile, and the certificate password. All four are required for a successful sign.
Can I use a CertDrop certificate with this signer?
Absolutely. CertDrop sells certificates in the standard .p12 format with a matching .mobileprovision profile. Download both files from the link in your delivery email, upload them to the signer, and you're ready to go.
Why do I need to trust the certificate in Settings?
Apple requires all developer certificates to be explicitly trusted by the user before sideloaded apps can run. This is a security setting, not a bug. The first time you open a newly-signed app, iOS prompts you to trust the developer. Navigate to Settings → General → VPN & Device Management (or "Profiles & Device Management") and tap Trust. After that, the app runs normally without further prompts.
Certificates purchased from CertDrop work directly with Feather, ESign, and Scarlet, which handle this trust step automatically within the app. You still need to enable the developer mode in iOS settings, but you won't need to manually trust the certificate in Settings.