FAQ

Sideloading means installing apps on your iPhone, iPad or other Apple device that don't come from the App Store, like emulators, tweaked apps, open source apps and betas. It's done through Apple's own developer signing system, so there's no jailbreak needed and your device stays exactly as it is.

FlareStore certificates work on everything from iOS 7.0 all the way up to iOS 27.2, so you don't need to worry about software updates.

No computer needed, and no jailbreak either. Sideloading is an easy jailbreak alternative that can be done all on-device with the FlareStore application.

Apple TV works a little differently, since it can't install apps on its own. You'll need a certificate for the Apple TV, plus one for the iPhone or iPad you're sending the apps from. If you have a Mac, you can use the FlareStore Mac app to send apps to your Apple TV instead, and the Mac doesn't need its own certificate for that.

UDID stands for Unique Device Identifier, which is a value every Apple device has. Apple requires your device's UDID to activate certification. You can find yours at udid.website.

It only takes about 30 seconds, and you only need to do it once per device.

Apple devices won't open an app unless it's been signed. That goes for iPhone, iPad, Apple TV and Vision Pro, and for iPhone and iPad apps running on a Mac. App Store apps are signed by Apple automatically, so anything from outside the App Store has to be signed by you.

A certificate is what lets you do that. It comes as a P12 file and a mobileprovision profile, and you attach both to an app to make it installable on your device. That's what your plan gets you.

You can sign as many apps as you want with one certificate, using the FlareStore app or our Web Signer. It also works with any other signing app that accepts a P12 and mobileprovision, like ESign, KSign and Feather.

Certificates work on:

Every iPhone 18 model and every iOS 27 release through 27.2 is supported. If your device is too old for the FlareStore app, the certificate still works, just use the Web Signer or another signing app with it.

Every plan covers one device for one year and is a one-time payment. The difference is the type of certificate you get.

Pro and Premium also get you access to FlareStore beta and early releases. If you're not sure, Basic covers what most people need, and you can always add another plan later.

Most users will find distribution certificates enough for their use cases, however apps that require JIT (Just-In-Time), extra RAM or memory, emulators, etc. require development certificates.

Distribution is also the one you want for push notifications.

JIT (Just-In-Time compilation) is what lets an app build and run code while it's running. Most apps never use it, but emulators rely on it to run games at full speed.

If you're using emulators like Dolphin, MeloNX or UTM, you'll want JIT, so go with Standard, or Premium if you also want PPQLess. If you're mostly signing tweaked apps or utilities, you don't need it, and Basic or Pro is the better pick.

PPQ (Provisioning Profile Query) is a system Apple uses to track detailed information about which apps are being installed and opened on your device with a signing certificate.

PPQLess signing doesn't send that tracking data to Apple, so Apple doesn't see what you sideload or open. It's more private, and since there's less for Apple to act on, it's also the most stable option we offer. Our Pro and Premium plans are PPQLess.

One year from the day you redeem it. You pay once and that covers the full twelve months.

For that whole year your apps keep working without a weekly refresh or any re-signing. Install an app once and it stays installed.

You can check the exact expiry date of your certificate any time with our certificate checker at mobilepro.vision.

One. Every plan is one device.

Your certificate is tied to the UDID you register it to and will only ever work on that device. This is an Apple restriction, not ours. If you have two devices you will need two plans.

When prompted, enter the UDID of their device. You can get it by going on their device (or having them do it) and grabbing their UDID from udid.website.

Don't enter your own UDID and plan to move it over later. Registration can't be undone.

No. Your certificate is registered to one device's UDID, and Apple doesn't allow a registered device to be swapped out for a different one once the certificate has been issued. This is a limitation on Apple's end, not something we set, and it's the same with every signing service.

If you get a new device, you'll need a new plan for it.

Yes, as many as you want. There is no limit, and one device can be registered on several certificates at once.

People usually do this to hold a JIT certificate and a PPQLess certificate at the same time, or to line up a replacement before their current one expires.

All of them. Our certificates carry a full entitlement set so your apps keep the features they were built with instead of quietly losing them. Distribution certificates include 43 entitlements and development certificates include 44.

The ones people ask about most: push notifications, iCloud, Sign in with Apple, VPN and Network Extension, HealthKit, HomeKit, Game Center, Siri, WeatherKit, NFC, Wi-Fi info, Hotspot configuration, increased memory limit, associated domains, app groups and keychain sharing.

The full list with every value is on the store page under Entitlements.

At the end of your year, just buy a new plan and re-sign your apps with the new certificate. There is no auto-renewal and nothing to cancel, so you are never charged without meaning to be.

We recommend buying at least a week before your current certificate expires so you do not get a gap where your apps stop opening.

We accept almost all main payment methods at the moment available in the USA, temporarily excluding PayPal. We also offer a wide range of international payment options via Stripe. View our checkout page to view them all!

We only offer refunds if your plan has not yet been redeemed. If you have linked your device with us and have already received your certificate, you will not be eligible for a refund. That's because once a device is registered with Apple, it can't be taken back off.

If you face issues with your certificate, and after troubleshooting with staff we determine that it is defective on our end or Apple's end, we will refund you.

Making a ticket on our Discord server is the best way to reach us, or feel free to shoot us an email at [email protected].

To get sorted faster, include your order ID or receipt number, your device model and iOS version, which plan you bought, and the exact error you are seeing or a screenshot of it.

We do offer wholesale pricing for resellers, please send us an email or make a ticket in our Discord server for more information!

We run two tracks: affiliate, where you take a link and earn commission and we handle everything else, and wholesale, where you buy slots at your own rate and resell them under your own brand. Both come with a dashboard and an API key. More detail at flarestore.vip/partners.

You will receive an email from Stripe and will automatically be redirected to the redemption page, where you can enter your UDID (Unique Device Identifier) to register your device with your receipt.

If you closed the page before redeeming, no problem. Go to flarestore.vip, use Claim With Receipt and enter the receipt number from your Stripe email. Already redeemed and need your files again? Use Check Existing Order with your UDID.

Instantly in most cases. Once you redeem with your UDID, your certificate is issued right away.

If nothing arrives after a few minutes, it is almost always because the UDID entered was not a valid UDID. Double check it at udid.website, and if it still will not go through, make a ticket on Discord with your receipt number and we will sort it.

The password for every FlareStore certificate is flarestore, all lower case.

You will be asked for it when you import the P12 into the FlareStore app, the Web Signer, or any other signing app.

Go to Settings > Privacy & Security > Developer Mode and turn it on. Your device will restart.

The toggle stays hidden until you try to open a sideloaded app for the first time, so the order is: install the app, tap it, get the error, then go enable Developer Mode.

It only exists on iOS 16 and above. Older versions do not need it.

That's Stolen Device Protection. Go to Settings > Face ID & Passcode (or Touch ID & Passcode), enter your passcode, tap Stolen Device Protection and turn it off. You can turn it back on once the profile is installed.

As many as you want. There is no limit with a FlareStore certificate, and no three app cap like you get signing with a free Apple ID.

No. That is the free Apple ID method, and getting away from it is the main reason people buy a certificate in the first place.

With a FlareStore plan your apps keep working continuously for the full year. No weekly refresh, no re-signing, nothing to plug in.

Install the new version straight over the old one. It keeps your data.

Exactly like any other app. Long press the icon and delete it. Nothing special to do and nothing left behind.

Use a distribution certificate and keep the app's original bundle ID. Push then works automatically, because the push entitlement is already on the certificate.

If you change the bundle ID, for example to run a second copy of an app, push will not work on that copy. Apple ties push to the bundle ID that was registered, so there is no way around it.

Change the bundle ID on one of them in our Web Signer or in the FlareStore app. Two apps can't share a bundle ID, they'll just overwrite each other.

Just so you know, the copy with the changed bundle ID won't get push notifications, and it won't share any data or logins with the original.

Yes. VPN and Network Extension entitlements are included, and sideloaded apps work normally while a VPN is running.

Use our certificate checker at mobilepro.vision. Import your mobileprovision file and it'll show you the status, the expiry date, the registered UDIDs and the capabilities on the certificate.

Usually your ISP is blocking the servers OTA installation needs. Change your DNS and try again, the 1.1.1.1 app from the App Store is the quickest way to do it.

Force restart your device. On iPhone 8 or newer:

1. Press Volume Up and release
2. Press Volume Down and release
3. Hold the side button until the Apple logo appears, then let go

On older iPhones with a Home button, hold the Home and side buttons together until the Apple logo appears (on iPhone 7, it's Volume Down and the side button).

Once your device is back on, delete the stuck app and try installing it again. If it gets stuck a second time, try a different IPA of the same app, since the file itself could be the problem.

Go through these in order:

1. Make sure Developer Mode is on (iOS 16 and above).
2. Make sure you have an internet connection. iOS has to reach Apple to verify the app the first time you open it.
3. If you use our DNS profiles, switch to Pre-Install (PPQ Allowed), refresh your connection, then open the app.
4. Try a different DNS, such as the 1.1.1.1 app, in case your ISP is blocking Apple's verification servers.

If it still fails and you are on a free certificate, that certificate has almost certainly been revoked or blacklisted. That is normal for free certificates and it is what a paid plan solves.

No, and it wouldn't work anyway. Your certificate is tied to the UDID it was registered to, so apps signed with it will only ever run on that one device.

If someone else wants to sideload too, they'll need a plan for their own device.

Revokes, while very rare, are possible and are caused directly by Apple. We don't offer plans with revoke protection at this time, however we have many measures in place to minimize the risk of our certificates being revoked.

The biggest one is PPQLess signing, which comes with our Pro and Premium plans. A PPQLess certificate doesn't send tracking data to Apple about which apps you sideload or open, so there's much less for Apple to see and act on. If you want the lowest chance of ever being revoked, that's the plan to pick.

We also don't offer free or shared enterprise certificates as part of any plan, and we don't recommend them. Those get revoked constantly because thousands of people share each one, and Apple spots them fast.

You can also use our free DNS method alongside a paid plan for an extra layer of protection.

Free certificates are shared enterprise or developer certificates that anyone can download. They don't need UDID registration, which sounds convenient, but it's exactly why Apple finds them so fast.

A blacklist is worse than a revoke, because it can stop your device from using free certificates at all until it's reset. A paid certificate still works fine on a device that's been blacklisted from free ones.

The free certificates on our site are there so you can try the tools and see how signing works. If you actually want to use sideloaded apps day to day, get a plan.

No, it is optional. Your certificate is registered to your device alone, so it is not exposed the way a shared free certificate is, and it works with no DNS profile installed at all.

Plenty of people run it anyway as an extra layer, and that is fine. It does not conflict with a paid plan.

It uses two configuration profiles that toggle access to ppq.apple.com, the server iOS uses to check a certificate. Switching between them is your on and off switch. There's no DNS app to install and nothing to configure.

There's also a Stealth pair that uses a generic identifier, so the profile doesn't show up as an obvious third-party DNS profile. Full instructions, the domain list, a template to build your own profile and a NextDNS setup are all on our DNS page.

An Apple TV can't download, sign or install apps on its own, so everything goes through the FlareStore app on another device. You'll need two things:

1. A certificate registered to the Apple TV itself. You need one for each Apple TV you install to.
2. The FlareStore app on an iPhone, iPad, Mac or Vision Pro. An iPhone, iPad or Vision Pro needs its own certificate to install FlareStore. A Mac doesn't.

Once you have both, it goes like this:

1. Pair. In the FlareStore app, go to Settings > Devices > Apple TV. On the Apple TV, open Settings > Remotes and Devices > Remote Apps and Devices and stay on that screen. After 10 to 45 seconds it should show up in FlareStore. Enter the code shown on your TV.
2. Install the VPN profile FlareStore asks for after pairing. It's only needed while you're installing apps to the TV, so you can switch it off when you're done.
3. Import your Apple TV certificate in FlareStore under Settings > Certificates > Add Certificate. Add the P12 and mobileprovision, and the password flarestore.
4. Sign and install. Import a tvOS-compatible IPA, tap Edit, pick your Apple TV certificate and sign it. The Install button turns into an Apple TV button. Choose your TV, make sure it's connected, and install.

Apple TV support is still in beta. The full walkthrough is in our Apple TV guide.

Yes, and it works pretty much the same as on iPhone. Grab your Vision Pro's UDID like you would for any other device and buy a plan for it. visionOS 1.0 through 27.2 is supported.

Use your certificate to install the FlareStore app on your Vision Pro with our Web Signer, then import and sign apps right inside FlareStore.

There's a step-by-step visionOS guide if you want to follow along.

Yes. Certificates cover macOS 11.0 through 27.2, and the FlareStore Mac app runs on macOS 13.0 and above. The app itself installs without a certificate.

To run iPhone and iPad apps on a Mac, you'll need one with Apple silicon (M1 or newer) and a certificate registered to that Mac. Intel Macs can't run iPhone or iPad apps.

Setup steps are in our macOS guide.

Yes, FlareStore is very legit! We offer real human support for any questions or concerns you might have, and we take as many measures as possible to ensure the quality of your signing experience! Additionally, we love as much community feedback as we can get! Please reach out any time on our Discord by making a ticket, or shoot us an email for any questions, feedback, bug reports, ideas for features you might want to see added to FlareStore, or anything else!

Not at the moment, but it's something we're considering. Before we open anything up, we want more feedback from the community and more stability improvements in place.

In the meantime, our DNS method is fully public, including the profile template and domain list, so you can set it up yourself without us.

That's just how Apple's developer program works. Certificates are issued under a registered developer team, and your device gets added to that team, so the name on your certificate is whichever team issued it. Depending on the team, that could be a company name or a developer team name you don't recognize, and it won't necessarily say FlareStore.

It has nothing to do with the apps you sideload, and it doesn't give that team any access to your device or your data. What matters is that your UDID is registered on its own instead of on a certificate shared with thousands of strangers, which is what keeps it stable.

Certificates and apps you upload are processed on our servers just long enough to sign them, then deleted. We don't keep your P12 files, passwords or provisioning profiles.

What we do keep is your order details and payment records, which we need for tax and legal reasons, and your UDID for as long as it's registered on Apple's platform.

Card details are handled entirely by Stripe and never reach us. The full breakdown is in our Privacy Policy.