github pwnapplehat/iPASide v1.1.0
iPASide 1.1.0

latest releases: v1.2.5, v1.2.4, v1.2.3...
one month ago

Warning

This release has a bug: the Install LiveContainer button does not work (it fails with download() got an unexpected keyword argument 'variant'). Please use 1.1.1 instead, which fixes it. Everything else in 1.1.0 works; only LiveContainer install is affected.

Sideload as many apps as you like ÔÇö by running them inside one.

More than three apps

A free Apple ID lets your iPhone hold three sideloaded apps at once. That is the limit
most people hit first, and it is the one limit here with a way round it.

iPASide now installs LiveContainer in one
press ÔÇö signing it with the entitlements it needs and handing it your signing certificate ÔÇö
and then puts apps inside it for you, straight from the app. Those apps are never
installed on your phone, so they use none of your three slots.

They also have no 7-day expiry of their own. iOS never installs them, so it never checks:
one of the test apps has been running happily on a provisioning profile that expired nine
months ago. They keep working as long as LiveContainer does, and iPASide already refreshes
that for you.

Refresh without the PC

Each LiveContainer release ships a second build with SideStore inside the same bundle id ÔÇö
so a store that can re-sign apps on the phone costs no extra app slot. iPASide installs
that build by default and gives it this computer's pairing file, which normally takes a
manual export. SideStore exposes its refresh as a Shortcut, so it can run on a schedule.

Two honest caveats, both stated in the app rather than left for you to hit:

  • It needs a local device tunnel (StosVPN, LocalDevVPN) connected while it works. This is
    not a "phone alone in airplane mode" story.
  • SideStore runs an iOS Shortcut named exactly TurnOffData when it finishes. If you have
    not made one, the Shortcuts app opens with an error even though the refresh succeeded.
    Shortcuts cannot be created from a PC, so iPASide tells you what to make.

A new Account tab

Every certificate on your Apple ID, with the tool that registered each one. This exists
because Apple counts development certificates per machine, not per account ÔÇö so one
Apple ID happily holds several at once, and revoking the wrong one silently stops a
different tool's apps from opening. Also lists your App IDs and devices, for any Apple ID
you have signed in.

Fixed

Four bugs, each invisible until it was hit on real hardware:

  • iPASide was revoking other tools' signing certificates. When it needed a new one it
    revoked every development certificate on the team ÔÇö which would destroy your Xcode
    certificate, or SideStore's, on a fresh install or a lost cache. It now only ever revokes
    its own.
  • Apps with nested Swift package frameworks could not be signed. zsign writes a
    temporary file beside every binary it re-signs, and a deeply nested bundle overflowed
    Windows' 260-character path limit ÔÇö killing zsign with no message at all. The working
    directory is now sized against the app up front.
  • slots reported the App ID limit as spare capacity. It printed 2/10, but the ten
    counts new registrations over a rolling week while the list is what exists. Reading
    "eight to spare" was how you got refused mid-install.
  • A refresh never re-delivered LiveContainer's certificate, so a reissued certificate
    left it holding one that no longer matched ÔÇö installing and launching fine, then failing
    only when it tried to sign.

Verify your download

Get-FileHash .\iPASide-Setup-1.1.0-x64.exe -Algorithm SHA256

Compare against SHA256SUMS.txt below. The installer is not code-signed, so Windows will
warn you the first time; build from source if you would rather not trust a binary.

Tested on an iPhone 8 Plus (iOS 16.7.15) with a free Apple ID over USB. 1,062 automated
tests, and the installer was installed and driven against that phone before this release
was published.

Don't miss a new iPASide release

NewReleases is sending notifications on new releases.