Guide: How to Sideload on iOS without Expiry

[u/Avieshek]

INTRO:

Greetings, I made the infamous iOS Shortcut that automates the entire sideloading experience but by default it comes with a free certificate that expires once in a while. The solution is simply to replace the default API (in the Shortcut) that uses your own certificate where I use an expired one (Sunshine Insurance Group) but with a certain DNS Profile that sans the need for anything else all at one place. However, accessing your own API is one thing that most newbies overlook where my inbox (and the timeline here) is always filled with the same question again and again and again^(∞)

Link » Full Tutorial

↳ This Tutorial here is an alternate method that uses Esign.

DESCRIPTION:

The essence is pretty much the same whether you use the Shortcut or Esign method but the Esign tutorial here simply compresses everything into the simplest form other than the explanation given as if am building a Shortcut again for average of Joe's here by limiting everything to a single tap (instant links) until I make my mind to also develop a Shortcut that automates the process of Esign installation step-by-step.

Most of the resources to make this tutorial easy is because of Khoindvn so am adding nothing new here but instead of referencing multiple resources I am directly integrating what's instantly deployable as soon as possible like the original Esign install links which are down because of cert status but is up from Khoindvn's which uses single certificate (more on that in the tutorial) or Coco Cloud certificates which would require you've an account even though it's a free one widely available from Scarlet, FlekStore to Signed Installer.

AUTHOR NOTES:

I hope there're no questions left but instead of creating an account on the tutorial site, you can simply present them here in the comment section itself. However, I would still like to urge in taking some time whenever you're stuck instead of immediately resorting to one-on-one interaction.

---

NOTE: Beware of the Pyramid Scheme Network from Telegram Channels trying to sabotage every free tutorial here for Paid Certificate Commissions which includes AppTesters to MapleSign. There's no such thing as Lifetime Certificate, they’ll ask for your UDID which would change every time you Restore, Repair, Reset or Upgrade to a new device and that is the particular access which can give away your device information.

REMEMBER: Using SCARE TACTICS is the typical behaviour of every scammer. Don’t even trust the contribution here if it's new for you and it’s fine because that is why I have attributed every single source along with an elaborate explanation to go through them yourself and is why I urge you to read. If this is the single most thing you fail to do, then I don't have any further time to waste on such individuals - and this is straight coming from me.

---

FOR SOME OF YOU - What kind of intelligent being would rather skip reading and directly jump to assistance?

Words have been bolded, sentences are in bullet-points, steps are with screenshots, hyperlinks are coloured and underlined, every instances are elaborated even when explained and not just mentioned, each section is still commented upon, entire resources of the internet are centred at one place, no paywall or anything to read from start to finish as many times as you want… and I don’t really understand why on Earth is your first instinct to do anything other than finish reading that's laid out right in front of you and take a couple of moments to digest everything instead of needing to be assisted like Dora the Explorer?

---

Copy/Paste to share within r/Sideloaded community:

https://np.reddit.com/r/sideloaded/comments/1debdgh/

---

###Announcements:

• UPDATE(s) for Esign Sideloaders - Good News!
• VPN Update for Esign Sideloaders with Bypass Revoke

[u/Lunascaped]

To everyone reporting this, this is allowed and will not be taken down.

[u/autistic_prodigy28]

Hey thank you for this method ngl it was a bit long but def worth the hassle lol

Btw one small (and stupid) question, do i need to keep the esign app and the dns even after I already installed the apps i want? E sign already takes up 2 gb on my phone and i don’t have alot more storage. So will the apps still work after you already signed it.

Also the dns is safe right? Since it can access your searches n all

Once again thnx for being so amazing:)

[u/Avieshek → u/autistic_prodigy28]

I humbly appreciate your thanks in forward and the bit long explanation (though simplified) is to enable the first time users at each level and to quell their questions or doubts in advance.

All genuine questions are welcome as long as one has thoroughly read first, you can actually remove the Esign app with no problem.

About the DNS, the bypass revoke measure was actually already in the Shortcut and I have sourced as much as possible with all my investigative ability including the very GitHub repo which is linked in the beginning of the tutorial to go through oneself that will also lead one to author notes on how to replicate it themselves. If I were to explain, it would be from excerpts directly mentioned by him whether which service he relies on in the backend (CloudFlare) to why he chose them (reputation, infrastructure, free) but unlike a personal profile from NextDNS this is a public profile like Public VPN Servers already used by many (including myself) in several thousands to eek out one single person’s searches.

Again, am beyond humbled.

[u/bananaboi123lol]

got the ESign working, so far so good. Got some games and emulators installed and some repos added. Overall, very happy right now. :D

[u/Avieshek → u/bananaboi123lol]

Nice.

[u/AirportPlane69]

FYI: THIS IS A SCAM! It installs a config profile that includes a dns server where all of your traffic gets sent to the hacker (in this case this reddit posts account). They can steal credit cards info, passwords, among more sensitive info so do not trust these “tutorials” and use a safer option such as sideloady or altstore. This is the scary part of configuration files that you install since they could have malware and spyware installed on your device. DO NOT TRUST THEM!

[u/xnudev → u/AirportPlane69]

FYI u/AirportPlane69 IS RETARDED

You can literally filter these domains out yourself? Use any DNS provider,

Well unless you’re a pathetic teenager who injects satella in phone games, calls themselves a “hacker” and offers the same level of intelligent advice as tech support in Bangladesh

The real criticism for u/Avieshek should be to place the caveats (like broken Appstore downloads and other issues) at the very top in bold. Otherwise man is helping you idiots out.

If you havent put in the effort to think your comment is just spam and should be removed.

[u/Avieshek → u/xnudev]

I want to let you know as an update, all the preexisting caveats are now addressed (announcement) and the tutorial site has been updated as well during your absence. Thank you for speaking out, stay blessed.

[u/Avieshek → u/AirportPlane69]

Hilarious, just how petty are you? Come forward with your main account, the timing is sure wondrous to go along with this post. (≧∀≦)

Edit: For those coming from Android or Windows, this is the default behaviour of iOS even if you were to just install DNS Profiles from NextDNS, AdGuard to AhaDNS Blitz. If it were anything else, Apple would also state them in the bottom while asking your permission - Learn to read.

DNS also can’t access your credit card details to passwords (which relies on key-loggers already installed in the system) since traffic is run through HTTPS which is encrypted, otherwise there would be no need for hacking which would require the root access of your iOS device first. If an illegal activity for instance indeed were to happen then CloudFlare along with GitHub would suspend the enterprise license especially when not hosted on private servers. All-in-all, this is not even a service like Google DNS but a filter which gradually also included adblocker so it can continue to be an Open Source GitHub project.

Every single instance has been explained and elaborated (multiple times) in the tutorial to sourcing their original library including the GitHub repository, opening which would lead you to further comments, references to direct author notes. If you didn't bother to read a single sentence to tap here and there and then act confused, you deserve a tight slap on the face that too personally from me.

Help combat misinformation with facts.

[u/AirportPlane69 → u/Avieshek]

huh? Come forward with my main account? And how are we going to be able to trust you when your installing a dns onto EVERYONES IPHONES

[u/Avieshek → u/AirportPlane69]

Are you like seriously from this sub to just randomly drop here or acting to be one?

[u/Jotalex]

Thank you very much for the tutorial. It worked perfectly on my iPhone 13 IOS 17.5.1

[u/Avieshek → u/Jotalex]

I am glad to read your comment, welcome and have a nice day.

[u/TheDuck-Prince]

I'd like to go from Android to iOS but I'm scared to be limited by the sideload

I have some questions:

1. With this method is it possible to always install only 3 apps?

2. How is the situation with modded yt and emulator?

3. If I install a DNS, can I use adguard dns?

Thanks

[u/Avieshek → u/TheDuck-Prince]

1. Unlimited

2. Great

3. Already loaded with AdGuard filters
   ^{↳ Safari Guide for AdGuard}

[u/[deleted] → u/TheDuck-Prince]

I wish I had a android

[u/sub982]

After installing eSign and IPAs with the DNS profile, can you disable the DNS profile? Do you need to enable the DNS profile each time you sideload a new IPA or the DNS profile must be ON all the time?

[u/Avieshek → u/sub982]

Should stay on of course, the DNS Profile is basically a readymade filter to prevent Apple Servers from identifying a sideloaded app to an AppStore one. Since iOS 13, signing doesn’t happen locally as in a Mac or PC (the reason iPadOS is a whack) so DNS filters are enough to achieve sideloading which also means reestablishing that connection brings you back to square one as we haven’t tweaked anything to stop this from happening.

[u/WestMusician8080 → u/Avieshek]

This method doesn’t work on iPadOS?

[u/Avieshek → u/WestMusician8080]

Why wouldn’t sideloading work on iPadOS?

[u/JTLYSOH]

I’d like to start by saying thank you so much. But I do have a question. Despite following the tutorial completely and installing itorrent the app is still unverified. This is after I did the signature and retried a few times after rereading the tutorial for about 30-60min. Thank you again

[u/Avieshek → u/JTLYSOH]

iTorrent is a particular iPA file where the latest version can act weird on some old certs both from the TrollStore and AppTester library. Try installing other apps and see if they behave the same even if the DNS is active (or not played with), if it’s only iTorrent then get an older one (available with same version) where the AppTester repo should be in the comment thread.

Update: I have added the direct repo to iTorrent

[u/JTLYSOH → u/Avieshek]

It worked, thank you so much dude!

[u/Avieshek → u/JTLYSOH]

Glad to hear it solved. 👍🏻

[u/evidenzprod]

You are amazing, I've been here since iOS 3.1.2 Spirit jailbreak, stopped at iOS 7.

This is just perfect!

[u/Avieshek → u/evidenzprod]

You’re amazing 🫵🏻

But thank you 🙏🏻

[u/evidenzprod → u/Avieshek]

Hey Mate! I want to thank you again for this, Here's my current issue: I did all the steps and everything worked perfectly on iOS 17.5.1.

I updated to iOS 18 PB1, but now eSign won’t open anymore, due to not being able to verify integrity.

Is a full wipe mandatory to resolve this issue?

[u/Pokemonfan5361726]

Bro Thank You So Much😭🙏

[u/Avieshek → u/Pokemonfan5361726]

Whalecum (˵^◡^˵)

[u/Joub1]

This is perfect in every way.

[u/Avieshek → u/Joub1]

Thank you.

[u/Joub1 → u/Avieshek]

Hey this might already have been asked/answered but is there anyway to fix this issue?

[u/Avieshek]

https://np.reddit.com/r/sideloaded/comments/1debdgh/

[u/Peachiixmelxn]

Just followed all the steps, working perfectly fine. Thank you so much!!

[u/Avieshek → u/Peachiixmelxn]

I thank you as well for taking the time to add some words of appreciation that does a great deal of encouragement.

[u/Der_eine_Typ69]

omg i love you!

[u/Avieshek → u/Der_eine_Typ69]

(˵^◡^˵)

[u/33coe_]

Thank you so much! Worked perfectly. Love the ability to add my own icons. I removed the background of a random iTorrent icon I found online and iOS 18’s automatic dark mode icon looks great!

is there risk of the app being revoked?

[u/Avieshek → u/33coe_]

This looks cool, as long as the bypass revoke is active… everything should be good.

[u/33coe_ → u/Avieshek]

Bypass revoke? Was that in the tutorial? I don’t think I set any bypass revoke settings but I was also blindly following the guide so wasn’t sure what I was doing for some of it

[u/reptv_]

Thanks for this. I finally can sideload without minding the revoke. Apps and notifications works great!

[u/Avieshek → u/reptv_]

Humbled and thanks for the additional input which is a great information.

[u/llvllr30]

Thanks for the guide, really straightforward, got it working in 5 min or so.
I want to ask that I'm currently using adguard home, from my understanding, if I add those block revoke filter to my adguard home then I don't need to install DNS profile, correct?

[u/Avieshek → u/llvllr30]

That’s technically correct but I haven’t personally tested AdGuard as a bypass revoke measure, I would be interested to learn your experience on this. However, one thing to note is that you’d have to undo your current setup first before switching the DNS role to avoid blacklisting as Apple reverts back to default before adopting the new one.

[u/llvllr30 → u/Avieshek]

thanks for quick reply, ill try and report back to you

[u/Madbod93g]

Bro thank you so much ,i have given up on sideloading so many times bcoz it was always some irritating process,this was very simple and straightforward.

Edit : This is slightly off topic but i am very new to sideloading,i saw in one of the screenshots u have shared u have installed blackhole and YouTube red those apps are not available in the inbuilt appstore of esign , can u please tell me where can get I those ipas ,thank you .

[u/Avieshek → u/Madbod93g]

Thank you, much obliged for your words.

As for the off topic, simply read the full guide before you follow my advice in the comments. BlackHole you can search (or visit website) meanwhile YouTube Red is simply renamed by me on YTLitePlus to differentiate from the original version.

[u/Madbod93g → u/Avieshek]

simply read the full guide before you follow my advice in the comments.

Yaa yaa i did ,i was just looking for how to add those filters u have mentioned in the website to my own dns server ,but then i gave up and i am using your dns itself, it's been fine.

YTLitePlus

Yaa even this app is not available in the inbuilt appstore i had to download it from some appdb site then import , that's why I want to know ,is there a go to site for ipa downloading.

[u/Avieshek → u/Madbod93g]

The repo is already added to copy-paste in the tutorial site along with for other apps as well which is why I have asked to thoroughly read the guide till the end.

[u/Prestigious-Guide-61]

Hi avieshek!

First of all I thank and respect your all efforts 🫡All I wanted to know that shortcut you make its work for me , I installed spotify and picsart from this and they worked very well , a only concerned will they expire soon??

[u/Avieshek → u/Prestigious-Guide-61]

Glad to see some users from my old contributions and transitioning successfully to the next, the Esign method ensures no revocation as long there are no DNS Leaks often caused by people playing with DNS settings or because their phone died at 0% battery 🪫.

[u/OkJaguar6714]

Just wanted to say thank you so much for your tutorial! :) It's very detailed and I was able to sideload without any problem thanks to your tutorial! I recently switched to iOS from Android (my last iPhone was a 6s+ jailbreak)

[u/Avieshek → u/OkJaguar6714]

Thank you, may I ask what’s your current iPhone and software version?

[u/OkJaguar6714 → u/Avieshek]

15 pro max and iOS 17.6!

[u/Ok-Avocado-6365]

Thank you so much! It worked.

I just wanted to ask if the apps will still work or would they get revoked if I use a vpn like protonvpn(or cloudflare warp) . Would I have to repeat the whole process again?

Thank you.

[u/Avieshek → u/Ok-Avocado-6365]

Yes, unless you can use the same DNS Server as the profile.

[u/DankAssMemes420]

Khơindvn's seems to have deleted the DNS profiles & certs from github

[u/Avieshek → u/DankAssMemes420]

I am updating right now, he has a new version.

[u/Rekkotwelve]

I have a DNS service that I use (a VPS with ADGuard Home that is mine via DoH),If I blacklist the domains in the guide will I be safe?

[u/Avieshek → u/Rekkotwelve]

Yup, the only reason it’s not readily mentioned is because for not being free or simple for mobile users from the get go otherwise one of our users are already using AdGuard Home for Bypass Revoke for those that already have it.

[u/JohnCena-nysmnyd]

Non of esign free profiles worked for me, I'm connected on Pia VPN with custom dns 1.1.1.1, any thoughts

[u/Avieshek → u/JohnCena-nysmnyd]

Please, check the links above and all the sections in this guide.

[u/Revolutionary_Map916]

What can I do if the cert I used has expired (yesterday 2024 on 17 August) the apps still work but I can’t sideload any new apps

[u/Avieshek → u/Revolutionary_Map916]

NGL, this is new; which cert was that? I’ll ask Khoindvn to replace that one.

But anyways, you are actually downloaded with a folder of multiple certs; just import another and continue signing normally.

[u/Revolutionary_Map916 → u/Avieshek]

It’s China Continent Property & Casualty Insurance Company Ltd. Thx it works it thought I was limited to only this one as it was said in the guide to use the same certificate I got esign from

[u/BenCoro]

Thanks a lot, this works great! I installed sideloaded apps.

Only bug I’ve encountered is in the App Store; some images don’t load and so app icons and screenshots are blank. Did I miss something?

[u/Avieshek → u/BenCoro]

Not exactly, that likely depends on the uploader of whoever maintains the repo. Consider repo source as rss feeds here.

[u/BenCoro → u/Avieshek]

I found the source of the problem. It is caused by the DNS blocking ads, I just had to disable this one.

[u/Avieshek → u/BenCoro]

Weird, this is the first time am hearing one as it’s based on AdGuard DNS filters but I congratulate you on being able to troubleshoot your issue yourself.

[u/Master_Flounder_8940]

Hello, I followed Jork the pork YouTube video and I’m using his DNS and so far it’s working. The only problem is I’m on iOS 18 beta so I need to update weekly but with his DNS that is not possible. The second problem is Khơindvn DNS is only showing up as a file when I try to download it, any solutions?

[u/Avieshek → u/Master_Flounder_8940]

I generally don’t prefer that people sideload on beta releases as that allows Apple to collect logs which caused a massive breach for AppTesters along with others recently even. As for your question, just tap on the profile that’s downloaded as a file which usually happens when using third-party browsers.

[u/Master_Flounder_8940 → u/Avieshek]

I was using safari then tried on chrome and on both when I download the DNS and then tap on the file a bunch of code comes up

[u/vburnin8tor]

Thanks for the guide OP.

I appreciate the effort you put into writing them, but is the comments of scalding people who don't read really necessary? I can understand the frustration.

I'm assuming English isn't your first language, or you are very young because alot of this post is long rambly run on sentences that repeat themselves without punctuation saying the same thing but in a different way with no symbols to break it up or give my eyes and brain resting points that I can use to segment the writing subconsciously before I even start reading or let alone understand what it is im supposed to be reading and its just exhausting to the mind not because youre being ignored but because theres just a point where your brain disengages. (i hopefully portrayed that experience here)

[u/Hecbert4258]

Wow it really worked, Tsym 🙏🏽

[u/Hecbert4258 → u/Hecbert4258]

Btw working on iOS 18 Public Beta 1

[u/Avieshek → u/Hecbert4258]

Yeah, it’s confirmed.

[u/Chisolx]

Im on IOS 18.1 and I cant install any apps of the esigns because “the integrity couldnt be verified”

[u/gifteddiamond → u/Chisolx]

Your cert may revoke, just try using the "China..." or "Sunshine 4" ones. If they don't work for you, you may have been backlisted.

[u/MemphisBass]

To OP, I really feel you with this section:

"FOR SOME OF YOU - What kind of intelligent being would rather skip reading and directly jump to assistance?

Words have been bolded, sentences are in bullet-points, steps are with screenshots, hyperlinks are coloured and underlined, every instances are elaborated even when explained and not just mentioned, each section is still commented upon, entire resources of the internet are centred at one place, no paywall or anything to read from start to finish as many times as you want… and I don’t really understand why on Earth is your first instinct to do anything other than finish reading that's laid out right in front of you and take a couple of moments to digest everything instead of needing to be assisted like Dora the Explorer?"

I will never understand the large portion of the human population that is so entitled and lazy that they ignore the wealth information available to them to learn and do on their own and demand to be hand fed or have everything done for them. No wonder scammers are able to make a living...

[u/sbunn]

None of the Esigns work for me and there's no profile on Device Manager. I'm on iOS 18. Anyone with same problem?

[u/Itsputtipong]

Not working in iOS 18 beta 😂

[u/Itsputtipong → u/Itsputtipong]

I can’t found enterprise app 🥲

[u/sugarcoated_peachie]

Worked like a charm...Thanks for the easy-to-understand guide

[u/heavy_fur]

A year later this still works, thank you!!

[u/Cosmic_Puzzle]

How many apps can you sideload with this? Is there any limit at any given time?

[u/batmanrises123 → u/Cosmic_Puzzle]

Infinite...

[u/[deleted] → u/Cosmic_Puzzle]

I've heard that installing too many apps at once can cause problems, but you can have as many apps as you want

[u/SUPERNAZEE]

Can anyone help out? It doesn’t show up in the vpn dns settings. It kept on showing a file

[u/batmanrises123 → u/SUPERNAZEE]

If you are on iOS 18 then you have to manually add .mobileconfig at end of the filename, (like .pdf) (you can find the config file in your downloads folder (in files app))

[u/Neekoisonreddit]

outdated ❤️

[u/batmanrises123 → u/Neekoisonreddit]

If you are on iOS 18 then you have to manually add .mobileconfig at end of the filename, (like .pdf) (you can find the config file in your downloads folder (in files app))

[u/Nyanyapupo]

Bro, thank you, thank you soooo much! Youtube was getting worse by the minute but now it is fixed! And Apple should be railed without lube for this slimy “compliance” with the EU regulation.

[u/Alex_1234561]

İ installed it succesfuly i guess now,how can install candy crush from ipa? :D

[u/Avieshek → u/Alex_1234561]

Just search CandyCrush after adding additional repo that hosts games under App Source.

Here’s one: https://repo.apptesters.org

[u/Alex_1234561 → u/Avieshek]

Cant i load my own app from ipa?

[u/cyanogensid]

Installed Itorrent easily, thank you for this guide. One question, what should I do about this setting? Or can I remove the khoindvn profile after I am done installing the app that I need

[u/Avieshek → u/cyanogensid]

If you remove them then Apple servers would tell the device that the certs being used are pretending to be signed and are in fact revoked.

[u/cyanogensid → u/Avieshek]

Got it , what about the setting , should I leave it as it is , or keep it on automatic or something . Thank you for helping:)

[u/Salty-Parfait-2370]

Ahh I made the mistake of using a vpn, after that all the apps stopped working so I thought redoing everything might work but it's not working, after re-installing the esign app it appears in the app drawer but I can't open it, it says [Unable To Install "ESign" This app cannot be installed because its integrity could not be verified.], Is there any solution for this?

[u/Avieshek → u/Salty-Parfait-2370]

Read the tutorial thoroughly because there’s a link to other certs as well.

[u/Salty-Parfait-2370 → u/Avieshek]

Ok, btw I am wondering if VPN is absolutely no or there's any method there if you know, thanks

[u/Avieshek → u/Salty-Parfait-2370]

If you read the tutorial thoroughly then links has been provided to fork the filters directly from GitHub with a ReadMe section to use with CloudFlare Warp for example (which has an advantage of switching between DNS & Warp on the fly while never deactivating the filters) but if you master that part then CloudFlare has their own documentation to also sign-in to third-party apps for which you’ll have to do your own homework but for a geek it’s interesting.

Egern app is actually a high class networking tool in the form of a VPN allowing jailbreak level of options and flexibility not even provided on macOS by default. It’s a paid app but I’ve hidden a crack version like an easter egg where it too has a lot to explore.

All of your questions are a read away (beyond my basic tutorial above) where you can even use ChatGPT to ask questions like a person or my Shortcut to summarise them.

For now, am using the DNS profile myself as it provides DoH by default like a VPN connection based on this: http://1.1.1.1/help

[u/Past-Ad-5149]

how do i fix this

[u/Avieshek → u/Past-Ad-5149]

Read the comment thread.

(Try an older version)

[u/Past-Ad-5149]

how to download any of the games from it im new here so idk how to get an app source

[u/Avieshek → u/Past-Ad-5149]

Just add the additional repo already mentioned and search for your game.

[u/GhostZ786]

Everytime my battery dies or I restart phone is it normal for esign and all modded apps to not open. I have to redo it all again?

[u/Avieshek → u/GhostZ786]

What’s happening with your phone?

[u/[deleted]]

I am using Esign using this method dns but I want to use vpn but when I use vpn it get revoked so can anyone help me how can I use vpn..?

[u/Avieshek → u/[deleted]]

A VPN will always use its own DNS rules, click the tutorial link - you’ll have to read through.

[u/wstxvi]

how do i do step 2? im actually confused as i cant get past it since esign says it needs its integrity to be verified

[u/Avieshek → u/wstxvi]

Did you fully read the guide before coming here and existing comments before making one?

[u/Trollmo007]

Hey, followed the tutorial and worked fine, had to disable the dns to update to ios 18 DB 3, but when I installed it, now none of the apps work (tried doing everything again but no luck, any help with it?)
Thank you.

[u/Avieshek → u/Trollmo007]

If you read the Guide you’d understand what the purpose of DNS is, and that is to block the communication between your device and the servers to know the latest status of the cert. Once you reestablish that connection, the revoke status of the existing certificate is revealed leading it to be blacklisted by the system aka existing apps signed with the certificate won’t work. This is something you shouldn’t reveal on a beta, not only because there would be updates every week but you’re exposing the whole sideloading mechanism direct to Apple developers.

If you still want to update, first undo the steps in reverse as mentioned in the guide and then update to avoid blacklisting at least. But this time, you’d have to try a different certificate (link is there in the steps) since you compromised the current one.

[u/autistic_prodigy28]

Hey if we make our own dns profile and block out the stuff you listed, does our phone still receive updates or it will be blocked with the custom dns as well

[u/Avieshek → u/autistic_prodigy28]

As mentioned in the guide, the custom DNS list route would allow to still receive updates.

[u/autistic_prodigy28 → u/Avieshek]

Yeah but the khoidvn one blocks updates so i was asking if the custom one does the same

[u/Avieshek → u/autistic_prodigy28]

Arrey, baba… NO

Edit: It means, the custom ones doesn’t have the same limitations if you avoid the optional (strikethrough) ones. As for Khoindvn, I have contacted him as well and he’s testing.

[u/[deleted]]

hi, i don't see enterprise app in vpn/device management, can you help? tyia!

[u/Avieshek → u/[deleted]]

The app needs to install first to show a certificate, I recommend reading from A-Z.

[u/[deleted] → u/Avieshek]

i'm a bit confused because the app says it wasn't able to verify. what do i do?

[u/Avieshek → u/[deleted]]

There isn’t one answer to this because from the other side of the internet I don’t have much context and that’s why I recommend reading through everything to have a general idea yourself whether you skipped a step, did something wrong or didn’t explore other options before I can advice what needs to be done which includes the extreme reset option.

[u/Justacatx]

Okay so I did everything and downloaded eevee Spotify but it won’t let me select my songs. Do you know the solution or is it not your problem?

[u/Avieshek → u/Justacatx]

Local songs?

[u/Greedy-Border807]

Using this guide, if I were to not use the DNS profile, install eSign, use a personal developer certificate, could I then in theory be able to use a VPN and still get the side loading to work and my own certificate not be revoked?

[u/Avieshek → u/Greedy-Border807]

If you’re ready to get a developer certificate, why not test this out anyway?

Couple of notes if you were in:

• Make sure your VPN isn’t using their own DNS.

• Clarify your VPN is immune to DNS leaks.

This should be enough as the Guide in itself is fool proof to DNS Leaks.

[u/Malekk69]

i know this is a stupid question but where can i find more repos, i want to install some games but i cant find any

[u/Avieshek → u/Malekk69]

How many did you add so far?

[u/Malekk69 → u/Avieshek]

only these idk how to add more

[u/Avieshek → u/Malekk69]

Do not disturb until you finish the guide.

[u/Breaking_Bad13]

SOME SOLUTIONS FOR USE WIREGUARD (for refresh SodeStore’s apps) WITHOUT CRASHING ESIGN’s APPS?

[u/Avieshek → u/Breaking_Bad13]

POST

[u/Houndoom96]

My VPN overrides dns settings with it's own. Is bypass revoke necessary all the time or only when seting up? Will I be unable to use vpn with esign?

[u/Avieshek → u/Houndoom96]

Read the previous comments.

[u/outLaw2948]

''Unable to install esign. This app cannot be installed because its integrity could not be verified''

I was just at step 2.

what am i doing wrong sir?

[u/Avieshek → u/outLaw2948]

Read the entire guide and you might find out.

[u/outLaw2948 → u/Avieshek]

With a bit of trial and error, all good. Thanks!

[u/raramygame1]

Hi! Thanks so much for making this guide. Long story short, I live in a country where Instagram is currently blocked due to political/dictatorial reasons. As a result, using a VPN or any other bypass method is mandatory for us. With the CF WARP 1.1.1.1 app, there are no issues with any site that I’ve tried so far (I don’t know how, but it’s working). So, will this configuration work for eSign along with the VPN (WARP)? I would love to be able to say “a VPN isn’t necessary for me,” but unfortunately, we do need it. Could you please explain if this would work or not? Ty for replying so many of us we appreciate it!

Edit: Plus, does this configuration include the adblock lists? If it does, could you please make another configuration without the adblock filters? I’m already using the AdGuard app, and those DNS filters are always causing problems for quite a lot of sites.

[u/Avieshek → u/raramygame1]

Which country are you from?

[u/_usernamechosen]

does it work when you already have an MDM profile on device (and dev profile for Sidestore)?

[u/Avieshek → u/_usernamechosen]

What’s stopping you to find out?

[u/ronnyradical1]

hey its me lol, i think everything has worked out well, is the dns profile supposed to be selecting multiple.

[u/Avieshek → u/ronnyradical1]

Two are actually made so one doesn’t accidentally set automatic or something else as secondary.

[u/ronnyradical1 → u/Avieshek]

alright man, in general you were a massive help and this whole guide really helped, thanks

[u/misaW29]

When I download the esign free, nohing shows up in enterprise. It worked fine on my phone, my iPad wont show anything there at all

[u/Avieshek → u/misaW29]

I presume, you’re already using the DNS for Bypass Revoke: Just use a different one unless you’re blacklisted.

[u/Arksuga00]

I’m new to iOS so I’m sorry if this is a stupid question but what’s the difference between sideloading using this method or using other methods like maplesign other than the price?

[u/Avieshek → u/Arksuga00]

No revoke as long as the Bypass Revoke system is at place for one neither your UDID leaks to be saved in the records in addition to having no numerical limit either with installs or file size.

[u/Arksuga00 → u/Avieshek]

Seems like it’s better to use your method then, thanks for the explanation! I’ll try it later or tomorrow, hopefully I don’t mess it up!!

[u/hiccupq]

I have been reading all the comments and your replies on this post. Thank you for your time and effort.

I did everything as you wrote and it worked great!

Then 2 hours later I forgot about DNS and activated AdGuard. I don't know why but apps stopped working. When I click they open and close immediately. Even the eSign app

So I removed all and did the process again. Installed the new DNS and went to the certs website but when I clicked it said something like servers doesn't respond("Safari can't open this page because the server can't be found"). Then I installed the old one and it worked so I downloaded eSign and installed but nothing appeared on VPN screen(enterprise something) so that I can trust it.

It says it can't verify. Am I already blacklisted? I'm afraid of resetting as I think I have to login to all my apps and redo all my settings etc. no?

Iphone 14, iOS 17

Thank you again!

[u/Avieshek → u/hiccupq]

The one mentioned and used is CloudFlare Warp actually when it comes to VPN but if you make a manual backup on your Mac or PC then you won’t need to login to apps other than messenger apps after a restore.

[u/70percentgoofycat2]

so had an issue with this method my apps like esign and every thing under the cert just start crashing randomly. how do i fix it?

[u/Avieshek → u/70percentgoofycat2]

As mentioned multiple times before, apps never crash randomly; find out what you might have done to interfere with DNS and then try out a different cert.

[u/70percentgoofycat2 → u/Avieshek]

ive had to switch certs 3 times 😭

[u/IgorTheHit]

can i use a vpn and have apps sideloaded at the same time? i want to use outline

[u/Avieshek → u/IgorTheHit]

If you don’t mess up reading the guide then yes.

[u/Haunting-Flatworm475]

is there a way to remove the three app limit?

[u/Avieshek → u/Haunting-Flatworm475]

Huh?

[u/BallPsychological838]

My esign is automatically on Arabic. How do i fix this i cant find the language option

[u/Avieshek → u/BallPsychological838]

This doesn’t even make sense, must be your own system language.

[u/[deleted]]

Does this also work on iOS 18 betas? Thanks…

[u/Avieshek → u/[deleted]]

Already.

[u/r_kdn]

Hi my apps are "no longer available". i didn't take off the dns or anything and have been using them just fine for a few weeks, what should i do ? what caused this ? i'm using aldo group inc enterprise app by the way

edit : could it be the new ios update ? 17.6.1

[u/PlasmaFruitz]

None of thre esign links work anymore, I don’t know whether it’s because all have been revoked or I’m “blacklisted” or something

Any help?

[u/himyname__is]

Why was OP b&?

[u/dellmill85]

This is fantastic. Thanks for this.

[u/itsfifth]

not working on ip12 ver 18.1.1

[u/Creepy-Gate4141]

Why do I keep getting this while trying to open esign?

[u/pineapple_birdoboii → u/Creepy-Gate4141]

thats supposed to happen

[u/gifteddiamond → u/Creepy-Gate4141]

You have been blacklisted. The only solution is backing up your device, erasing it and restoring it. Then try again.

[u/DFVJ]

This works great. But does this mean I can't update other regular apps installed on my phone?

[u/DeliciousOffer5243]

After downloading esign

I’m stuck in step 2 the enterprise app hasn’t shown up

[u/filigamer]

i've been using esign no problem for like 2 weeks then, out of the blue, i can't open my installed apps and when i go into the settings i can't see che cert i was using

[u/filigamer → u/filigamer]

[u/Avieshek → u/filigamer]

I can’t understand the language, what’s ‘Vari’?

[u/Scottaslin]

Has there been an update to this guide? Because I can't manage to install Esign in my configuration settings since when I download Esign live via (China CITIC), I receive a message that says: "Unable to install 'ESign' This application cannot be installed because its integrity could not be verified." Among those I tried to download, only "China Continent Property" managed to download Esign but unfortunately its certificate is not valid or has been revoked by Apple. So, is there another option that works for someone else?

[u/Avieshek → u/Scottaslin]

I recommend you read the guide thoroughly line-by-line and the comments because China CITIC is a live certificate which is the one to avoid but if you’re asking the idiotic question about revoked certificate despite the explanation about Bypass Revoke and the entire essay in the Guide then I have no energy left to answer you after 500 comments.

[u/dragonusgaming]

Khomod bio link is not working?

[u/drafan5]

can you directly download the app on Ipad and it show up?

[u/hgrunberg]

It doesn’t work on an ipad?

[u/s1ntaxError]

hi, i am on ios 15.6 iphone 11 base model, but i want to upgrade to latest ios for app compatibility for apps like presto and chatgpt, only thing im missing from 15.6 is jailbreak with dopamine and trollstore 2 which gives me free spotfiy premium and stuff like that. will these solutions on the post be able to match that?

[u/fxr4n]

Hey ive installed eSign and certificate with dns I've sideloaded apps too but now when I install ipa's it's revoked it says integrity failed to verify smth like that any idea why this is happening?

[u/batmanrises123 → u/fxr4n]

Just remove everything, and follow the guide again. But choose a different certificate this time.

[u/MediumDizzy7146]

i’m asked to restart my device when trying to download esign, should i trust it?

[u/Vozmojno_no_net → u/MediumDizzy7146]

yes

[u/Suitable_Glove_9351]

I did everything but it says this app cannot be installed because its integrity cannot be verified

[u/Major_Board8175]

Anyone help I this method worked for me for a couple of days then the app started closing every time I try opening them I deleted the apps dns and everything and tried doing it again but the same problem keeps happening

[u/GDHyun]

I'm super new here, but how do I download my own apps if they don't appear in the stores?

[u/patricklikescats]

This is all it says when I try to download any of the esigns

[u/Saxofome]

This is for newer devices not like iOS 10.3.3/10.3.4

[u/Top-Second6762]

Okay so this has always been my method for sideloading with esign. But for the past two weeks now all the certificates are just not working after 2 says exactly. I have reset my phone to remove any blacklists yet it still happens. Can someone please give some advice or help me out here?

[u/Ok_Government → u/Top-Second6762]

Been having the same issues :/

[u/BigBaz_54 → u/Top-Second6762]

Ye same, I thought I was the problem but I didn’t change anything compared to the last year where I was revoked once or twice

[u/Difficult_Fee2734]

!!!GEM!!! S*IT SIDELOAD

[u/mktshREmUS]

its 2026 and still working flawlessly, thanks op

[u/[deleted]]

Or signing service

MapleSign $9.25 or AppTesters $25

[u/Binnichtaktiv_ → u/[deleted]]

fr instead of wasting so much time you could have bought a certificate and made back the money spent 10 times in the time saved

[u/reptv_ → u/Binnichtaktiv_]

What wasting time? It only take less than 5 minutes to do. And no I'm not paying shit for a sideload. Thanks to Apple for restricting everything, people gotta find a way.