Drag & drop directly inside Advanced Options
Drop your .p12 and .mobileprovision individually, together, or as a folder. The panel expands and collapses in lockstep with Advanced Options so the Start button is never clipped.
MACOS NATIVE QT5 DYLIB PROXY · V1.0.0
Sign any IPA with your own .p12 certificate.
Drop your Apple Developer .p12 and .mobileprovision straight into Sideloadly Advanced Options. Zero Apple ID prompts, 365-day validity.
CERTIFICATE VALIDITY
Up to 365 Days
Full Apple Developer & Ad-Hoc profile lifespan
APPLE ID 2FA LOGIN
0 Prompts
Bypasses Anisette & Apple account password dialogs
SIGNING PIPELINE
Native codesign
Recursive Mach-O signing for Frameworks & PlugIns
PLATFORM TARGET
macOS 12.0+
Apple Silicon (M1 to M5) & Intel Universal .app
Test the Advanced Options panel right here.
Click a sample developer certificate preset on the left (or drag any .p12 and .mobileprovision file onto the dark Qt5 panel) to see how Sideloadly-Cert validates your identity.
Sample Certificate Profiles
Select a preset to populate the native Qt5 controls:
[Cert] Northstar Labs GmbH (9K4L8M2P7Q) : northstar_dist_2027.p12
Apple Developer Certificate (.p12 + .mobileprovision)
UNDER THE HOOD · QT5 + PYTHON CFFI HOOK
Engineered into Sideloadly, not bolted onto a script.
Sideloadly-Cert injects a native Objective-C++ Qt5 widget tree and hooks Python's signpipe in memory so USB and Wi-Fi installations work identically to stock Sideloadly.
Isolated temporary keychain
Your .p12 private key is imported into a disposable ephemeral keychain during signing or read from PASSWORD.txt automatically, keeping your login keychain clean.
# Ephemeral PKCS#12 verification
$ openssl pkcs12 -in cert.p12 -nokeys
MAC verified OK
subject=UID=9K4L8M2P7Q, CN=Apple Distribution
✓ Provisioned UDIDs matched: 1
CMS entitlement preservation
Decodes your provisioning profile via security cms -D -i, aligns application-identifier and keychain-access-groups, and embeds embedded.mobileprovision.
<!-- Extracted Profile Entitlements -->
<key>application-identifier</key>
<string>TEAMID.*</string>
<key>get-task-allow</key>
<true/>
Inside-out Mach-O codesign pipeline
Intercepts GuiImpactor.sign_return_Error after tweak injection and signs every nested binary from deepest dependency to top-level bundle before handing the IPA to Sideloadly's device installer.
STEP 01
Injected Dylibs
Frameworks/*.dylib & Substrate
STEP 02
Embedded Frameworks
Payload/*.app/Frameworks/*.framework
STEP 03
App Extensions
Payload/*.app/PlugIns/*.appex
STEP 04
Main App Bundle
codesign --force --sign SHA1
Free Apple ID vs. Sideloadly-Cert .p12 Mode
Keep every Sideloadly tweak-injection and plist-editing workflow while removing free-account limitations.
Standard Apple ID Mode
Free Account
App Expiration
Every 7 Days
Active Apps per Device
Max 3 Apps
Authentication
Apple ID + 2FA + Anisette
Offline Signing
Requires Apple Server Call
Custom Profile Entitlements
Restricted
Sideloadly-Cert (.p12 + Profile)
Developer Cert Mode
App Expiration
Up to 365 Days
Active Apps per Device
Unlimited
Authentication
Local .p12 + .mobileprovision
Offline Signing
100% Local on Your Mac
Custom Profile Entitlements
Full CMS Entitlement Sync