On-device IPA re-signer for iPhone and iPad. Sign, install and manage IPAs entirely on the device — no computer, no server, no uploads.
ForgeSign wraps the battle-tested zsign C++ engine (with a static OpenSSL) in a SwiftUI "liquid glass" interface and adds a complete signing workflow on top of it.
Certificate and provisioning identifiers are redacted in the Sign preview.
- Sign IPAs on-device — pick an
.ipa, a.p12certificate and a.mobileprovisionprofile, optionally rewrite the bundle ID, strip app extensions or enable Files sharing, and sign in seconds with the vendored zsign engine. - Remembered certificates — imported
.p12files are validated once and stored on-device (Application Support). The last-used certificate is re-selected automatically. - Certificate insights — common name, organization and team ID are parsed from the certificate, and a live countdown pill shows remaining validity (
200d left, amber under 30 days, red when expired). - Keychain passwords — opt-in password storage in the iOS Keychain (with an encrypted-file fallback when the Keychain is unavailable), so re-signing takes two taps.
- Install on device — semi-local OTA install: the IPA is served over loopback HTTP while a trusted remote HTTPS plist (
api.palera.in) drivesitms-servicesdirectly (Safari is a fallback only). Silent-audio keep-alive keeps large downloads alive in the background. - Library — a persistent history of every signed app with status (signed / installing / installed / missing), plus reinstall, share and delete actions.
- Glass design language — translucent cards, ambient color blooms, Liquid Glass on iOS 26+ with a material fallback back to iOS 16, light and dark themes.
- Xcode 26+ (the build needs the iOS 26 SDK for the Liquid Glass APIs; deployment target is iOS 16)
- XcodeGen (
brew install xcodegen) - iOS 16.0+ on device
xcodegen generate
open ForgeSignMobile.xcodeprojBuild the ForgeSignMobile scheme for a device. Code signing is disabled in the project settings by design — sign the produced app with your own certificate and profile (ForgeSign desktop can do it, or any sideloading tool).
Grab ForgeSign.ipa from the Releases tab. The IPA ships unsigned — that is the point of the app: sign it like any other IPA.
- Download the IPA.
- Sign it with your certificate + provisioning profile — e.g. with ForgeSign (desktop or the iOS app itself), Sideloadly, AltStore or a similar tool.
- Install the signed IPA on your device.
Only sign and install applications you have the rights to modify. Intended for your own builds and development use.
- Picked files are staged into the app container.
- The zsign engine (
Bridge/) re-signs the Mach-O binaries, injects the profile and rewrites metadata, producing<name>-signed.ipain the persistent Signed library. - Install serves the IPA on
http://127.0.0.1:<port>, obtains a trusted HTTPSmanifest.plistfromapi.palera.inthat points at that IPA, then opensitms-services://directly so iOS prompts to install.
App/ SwiftUI UI (glass design system in App/Design), stores and services
Bridge/ Obj-C++ bridge into the zsign engine
vendor/zsign Vendored zsign signing engine
vendor/openssl Static OpenSSL (libcrypto/libssl) for the engine
project.yml XcodeGen manifest (regenerates the .xcodeproj)