How to Install IPA Files Directly on iPhone (2025 Guide)

Every iPhone owner eventually runs into an app that isn’t on the App Store. Often it’s a beta, a custom build from a developer friend, or a region-locked app that refuses to appear in search.

iPhone users worldwide (2025 est.): 1.5 billion ·
Free Apple ID sideloading limit: 3 apps ·
TestFlight tester limit: 10,000 per app ·
‍IPA format: iOS App Store Package ·
Typical sideloaded-app refresh window: 7 days

Seven facts, one pattern: the official doors are the ones Apple controls, and every alternative method carries a catch.

How to Install IPA Directly on iPhone Without a Computer?

Direct-on-device installation falls into two camps. In the European Union, Apple has built an official, computer-free path through alternative app marketplaces and developer websites. Everywhere else, the options come down to TestFlight if a developer invites you, or third-party tools like AltStore, TroStore, and Scarlet — each with its own signing, persistence, and trust trade-offs.

Using Safari to download and install IPA

• Requires the latest iOS or iPadOS on a compatible iPhone (Apple Support)
• Uses Safari — Apple’s EU instructions specifically cal for it (Apple Support)
• Available to users in the European Union (Apple Support)

Apple’s EU installation page lays out the browser flow: on a device with the latest iOS, open Safari, go to the developer’s or marketplace’s website, tap the install link, and complete the on-screen approval steps. You grant the marketplace permission before its apps can install — Apple says to tap Settings, then Manage App Installation during the setup.

Third-party browser-based install services like Gbox have tried to copy this flow elsewhere, but they sit outside Apple’s permission system and come with none of its guarantees.

Using AltStore

• Classic AltStore requires a computer and iTues for the first setup
• AltStore PAL installs directly on the device in the EU (iDownloadBlog)
• AltStore PAL requires iOS 17.4+ and a €1/year Apple developer fee, according to TweakedStore’s AltStore overview

AltStore has two identities. The classic version signs IPAs with your Apple ID through AltServer on a Mac or PC, then refreshes apps over Wi-Fi so they don’t expire. The newer AltStore PAL, which launched in the EU in April 2024, works like a standard marketplace: you download it straight from the AltStore website and install it without ever plugging the iPhone into a computer.

Apple’s developer documentation says authorized developers can offer marketplace apps and receive notarized apps from other Apple Developer Program members through the EU framework. OneJailbreak’s guide adds a useful caution, though: AltStore PAL is a marketplace, not a general-purpose sideloader for arbitrary IPA files.

Using TroStore

• Installs IPA files permanently without re-signing
• Works only on iOS 14.0 – 16.6.1, depending on the device
• Uses iOS exploits, so an update can close the window

TrolStore exists for one reason: to end the re-signing loop. It exploits iOS vulnerabilities to install IPAs permanently, so the free-Apple-ID 7-day signin window doesn’t matter. The catch is compatibility — supported iOS versions rang from 14.0 to 16.6.1 and vary by device.

What this means: if your iPhone is already on a newer operating system, TroStore is simply not an option, and if it is an option, updating iOS in the future may close it.

Using Scarlet

• Third-party installer that sideloads IPA files
• No code-signing verification
• No official Apple endorsement

Scarlet is a third-party app store that lets you sideload IPA files with minimal friction. That convenience is also the problem: Scarlet does not verify code signatures, so every IPA you install through it is a trust exercise.

The catch: with Scarlet, you become the app review team. There is no Apple reviewer, no notarization check, and no way to know who actually built the file.

What Is TestFlight and How Does It Help Install IPA Files?

TestFlight is Apple’s official beta-testing platform. When a developer wants to put an IPA-style build on testers’ iPhones without the App Store review queue, TestFlight is the sanctioned pipeline.

TestFlight setup process

• Apple’s official beta testing platform for developers
• Installs directly on the device — no computer required
• Requires the TestFlight app and an invitation from a registered developer

The developer uploads a build through App Store Connect, then invites testers by email or with a public link. On your iPhone, you install the TestFlight app, open the invitation, and tap Install. The build arrives as a direct install, not a sideloaded file — which is exactly why it doesn’t trigger signing warnings.

Obtaining invitation codes or public links

< ul>

Most TestFlight invites arrive by email with a link that opens in the TestFlight app. Some developers share public links on social media or their websites, which is how beta programs for popular apps fill up quickly.

Limitations of TestFlight

< ul>

TestFlight’s limits are part of its safety. It’s not a general-purpose installer; it only accepts builds that a registered developer uploaded. For users, the practical limit is the 10,000-tester cap per app, and for developers, the need to keep the build pipeline up to date.

Why this matters: TestFlight is the reference point every other method gets measured against — official, computer-free, and outside the 7-day sideloading loop.

How to Create an IPA File for iPhone?

An IPA file is a packagin format — a signed archive that iOS reconnaizes as an installable app. Knowing how one is created is useful even if you never plan to build an app yourself, because it explains why signing and certificates matter so much.

Using Xcode to Archive

< ul>

In Xcode, a developer goes to Product → Archive. Once the archive is ready, the Organizer window offers an Export option that creates an IPA. The export flow then asks how the app should be signed and where it will run.

Creating IPA from third-party tools

< ul>

If a developer already has an .app bundle — usually from a build folder — a tool like iOS App Signer can wrap it into an IPA. These tools are handy for quick tests, but they do not change the signing requirement.

Signing and exporting IPA

< ul>

Signing is the step that turns a folder of code into an installable package. Without a valid signature, iOS refuses to run the app, which is why the App Store review and sideloading debate both revolve around certificates.

What this means: anyone can wrap an app into an IPA, but only a signed one will install and keep running. The signature is the whole game.

AltStore vs TrollStore vs Scarlet: Which Is the Best Tool for Installing IPA?

Each of the three big sideloading tools solves a different problem. AltStore focuses on keeping apps signed, TrollStore focuses on permanent installation, and Scarlet focuses on frictionless installs at the expense of verification.

AltStore features and limitations

• Signs IPA files with a regular Apple ID
• Refreshes apps over Wi-Fi to keep them usable
• Requires a computer with iTues for the initial setup

AltStore is the most practical choice for free sideloading. You put up with the one-time computer setup and the 7-day refresh cycle, and in return you get a tool that signs IPAs without a paid developer account. It’s also the tool with the clearest documentation: Sideloadly’s official site describes the same pattern — load an IPA, sign it with an Apple ID, and install it directly to the device.

TroStore features and compatibility

• Installs IPAs permanently without re-signing
• Supported iOS versions: 14.0 – 16.6.1, depending on device
• Exploit-based, so each iOS update is a potential end date

TrolStore’s appeal is simple: install once, keep forever — no re-signing, no Wi-Fi refresh, no certificate anxiety. Its weakness is equally simple: it depends on an iOS vulnerability that Apple patches over time, so the supported version window keeps shrinking.

Scarlet features and risks

• Sideloads IPA files through a third-party storefront
• No code-signing verification
• High-risk profile for users who care about security

Scarlet is the “install anything, now” option. It’s fast and direct, but it skips the verification that makes the other routes credible. There is no signature check, no developer reputation, and no recourse if the app misbehaves.

Pros and cons of each method

• AltStore: lowest barrier for free, ongoing sideloading on current iOS versions
• TrolStore: the only no-refresh option, but only for a narrow iOS range
• Scarlet: easiest short-term install — with the weakest security posture

Nothing here is perfect. AltStore needs a computer once and a Wi-Fi network after that; TrollStore needs a vulnerable iOS version; Scarlet needs your trust in an unknown developer. That’s the real comparison.

The pattern: each tool automates away one pain point — signing, expiry, or friction — and hands you a different one. No tool is simultaneously free, permanent, universal, and safe.

What Are the Risks and Limitations of Installing IPA Files Directly?

Sideloading exists because Apple keeps tight control over its default installation path. That control is also the protection — when you step outside it, you become the security review.

Security risks of third-party IPAs

• Untruted IPA sources may contain malware or spyware
• Third-party stores like Scarlet do not verify code signatures
• Official distribution routes include Apple’s notarization and review process

An IPA downloaded from a random website has already been reviewed — by the person who uploaded it. Without app review or notarization, a malicious app can masquerade as a simple utility while harvesting data in the background.

If you plan to sideload regularly, keep your Apple ID protected too. The account that signs an IPA is a security boundary, and using a phishin-resistant sign-in method — like passkeys — matters just as much here as it does for iCloud. Our guide to passwordless login explains why.

Revocation and expiration of signed apps

< ul>

The 7-day window is the daily reality of free-account sideloading. When it expires, the app stops opening until it is signed again. If Apple revokes the certificate entirely, no refresh will fix it.

Jailbreak requirements for some methods

• Some installation methods require a jailbreak or an exploit
• TrolStore is exploit-based, so an iOS update can close the door
• EU alternative marketplaces require neither a jailbreak nor an Apple ID sign-in

People often confuse TroStore with jailbreaking. TroStore does rely on an iOS vulnerability, and that same vulnerability is also its biggest risk: the moment Apple patches it, the method stops working. EU alternative marketplaces, by contrast, are a sanctioned distribution channel and don’t depend on exploits at all.

The takeaway: the safety of a direct install scales with accountability. Official routes have named parties behind them; a random IPA has nobody.

IPA Installation Methods Compared

Five methods, one pattern: the routes with the least friction are the ones Apple or a registered developer controls, while every shortcut converts some risk into convenience.

What this means: there is no free lunch. The supervised routes are easiest and safest, but they require approval from Apple or a developer. Everything else trades security for freedom.

The Upsides and Downsides of Sideloading IPA Files on iPhone

Most sideloading conversations leap straight to “how,” but the “should you” question matters just as much. Here’s the honest scorecard.

The trade-off: sideloading moves the safety review from Apple’s team to your desk. For most people, the question isn’t “how do I install it?” but “do I trust the person who built it?”

Step-by-Step: Install an IPA Directly on Your iPhone

The right steps depend on the route you chose. This order minimizes friction and keeps the trust question in front of you at every stage.

1. Choose your route first. In the EU, the official route is a developer’s website or an approved marketplace. Outside the EU, TestFlight is the safest option if a developer invited you; otherwise, decide between AltStore, TroStore, or a third-party store.
2. If you’re in the EU and using the official route: open Safari, go to the install page, tap the install link, and complete the on-screen approval steps. Apple’s EU installation instructions require granting explicit permission before the marketplace can install apps.
3. If you’re using TestFlight: install the TestFlight app from the App Store, open the invitation or public link, then tap Install in the TestFlight interface.
4. If you’re using AltStore: connect your iPhone to a computer running AltServer once, complete the setup, then use AltStore to sign and install IPAs. Tools like Sideloadly follow the same pattern — load an IPA, sign it with an Apple ID, and install it directly to the device (Sideloadly).
5. If you’re using TroStore: first confirm your iOS version is in the 14.0 – 16.6.1 range for your device, install TroStore, then use it to install the IPA permanently.
6. Advanced route: OWASP’s mobile testing guide describes copying the IPA to the device via scp or AirDrop and running ipainstaller from the command line — the most technical, least user-friendly method (OWASP MASTG).

Before you start, make sure the iPhone has enough charge to finish the install — long AltStore sessions over USB or Wi-Fi can drain a battery quickly. Away from an outlet, a CCC-certified power bank is a practical companion.

What’s Confirmed About IPA Installation — and What’s Still Unclear

Confirmed facts

• Apple’s EU alternative-marketplace framework arrived with iOS 17.4-era changes (The Verge)
• AltStore signs apps using an Apple ID
• TrolStore only works on specific iOS versions
• Scarlet is a third-party store with no official Apple en dorsement

What’s unclear

< ul class="n24-list n24-x">

Why this matters: the confirmed facts are the ones you can plan around; the open questions are why cautious users keep a dedicated Apple ID for sideloading experiments.

What the Sources Say

According to OWASP’s mobile application security testing guide, an IPA can be installed directly on an iOS device via command line using ipainstaller after copying the file to the device.

OWASP — Mobile App Security Testing Guide

According to TechCrunch’s February 2026 report, Onside became an alternative iOS app store available in the European Union and Japan.

TechCrunch — Market survey of alternative iOS app stores

According to Sideloadly’s official site, the tool is designed to load an IPA, sign it with an Apple ID, and install it directly to a device — the standard pattern for desktop-assisted sideloading.

Sideloadly — Official documentation

OneJailbreak’s AltStore PAL guide cautions that AltStore PAL is a marketplace, not a general-purpose sideloading tool for arbitrary IPA files — an important distinction for users who expect to install any IPA they find.

OneJailbreak — AltStore PAL installation guide

Taken together, these sources draw one clear line: the ecosystem around IPA installation is maturing, but the final responsibility for a file’s safety still lands on the person installing it.

The Takeaway

Direct IPA installation on an iPhone keeps moving from gray-market trick to legitimate feature. The EU’s alternative marketplaces and Apple’s own TestFlight pipeline show where official support exists today, while AltStore, TroStore, and Scarlet fill the gaps with very different risk levels. For iPhone users outside the EU who need a specific IPA right now, the decision is clear: choose a signed, accountable route — TestFlight, an authorized marketplace, or AltStore with your own Apple ID — or accept the risks of running code that no one has vouched for.

Frequently asked questions