Sign and install any .ipa/.tipa with your own certificate — no jailbreak, no computer, no third-party server required.
Sideload apps outside the App Store with your own Apple Developer or Enterprise certificate
Re-sign an app after its original certificate gets revoked
Customize an app before installing it (name, icon, bundle ID)
Prepare apps for distribution to a team under one Enterprise certificate
Two signing flows, your choice every time: tapping Sign or Re-sign brings up an animated picker between Classic (Cocosign's original signing flow/settings) and ESign Style (a guided, step-by-step flow with a live "Signature" progress screen that shows exactly what's happening — signing, deb unzipping, dylib discovery, and each injection — as it happens, then lets you install right from that same screen).
Per signing pass:
Bundle identifier, display name, version, and app icon
A custom entitlements file, or a specific provisioning profile from a certificate's extra profiles
Bulk find-and-replace of bundle identifiers and display names (apps with multiple extensions/targets)
Tweak/dylib injection — configurable injection path (@executable_path or @rpath), target folder, and the option to inject into app extensions as well as the main binary; a specific tweak from the Tweak Library can also override the injection path/folder just for itself
Removal of specific files from the app bundle (e.g. stripping an unwanted framework), or entire categories at once (all plug-ins, all Watch apps)
Force-enabling capabilities the app doesn't request itself: file sharing, iTunes file sharing, ProMotion, Game Mode, iPad fullscreen
Stripping supported-device restrictions, URL schemes, the embedded.mobileprovision, or an unused Watch app placeholder
Ad-hoc signing instead of standard signing
PPQ protection (basic or advanced) — reduces the chance Apple's signature-reuse detection flags a re-signed app
ElleKit/CydiaSubstrate compatibility switching for injected tweaks, and experimental Liquid Glass support
Choosing the export format per export — standard .ipa or .tipa (recognized by TrollStore for direct installation) — via an animated picker on export/signature actions
Auto-generated export filenames built from whichever of Name/Version/Bundle ID/Certificate/Timestamp you choose to include, configurable in Settings → Sign Default Config, and applied everywhere an app gets exported (Local Library, Cloud Library, WebDAV)
Bulk Signing
Apply one certificate and one signing configuration to multiple apps at once, instead of signing each one individually.
Re-sign your whole library after a certificate gets replaced
Roll out a new bundle ID/display-name scheme across several apps at once
Batch-install a set of apps after a fresh device setup
Your Apps
Local Library
A single home for every app on your device — freshly downloaded and already-signed — with one-tap install, re-sign, or dylib editing.
See at a glance what's downloaded vs. already signed and ready to install
Jump straight into single-app or bulk signing from one list
Manage injected dylibs on an already-signed app without starting over
Files
A full on-device file manager built into the app, rooted at its own sandboxed storage.
Import an .ipa directly into the signing flow
Extract .zip/archive files
Package a raw app bundle back into a signable .ipa
Browse, organize, and move files without leaving the app
Push any file straight to a configured WebDAV server
Downloads
A unified queue and history for every app download, wherever it came from — a Source, a direct link, or a manual import.
Track active and finished downloads in one place, with background progress
Send a finished download straight into your Local Library, Cloud Library, or WebDAV server
Re-share, export, or delete downloaded files without hunting through Files
Repos & Cloud
Sources (App Store)
Add AltStore-compatible repositories and browse their app catalogs like an App Store, entirely inside Cocosign.
Subscribe to any AltStore-format repo by URL
Browse every app across all your added sources in one combined feed, or per-source
Missing App Store metadata (icon, screenshots, description) is automatically backfilled from Apple's own listing when a repo doesn't provide it, via an optional Settings toggle
Community Repos
A curated, searchable directory of repositories shared by other Cocosign users — no need to already know a repo's URL.
Discover new repos without leaving the app or hunting on forums/Discord
Add a discovered repo in one tap, with a live "already added" indicator
Submit your own repo to the directory for others to find
Cloud Library
Cloud-hosted app storage tied to your CocoCloud Signing account — upload once, reach it from anywhere.
Upload a signed or unsigned .ipa and access it from any device
Filter your cloud apps by signed/unsigned status, with search
Generate a shareable link to a specific app, or copy a shared app into your own library (Pro accounts)
Requires a free CocoCloud Signing API key.
Certificates
Certificates
Manage every .p12/.mobileprovision pair you own, with real-time revocation checking.
Import certificate + provisioning-profile pairs, with optional nicknames
Check whether a certificate has been revoked by Apple, live — a newly-imported certificate is checked automatically, using either an on-device check or CocoCloud Signing's cloud checker (your choice, in Settings)
Select a default certificate for one-tap signing
Export a certificate as a single encrypted .cocosigncert file — bundles the .p12, its .mobileprovision (plus any extra profiles), and the password together, protected by a passphrase only you know (Cocosign never stores it and can't recover it); importing one auto-detects whether it's password-protected and skips the prompt if it isn't
Shared Enterprise Certs
Browse and import certificates your CocoCloud Enterprise account has made available to you — without ever handling the raw files yourself over chat or email.
Get notified inside the app the moment a new certificate is published for your team, with an option to import immediately
Browse all currently shared certificates, filtered by All/Signed/Revoked
Import a shared certificate directly into your local Certificates list in one tap
Tools
P12 Password Changer
Change the password on an existing .p12 certificate file — pick it from Files, from your own imported certificates, or by URL, without needing any third-party tool.
Recover access to a certificate whose password you want to change or standardize
Update an already-imported certificate's stored password in place after changing it
Certificate Checker
Check a .p12 and/or .mobileprovision's live status, validity dates, fingerprint, and entitlements against Apple — including checking a certificate and its paired provisioning profile together in one request.
Confirm a certificate hasn't been revoked before relying on it for signing
Inspect a provisioning profile's entitlements (push notifications, app groups, associated domains, etc.) without decoding it by hand
Diagnose why a certificate stopped working
Tweak Library
Store .dylib, .deb, .framework, and .bundle tweak files in the app once, ahead of time, instead of re-picking them from Files for every signing session.
Keep a personal collection of tweaks ready to inject into any app, in any signing flow (Classic or ESign Style), with no extra setup
Add an optional description to a stored tweak, so it's clear what it does later
Override the injection path (@executable_path/@rpath) and target folder for one specific tweak, without changing the signing session's overall defaults
P12 Password Changer, Certificate Checker, and Tweak Library all require a CocoCloud Signing API key.
Certificate Bundles (.cocosigncert)
Package a .p12 and provisioning profile(s) into a single, optionally encrypted .cocosigncert file under Settings → Certificates — the same format also works from a browser, no app or account needed.
Back up or move a certificate as one file instead of juggling a .p12 and .mobileprovision separately
Password-protect the bundle with its own passphrase, independent of the .p12's own password
Connect Cocosign to your own WebDAV server for a private, self-hosted alternative to cloud storage.
Push signed apps, downloads, or any file straight to your own server from Files, Downloads, or the Local Library
Browse and pull files back down from your WebDAV server into the app
WiFi File Transfer
Turn your device into a local file-transfer server, reachable from any device on the same network — no cables, no third-party apps.
Move files between your device and a computer/other device over WiFi
Optional password protection on the transfer server
Stays available in the background while the app is open, not just while the transfer screen is on-screen
Staying in the Loop
Live App Updates
Cocosign checks its own update server on launch and shows what's new, with real formatted release notes — not raw text.
Get notified of a new version with a rendered, readable changelog
Mandatory updates block the app with a clear "why" until you update, for critical fixes
Optional updates are dismissible and won't nag again for that version
Every "update" action leads to the guided install page, so a new version actually installs cleanly rather than linking a raw file
Patch Notes
A dedicated "What's New" screen in Settings → About, sourced from the same live update feed — not a hardcoded changelog that goes stale.
Catch up on what changed in the current version at any time, not just right after updating
Jump to the full historical changelog on the web
Community
Direct links to the project's Discord and Telegram, surfaced in onboarding and Settings.
Get help, share feedback, and hear about updates first via Discord
Follow announcements via Telegram
Getting Started
Onboarding
A guided first-launch walkthrough that actually teaches the app's real features instead of dropping users straight into a blank UI.
A fast, visual tour of signing, sources, cloud storage, and certificates for new users
Prompts for a CocoCloud API key up front so Cloud Library/Tools/Shared Certs work immediately, without it being a hard requirement to use the rest of the app
Points new users at the Discord/Telegram community and Pro benefits from their very first session
Personalization
Custom accent/theme color, picked from a palette in Settings → Appearance
Granular reset options in Settings → Reset (cache, sources, signed apps, imported apps, certificates, settings, onboarding, or everything at once) — each one restores sensible defaults rather than leaving the app empty
This page lists what Cocosign does today — nothing speculative or planned. Ready to try it? Install Cocosign.