A web-based tool to sign the Feather iOS app (.ipa) with your own certificate and provisioning profile, using the ipasign.cc service.
- Automatically downloads the latest Feather IPA from GitHub.
- Injects your certificate into the Feather IPA so that it is ready for use as soon as it's installed.
- Signs the IPA using your credentials via the
ipasign.ccAPI. - Provides a direct install link (
itms-services://) for your signed app. - "Send to Phone" button to copy an encrypted Imgbb-hosted URL for mobile access.
- Optionally generate a QR code for quick device scanning.
- Responsive design with full dark mode support.
- Open the page in your browser.
- Enter your certificate password.
- Upload your
.p12certificate file. - Upload your
.mobileprovisionfile. - Click 🔏 Sign IPA.
- Wait for the signing process to complete.
- Use the generated links to:
- Install Feather on your iOS device.
- Optionally send a secure link to your phone or scan a QR code.
- Tailwind CSS (via CDN)
- Signing API: ipasign.cc
- IPA download proxy: Cloudflare Workers (Using ./cf-worker.js script)
- Optional temporary file hosting (for import link encryption): Imgbb.com
- QR Code generation: qrcode
- Argon2 Key Derivation: Argon2 in Browser (Included)
- ZIP file modifying: jsZIP
- QR Code Reading: jsQR
This tool sends your .p12, .mobileprovision, and password directly to ipasign.cc in order to sign your IPA — this is required for the signing process to work. No certificate files are stored or uploaded anywhere else.
When using the "Send to Phone" or QR Code features:
- The certificate import link is encrypted client-side using AES-GCM (256-bit) with a key derived via Argon2id (using the Included Argon2 in Browser package),
- It is then split into 500 character chunks and encoded into a QRcode grid before being uploaded as temporary storage (deleted after one hour) to Imgbb.com.
- The decryption password is only shared via the URL fragment (not stored anywhere).
⚠️ You should only use this tool if you trust ipasign.cc with your signing credentials. As with any third-party service handling Apple certificates, there is an inherent security risk.
- Clone or download the HTML file.
- Open
index.htmlin any modern browser. - The signing API is called at
https://ipa.ipasign.cc/sign. - Polling status is checked at
https://ipa.ipasign.cc/status/{task_id}. - The latest IPA is fetched from the Feather GitHub Releases.
MIT License