Sign on-device
Bring an IPA, certificate, and profile to the device. The existing zsign workflow handles the signing pass locally.
On-device IPA signer
ForgeSign brings a focused signing, install, and library workflow to iPhone and iPad. Choose your materials, see what is ready, and keep the pass local.

Latest release · Version 2.1
ForgeSign 2.1 adds a dedicated quick action to IPA previews in Files and hands the selected archive directly into the signing workflow.
ForgeSign 2.1 · Dark-mode review
The app stays glassy and legible in dark mode, with the same information hierarchy across each tab.



A complete signing pass
The interface stays quiet until you need a decision, then puts the next useful action in reach.
Bring an IPA, certificate, and profile to the device. The existing zsign workflow handles the signing pass locally.
See package, bundle, encryption, and architecture signals before committing to a signing run.
Keep validated certificate details and optional passwords available for repeat signing without re-entering everything.
Opt in to compatible decrypted Mach-O dylibs, with a separate app-extension toggle, before the normal signer runs.
Save repository feeds, inspect available IPAs, and send a selected download into the same signing flow.
Keep signed history together with reinstall, share, delete, and the existing semi-local install path.
The rhythm
Optional tools stay beside the core pass, so the familiar signing route remains familiar.
Choose an IPA and read the preflight signals before signing.
Add a certificate, profile, and any optional bundle or dylib choices.
Run the on-device signer and save the result to the library.
Use the existing install action when the signed app is ready.
Workflow review
A product review of the interaction itself: fewer hidden steps, clearer boundaries, and a library you can return to.
The IPA gets a quick read before the signing action, so a missing or unsuitable input is visible earlier.
Dylib injection and app-extension handling are surfaced as an opt-in layer around the unchanged normal route.
Sources feed the same signer, while Library keeps signed history close for the next install or share.
Questions, answered
No. The release is intentionally unsigned so you can sign it with your own certificate and provisioning profile before installing.
ForgeSign 2.1 adds an Open in ForgeSign quick action to IPA previews in Files, then loads the selected archive directly into the signing workflow.
Use a compatible, decrypted Mach-O dylib that matches the target architecture. Injection is performed on a disposable IPA copy before the existing signer; the original input is left untouched.
The signing workflow is designed to run on-device. You remain responsible for the source IPAs, certificates, profiles, and modifications you choose to use.
ForgeSign is developed in public on GitHub. Issues and release notes live there too.
Download ForgeSign 2.1 and bring your own signing materials.