Fully local IPA signing
Data and file handling
Privacy Policy
Last updated
Sylva Signer is designed to sign IPA files locally in your browser. The app does not require a signing server and does not intentionally upload your IPA, P12/PFX certificate, provisioning profile, password, or dylibs. If you choose temporary installation after signing, only the signed IPA is uploaded so iOS can fetch it over HTTPS.
Temporary installation sends the app name, bundle ID, version, and temporary IPA URL to Palera's manifest generator. If Palera is unavailable, the same manifest metadata is sent to the Sylva Worker as a backup. Certificates, profiles, passwords, and unsigned source files are not included.
Optional certificate caching stores selected signing material and password data in this browser's IndexedDB storage on this device. You can clear that cache from the signer interface.
If you use a hosted copy, your browser still downloads the application code from that host. Use a build and domain you trust.