ipadecrypt

README

End-to-end FairPlay decrypter for App Store apps. Give it a bundle ID, get a decrypted .ipa. And yes - it happily decrypts iOS 26 apps.

Requirements

On your computer

• macOS, Linux, or Windows - anything that can SSH into the device
• Go 1.25+ for building from source (prebuilt binaries are on the releases page)
• Jailbroken iPhone reachable over the network

On the jailbroken iPhone

All installable through Sileo:

Package	Purpose
OpenSSH	SSH server - ipadecrypt drives the device over SSH
AppSync Unified	Bypasses installd's signature check (add repo https://lukezgd.github.io/repo)
appinst	Installs modified IPAs on the device
zip	Packages the decrypted IPA on-device

Tested on iOS 16.7.11 with palera1n rootless and Dopamine on iPhone 8 Plus. iOS 14 through 17 on A10–A14 devices are expected to work.

Install

Download a prebuilt binary from the releases page.

Using go install:

go install github.com/londek/ipadecrypt/cmd/ipadecrypt@latest

From source (refer to BUILDING.md for detailed instructions):

git clone https://github.com/londek/ipadecrypt
cd ipadecrypt
go build ./cmd/ipadecrypt

Usage

First-time setup

ipadecrypt bootstrap

A four-step interactive wizard:

1. App Store sign-in - prompts for Apple ID; handles 2FA. Credentials stay local in ~/.ipadecrypt/config.json.
2. Device connect - SSH host / user / password; probes iOS version + arch.
3. Prerequisites - verifies AppSync, appinst, and zip are installed.
4. Helper install - uploads a small embedded helper binary.

Decrypt an app

ipadecrypt decrypt <bundle-id|app-store-id|app-store-url|path-to-local-ipa>

License

MIT.

Prior art

• majd/ipatool - the Apple Configurator impersonation the App Store client is based on.
• 34306/TrollDecryptJB - task_for_pid + mach_vm_read from a suspended spawn, entitlement set.
• akemin-dayo/AppSync - installd signature-bypass tweak + appinst.
• JohnCoates/flexdecrypt - the pre-iOS-16 approach that stopped working and prompted the pivot.

AI Disclaimer

This project was developed with the assistance of AI tools. While I can't guarantee the accuracy of all AI-generated content, I have overviewed creation process and then reviewed, tested the code to ensure it meets the project's requirements.