Enterprise Certificate Safety: What You Need to Know
Enterprise certificates are how most on-device sideloading services, Scarlet iOS included, get apps onto an iPhone without a computer. They are a real Apple technology, but the way sideloading services use them is not what Apple intended, and that explains both the convenience and the risks. This guide covers what an enterprise certificate is, what trusting one actually allows, the real risks, and how to stay safe. Last checked: October 27, 2026, against Apple’s own program and support pages.
What Is an Enterprise Certificate?
Apple issues enterprise certificates through the Apple Developer Enterprise Program, which costs 299 US dollars a year. According to Apple, only organizations that are a legal entity with 100 or more employees can enroll, they must pass a verification interview and ongoing evaluation, and they may use the program only for proprietary in-house apps distributed privately to their own employees. Think of a warehouse inventory app or a hospital’s internal clinical tool. If you want to get your own company’s app onto iPhones, see Scarlet iOS for business for the options and why a shared certificate is a poor fit for business data.
Compared with an App Store app or a personal developer certificate, an enterprise certificate:
- can sign apps for any number of devices, with no device registration
- skips App Store review completely
- needs the user to trust the developer once in Settings before its apps open
- does not need Developer Mode, which iOS 16 and later require for apps signed with a personal (development) certificate
How Sideloading Services Use Enterprise Certificates
A sideloading service signs the apps in its library with an enterprise certificate and lets anyone install them. That breaks Apple’s program rules, which limit distribution to the organization’s employees. In 2019 Reuters reported that services such as TutuApp, Panda Helper, AppValley and TweakBox were using enterprise certificates this way, and Apple told Reuters that developers who misuse its enterprise certificates break the Apple Developer Enterprise Program Agreement and lose those certificates.
Apple applies this to everyone. In January 2019 it revoked the enterprise certificates of Facebook and Google after both used them to distribute data-collecting research apps to the public, which broke their internal employee apps as well.
This is why sideloaded apps sometimes stop opening all at once: Apple found the certificate in public use and revoked it. Our guide on what to do when the Scarlet certificate is revoked covers the fix.
One thing most guides get wrong: the developer name you see in Settings is usually not the sideloading service. It is the company the certificate was issued to, which is often unrelated to the service and sometimes a business in another country. A real company name therefore does not tell you the service is trustworthy, and an unfamiliar name does not by itself mean the app is malicious.
What Trusting a Certificate Actually Means
The first time you open an app signed with an enterprise certificate, iOS blocks it until you trust the developer. Apple’s steps are:
- Open Settings > General > VPN & Device Management.
- Under Enterprise App, tap the developer name.
- Tap Trust “developer name” (on iOS 18 and later the button can read Allow & Restart) and confirm.
You need an internet connection for this step: iOS checks the certificate with Apple (Apple’s support page names ppq.apple.com), and shows “Not Verified” if it cannot. iOS also re-checks the certificate from time to time, which is how a revocation reaches your iPhone.
Trust applies to the developer, not to one app: every app signed with that certificate can now open. What trust does not do:
- it does not give the app access to other apps’ data; enterprise apps run in the same sandbox as App Store apps
- it does not grant permissions; the app still has to ask for your location, photos, camera, contacts and so on
- it does not install a profile or change device settings
So the trust step itself is not the main danger. The danger is what you install with it.
The Real Risks
- Modified apps: most apps signed this way are modified copies of real apps. Nobody at Apple reviewed them, so a changed build can capture what you type into it, including logins. Never sign in to your main Apple ID, email or bank inside one.
- Account bans: services such as Snapchat and many online games detect modified clients and can lock or ban the account.
- Revocations: when the certificate is revoked, every app signed with it stops opening until the service re-signs it. Keep data you care about backed up outside those apps.
- Configuration profiles: some services also ask you to install a configuration profile. That is a different and more powerful thing than trusting a certificate: a profile can add a VPN, a root certificate that lets someone read your encrypted traffic, or device management. Check what a profile contains before you install it, and do not install one that adds a root certificate or device management unless you know exactly why.
- DNS tricks: some guides tell you to block Apple’s certificate checks with a DNS profile so revoked apps keep working. That also blocks a protection iOS uses for you, and the apps stop as soon as the DNS setting fails, so we do not recommend it.
How to Judge a Certificate and the Service Behind It
Look at the service, not the certificate name
As explained above, the name in Settings usually belongs to a third party. What matters is the service that gave you the app: how long it has existed, whether it has an active community that reports problems, and whether it is open about what it signs.
Check where the apps come from
A service that only signs a curated library or apps from known repos is a lower risk than one that signs whatever anyone uploads. Our list of the best IPA libraries and repositories for 2026 has a safety note for every source.
Watch for red flags
- pressure to trust or install something immediately
- a request for your Apple ID password or payment details just to install apps
- a configuration profile with a root certificate or device management, when you only expected an app
- apps that behave strangely after install: heavy battery drain, unexpected network activity, or apps you did not install
How to Remove Trust
To stop trusting a developer, follow Apple’s steps:
- Open Settings > General > VPN & Device Management.
- Under Enterprise App, tap the developer name.
- Tap Delete App. This removes all apps from that developer, and the developer is no longer trusted on the device.
If you also installed a configuration profile, remove it in the same menu under Configuration Profile.
Other Signing Methods Compared
| Method | Certificate owner | Apps last |
|---|---|---|
| Enterprise (Scarlet iOS and similar) | An organization, shared by many users | Until Apple revokes it |
| Free Apple ID (AltStore, SideStore, Sideloadly) | You | 7 days, 3 active apps |
| Paid developer account (Feather, KSign, computer tools) | You | Up to 1 year |
| App Store or EU marketplaces | The developer, reviewed by Apple | No limit |
With your own certificate, other people’s use cannot get it revoked; the cost is setup (a computer or a 99 US dollar a year developer account). With a shared enterprise certificate you get the easiest setup but accept revocations. For a side-by-side of the bring-your-own-certificate option, see Feather vs Scarlet iOS, and for all free tools, free sideloading tools compared.
FAQ
Is trusting an enterprise certificate dangerous?
The trust step alone does not give an app extra access; apps stay sandboxed and must ask for permissions. The risk is the apps you install with it, and any configuration profile a service asks for.
Why does the certificate show a company I have never heard of?
Sideloading services use certificates issued to other organizations. The name tells you whose certificate it is, not who runs the service.
Will Apple punish me for using an enterprise-signed app?
Apple acts against the certificate, not the user: when it revokes the certificate, the apps stop opening. Separate services (social networks, games) can still ban accounts that use modified clients.
Can I use enterprise-signed apps without internet?
The first trust needs an internet connection, because iOS verifies the certificate with Apple. After that the apps open offline until iOS re-checks the certificate.
The Takeaway
An enterprise certificate is a legitimate Apple technology that sideloading services use outside Apple’s rules. That is why it is easy (no computer, and a shared certificate instead of your Apple ID) and why it is fragile (revocations). Trusting one is not the main risk; modified apps, account bans and configuration profiles are. Use well-known sources, keep your main accounts out of modified apps, and read is iOS sideloading safe and our guide on protecting your privacy with third-party app stores for the rest. If you want the easiest start, you can get Scarlet iOS from our install page.