iOS 16 Sideloading Guide: Methods and Limitations
Sideloading on iOS 16: Methods, Changes, and Limitations
iOS 16, released September 2022, brought a customizable lock screen, iMessage editing, Passkeys, and an overhauled Focus system. For sideloaders, it introduced important new security concepts alongside changes to the developer ecosystem. This guide covers every method available on iOS 16, what changed from iOS 15, and how to get the best sideloading experience on any iOS 16 version.
Major iOS 16 Security Changes Affecting Sideloaders
Lockdown Mode
iOS 16 introduced Lockdown Mode, an extreme security configuration designed for high-risk individuals such as journalists, executives, and human rights workers who may be targets of sophisticated state-sponsored attacks. When enabled, it restricts a wide range of iOS features, including blocking configuration profiles and device-management enrollment and limiting some web technologies. Apple’s list of restrictions does not mention enterprise app installs.
Lockdown Mode is disabled by default and must be manually enabled. If sideloading stops working entirely on your iOS 16 device and you cannot identify another cause, check Settings > Privacy & Security > Lockdown Mode. If it is on, temporarily disabling it may restore normal sideloading functionality.
Rapid Security Response (RSR) Updates
iOS 16 introduced RSR: small, rapid patches for critical security vulnerabilities delivered outside of normal iOS update cycles. A certificate revocation that happens around the same time can make it look as if the update caused the problem. If apps stop working after an RSR update, the cause is most likely unrelated certificate revocation rather than the RSR itself.
Passkeys
iOS 16’s introduction of passkeys as a password replacement did not change how sideloading works.
Sideloading Methods on iOS 16
Certificate Method (Scarlet iOS, Recommended)
Certificate-based sideloading with Scarlet iOS kept working across iOS 16 versions. The Scarlet iOS installation flow was unchanged:
- Open Safari and go to scarletios.com.
- Tap the install button and confirm the Safari download prompt.
- Navigate to Settings > General > VPN & Device Management and trust the Scarlet iOS developer profile.
- Open Scarlet iOS, browse the library, and tap to install any app.
AltStore and Sideloadly
These computer-based methods continued working on iOS 16 with their usual constraints: 7-day certificate expiry on free accounts, a desktop computer requirement, and AltServer running persistently in the background for Wi-Fi-based re-signing. Since iOS 16, apps signed with an Apple ID also need Developer Mode: turn it on under Settings > Privacy & Security > Developer Mode and restart.
TrollStore (Limited Device and Version Support)
TrollStore exploited a CoreTrust vulnerability to install permanently-signed apps that never expire and do not require certificate trust. On iOS 16, TrollStore works on iOS 16.0 through 16.6.1; it does not work on iOS 16.7 or later. For users on those versions, TrollStore offers permanent installs without re-signing.
iOS 16 Version Compatibility Summary
| iOS 16 Version | Enterprise Cert (Scarlet iOS) | AltStore / Sideloadly | TrollStore |
|---|---|---|---|
| 16.0 – 16.1.2 | Yes | Yes | Yes |
| 16.2 – 16.4.1 | Yes | Yes | Yes |
| 16.5 – 16.7.x | Yes | Yes | 16.5 to 16.6.1 only |
iOS 16-Specific Sideloading Limitations
- iCloud features for sideloaded apps: Features such as CloudKit and iCloud Drive sync often do not work in re-signed apps, because they depend on the original developer’s entitlements, as on previous versions.
Troubleshooting iOS 16 Sideloading Issues
- “Unable to Download App” in Safari: Clear Safari cache and cookies in Settings > Safari > Clear History and Website Data, then retry.
- App icon installs but app won’t open: The certificate trust step was likely skipped. Visit VPN & Device Management and confirm trust status.
- Lockdown Mode blocking the install: Temporarily disable Lockdown Mode in Privacy & Security settings.
- App stopped working after Rapid Security Response: This is usually certificate-related rather than caused by the RSR. Reinstall via Scarlet iOS for the latest signed version.
iOS 16 and Security: The Bottom Line
iOS 16 introduced meaningful new privacy tools while leaving enterprise certificate sideloading fully intact. Lockdown Mode, which is off by default, may interfere with sideloading, and apps signed with an Apple ID through AltStore or Sideloadly also need Developer Mode, which iOS 16 introduced. For anyone looking to upgrade from iOS 16, the sideloading improvements in iOS 17 and 18 are worth knowing about: see our iOS 17 Sideloading guide for what changed next.
If you are on iOS 14 through iOS 26, Scarlet iOS has you covered. Download Scarlet iOS and start sideloading on iOS 16 today.