KSign
🛡️ Tips to Avoid Blacklists
To keep your apps running without sudden crashes, it's crucial to understand how Apple's revoke system works. Watch this guide to properly set up the DNS and protect your certificates.
What does it mean when an app is revoked?
A revoke happens when Apple blacklists the enterprise certificate used to sign your app. When this occurs, the app will instantly crash upon opening and can no longer be used until reinstalled with a new, valid certificate.
Why is the Anti-Revoke DNS important?
The DNS strictly blocks your device from communicating with Apple's servers (like ocsp.apple.com) that check if a certificate is valid. By blocking this, your device never receives the signal that a certificate was revoked, keeping your apps working.
Do I need to reinstall apps if they get revoked?
If you properly setup and enable the Anti-Revoke DNS *before* the revoke actually happens, you do not need to reinstall. If you get caught without the DNS active, you will be forced to delete the app and reinstall it with a newly signed certificate.
What is Anti-Revoke DNS?
Anti-Revoke DNS is a configuration profile that helps maintain the functionality of apps installed outside the App Store. It adjusts how your device communicates with certain verification services during app launch, which can help prevent apps from unexpectedly stopping.
- Greatly extends the lifetime of sideloaded apps
- Compatible with most signing services
- Reduces need to re-sign or reinstall apps frequently
- One-time setup — works across Wi-Fi networks
- Download and install the DNS profile below
- Go to Settings → Profile Downloaded → Install
- Enter your passcode if prompted
- Go to Settings → General → VPN & Device Management and ensure the profile is enabled/trusted
- For Wi-Fi: Go to Settings → Wi-Fi → tap (i) next to your network → Configure DNS → Manual — verify your custom DNS servers are listed and active
- Restart apps or toggle Airplane Mode briefly if needed.
File: anti-revoke-dns.mobileconfig (~4-8 KB)
Compatible with iOS 14 and later
Note: To keep this website ad-free, the download redirects through a short sponsor link.
• This configuration adjusts how verification requests are handled on the device.
• Effectiveness may vary over time as Apple updates iOS.
• For best results, avoid unnecessary full device restarts.
Download All Certificates
Get all Certs in One ZIP file
📝 How to Extract
- Tap the Download button above to get the ZIP file.
- Save the file, then move it to "On My iPhone" inside the Files app.
- Locate the ZIP file in "On My iPhone".
- Tap once on the ZIP file to automatically extract the certificates.
LATEST KSign iOS 26 Install IPA with New DNS and Certificate (No PC)
Complete guide to installing KSign on iOS 26, setting up Anti-Revoke DNS, and signing IPAs without a computer.
Getting Started with KSign
Complete guide to installing KSign, trusting the signing certificate, and navigating the main interface.
How to Use Anti-Revoke DNS
Learn how to block OCSP checks to prevent your apps from crashing or getting revoked by Apple.
Importing Custom Certificates (P12)
Step-by-step tutorial on importing your own .p12 and .mobileprovision files for signing apps.
📱 Scan to open
×Point your iPhone or iPad camera at this QR code to open the page instantly.
Want to try ESign instead?
Discover ESign, featuring advanced IPA patching, custom repositories, and seamless installation.