IPA analyzer: inspect any .ipa in your browser

• Identity and Info.plist

  Name, bundle ID, version, build, minimum iOS and device families, plus every Info.plist key in a searchable table.

• Privacy prompts and network rules

  Each permission prompt with its usage text, App Transport Security exceptions and the URL schemes the app registers.

• The Mach-O executable

  Architectures, FairPlay encryption state (cryptid), PIE, minimum OS and SDK, the binary UUID and every linked library.

• Entitlements from the signature

  Read from the code signature, so they show for App Store builds that carry no provisioning profile.

• Frameworks and extensions

  Every embedded framework and app extension, with its version, bundle ID and size inside the bundle.

• Size by category

  Archive size against unpacked size, a breakdown by content type, and the 20 largest files in the bundle.

• Provisioning profile

  Profile type, team, expiry and device count, whenever the build ships an embedded.mobileprovision file.

Bundle ID and version

CFBundleIdentifier names the app on the App Store. CFBundleShortVersionString is the public version, and CFBundleVersion is the build number.

Minimum iOS

MinimumOSVersion is the oldest iOS the build installs on. The executable records its own minimum too, and the report shows both.

FairPlay encrypted

A cryptid of 1 means Apple's FairPlay encryption wraps the executable's code. Every App Store download carries it, and the report still reads everything else.

Entitlements

These are the capabilities Apple signed the app for, such as push notifications, app groups and associated domains.

Linked libraries

Paths under @rpath ship inside the app, while /System and /usr/lib paths come with iOS. A weak link may be missing at launch.

Archive and unpacked size

Archive size is the .ipa file itself. Unpacked size is the bundle before App Thinning removes assets a device does not need.

Every .ipa has the same layout. These are the parts the analyzer reads.

Payload/

The top folder. It holds one .app bundle, which is the app itself.

Info.plist

The app's identity card, with its name, bundle ID, version and permission prompts. It is stored as XML or binary.

embedded.mobileprovision

A signed profile naming the team, devices and entitlements. Development, Ad Hoc and Enterprise builds carry one, and App Store builds do not.

Frameworks/

Embedded dynamic frameworks and Swift libraries that the executable loads at launch.

PlugIns/

App extensions such as widgets, share sheets and notification services, each one a bundle of its own.

Assets.car

The compiled asset catalog, with icons, images and colours packed into a single file.

SC_Info/

FairPlay licensing data the App Store adds at download time. It links the encrypted executable to an Apple account.

_CodeSignature/

The seal over every file in the bundle. Changing a single byte breaks the seal.

Is my IPA uploaded?

No. The file never leaves your device. The analyzer reads it inside this browser tab with built-in APIs. It sends no network requests, so it keeps working offline once the page has loaded.

Is there a size limit?

No file size cap applies. The page reads only the parts it needs. A 460 MB IPA shows its first results after under 2 MB of reads. Entitlements take one longer pass through the executable.

Can it read a FairPlay-encrypted App Store IPA?

Yes. FairPlay encrypts the app's code, in the main executable and its frameworks. Info.plist, entitlements, assets, framework names and versions, and load commands stay readable. The report also shows the cryptid flag.

Why is there no provisioning profile?

App Store builds do not ship one, because Apple removes embedded.mobileprovision at distribution. Development, Ad Hoc and Enterprise builds keep it. The analyzer then shows its type, team, expiry and device count.

How do I find the bundle ID and minimum iOS?

Drop the .ipa and read the identity card at the top. It shows CFBundleIdentifier and MinimumOSVersion from Info.plist, with the version, build and device families beside them.

How do I see an app's entitlements?

Drop the .ipa and wait for the Entitlements card. The analyzer reads them from the executable's code signature. That is the same source codesign -d --entitlements reads on a Mac.

Does it work on Windows and Linux?

Yes. It runs in any current browser, including Chrome or Edge 103+, Firefox 113+ and Safari 16.4+. There is nothing to install on macOS, Windows, Linux or ChromeOS.

Is it an IPA viewer or an IPA inspector?

Both. It opens any .ipa to show its Info.plist and file sizes, then inspects the executable, signature and frameworks. For assets, fonts and build diffs, use fr0stbyte for Mac.