How to Stop Refreshing Sideloaded Apps Every 7 Days

The seven-day timer comes from Apple’s free personal-signing certificate, not from any app or store you used to sideload it. You can automate around it with SideStore’s on-device background refresh, pay $99 a year for a Developer account that signs for a full year, or move to a managed-signing service like builds.io that removes the timer altogether. Which one is worth it depends on how many apps you run and how much upkeep you can tolerate.
Why sideloaded apps reset every 7 days
Every app that runs on an iPhone has to be signed by a certificate Apple recognizes. The App Store signs its own apps automatically and permanently. Sideloading means signing an app yourself instead, and the tool most people reach for first — AltStore or SideStore — does that signing with your own free Apple ID.
A free Apple ID was never built to distribute apps. It exists so a developer can test their own project on their own phone for a few days before wiping it. Apple’s own developer documentation is explicit about the shape of that account: a provisioning profile issued to a free (“personal team”) account expires seven days after it’s issued, you’re capped at three apps signed at once, and you can register roughly ten new app IDs in any rolling week. None of that is a bug in AltStore or SideStore — it’s Apple’s policy for the free tier, and every tool built on top of a free Apple ID inherits it whether it wants to or not.
That short leash is also why “cannot add more than 3 apps” is one of the most common complaints in sideloading communities — it isn’t SideStore or AltStore being stingy, it’s the free account underneath both of them. LiveContainer works around the number by running several apps inside one signed slot, but it doesn’t touch the seven-day clock; everything inside that container still goes dark on the same schedule as everything outside it.
Pay for the Apple Developer Program — $99 a year, a real membership, not a trick — and the same signing mechanism gets a longer leash: certificates last up to a year instead of a week, and the three-app ceiling disappears. The account changes, the underlying method doesn’t.

What people actually try, and where it breaks
Most people’s first fix is a calendar reminder: plug into a laptop, open AltServer, resign, repeat next week. It works until the one week you’re traveling, or the laptop is asleep when AltServer tries to phone home, and the app just stops opening with no warning.
The next thing people reach for is SideStore, specifically because it promises to refresh apps on its own without a computer sitting on the network. It genuinely does — once. The one-time setup still needs a PC to generate a pairing file, and after that SideStore leans on a small on-device VPN (StikDebug or LocalDevVPN) plus an “anisette” service that impersonates a real Mac closely enough for Apple’s signing servers to accept the request. When all three pieces hold — the VPN stays connected, the pairing file is still valid, Apple hasn’t changed anything server-side — the refresh happens invisibly in the background. When one piece slips, which happens often enough to be its own recurring complaint, the fix is the same manual troubleshooting loop as before. One frequently discussed thread on the topic is, almost word for word, a request for a way to fully automate the chore — which tells you the free tools haven’t actually solved it, they’ve just moved where the friction sits.
A third path shows up in almost every thread about the seven-day wall: buy a certificate from a Telegram or Discord seller. These use a shared Apple enterprise certificate, which skips the seven-day clock entirely and lifts the three-app cap, because it isn’t tied to your personal Apple ID at all. The trade is that Apple actively hunts these shared certificates and disables them in waves — when that happens, every app signed with that certificate stops working for every buyer at once, with no warning and often no seller left to answer messages.
Every way to stop refreshing, compared
| Approach | Needs a PC? | How often you fix it | App limit | Price | Best for |
|---|---|---|---|---|---|
| Free Apple ID + AltStore/SideStore, manual refresh | Yes, on hand every week (AltStore) | Every 7 days | 3 apps | Free | 1-2 apps, don’t mind the weekly chore |
| SideStore auto-refresh over Wi-Fi | Once, to pair | Automatic, until VPN/pairing breaks | 3 apps (more via LiveContainer) | Free | Comfortable troubleshooting pairing files |
| Paid Apple Developer Program | Once a year, to renew | Once a year | No 3-app cap | $99/year | Developers who want their own cert |
| Third-party certificate sellers | Never | Unpredictable revoke waves | Many, until revoked | Varies, no refunds | Risk-tolerant, chasing “free forever” |
| Managed signing (builds.io) | Never | Never — revokes replaced for you on Premium | Full catalog, no cap | Subscription, plans from $6.99/year | Done with the maintenance loop |
The honest version of each option
Free Apple ID + AltStore or SideStore, refreshed by hand. This is still a completely legitimate way to sideload, and for one or two apps it’s genuinely not much work. AltStore needs a computer running AltServer on the same Wi-Fi at the moment your certificate expires — no computer awake, no refresh. Both tools share the same three-app ceiling and seven-day clock because both sign with the same kind of free Apple ID. If you’re deciding between the two, our AltStore vs SideStore vs LiveContainer breakdown walks through which is less annoying day to day, and every free sideloading method ranked by effort covers the rest of the free tools, including ones that skip AltStore entirely.
Auto-refresh over Wi-Fi. This is what most people mean when they ask how to “automate” sideloading. SideStore’s version needs a computer exactly once, to generate a pairing file, and then keeps itself signed using an on-device VPN and an anisette service that stands in for a real Mac during login. It’s the closest free option gets to “set it and forget it” — until the VPN helper app gets pulled from the App Store, the pairing file goes stale, or an iOS update reshuffles the plumbing underneath it.
Worth separating this from JIT, since the two get lumped together constantly. Refresh is about keeping the certificate valid so apps stay installed at all; JIT (Just-In-Time compilation) is a separate, optional speed boost that a handful of emulators need to run at full pace, and it uses the same pairing file and on-device VPN plumbing for a different job. Most sideloaded apps — tweaks, streaming clients, ordinary games — never touch JIT and only care about the refresh side. We cover the JIT half in detail, including exactly where it currently breaks on iOS 26 and 27, in our LocalDevVPN and JIT guide.
Paying Apple $99 a year. This is the closest thing to “buy your way out” while still doing your own signing. The three-app limit is gone and the certificate is good for a year instead of a week, so the seven-day treadmill effectively stops being your problem. What doesn’t change: you’re still the one running AltStore or SideStore, still troubleshooting your own signing chain, and you’re paying full developer-program price for what is, underneath, personal sideloading.
Third-party certificate sellers. These promise no seven-day limit and no computer, and technically deliver both — for a while. The mechanism is a shared Apple enterprise certificate covering many buyers at once, and Apple’s whole business is finding and disabling exactly that kind of shared abuse. When a revoke wave hits, every app on that certificate goes dark the same day, and the person you paid is often unreachable. This is a different failure mode than the free-cert “DNS bypass” community method, which tries to delay detection rather than avoid it — we go through how that one actually works, and its own risks, in the free certificate method guide, and cover why any shared-certificate approach eventually gets caught in why sideloaded apps get revoked.
Managed signing (builds.io). This is the same underlying idea as the $99 Developer account — a certificate that isn’t tied to a free Apple ID’s seven-day limit — except the signing and renewal are handled for you instead of something you maintain. You add your device and install from the catalog in Safari; there’s no pairing file, no VPN app to babysit, no laptop to keep awake, and no calendar reminder. It is a subscription, with plans starting at $6.99 a year, and that’s the honest cost of not doing any of the above yourself. On the Premium tier, if a certificate is ever revoked it’s reissued automatically rather than leaving you stuck like a cert-seller’s customers would be.

How to actually decide
If you sideload one or two apps and don’t mind a five-minute chore once a week, the free Apple ID setup is fine — don’t pay for a problem that small. If you want that chore automated and you’re comfortable being your own IT department when a VPN helper breaks, SideStore’s on-device refresh is the free option built for exactly that. If you’re already deep enough into sideloading to call yourself a developer, or you run enough apps that the three-app cap is the actual pain, the $99 Apple Developer account buys you a full year and no cap without changing your workflow. Skip certificate sellers regardless of your situation — the “no seven-day limit” pitch is real, but so is the day it all disappears with no recourse.
Pick a managed signing service like builds.io if what you actually want is to stop thinking about certificates at all: no PC, no VPN, no weekly ritual, and a plan that covers you if Apple revokes something anyway. That’s the trade the timer was always asking you to make — time and tinkering, or a subscription that removes both.