Fix: Unable to Verify App on iPhone (2024)

You tapped an app you got from TestFlight, a friend's enterprise build, or a sideloaded IPA, and iOS throws a grey alert: "Unable to Verify App." Usually the subtitle says "An internet connection is required to verify trust of the developer." The screen goes dark, the app bounces back to your home screen. I've seen this on iPhone 12, 13, 14, and even fresh iPhone 15 units running iOS 17.4, and it almost always hits right after you install something outside the App Store.

I know this error is infuriating. The app worked fine on your friend's phone, it's not a crash, and the popup gives you zero useful detail.

What's actually going on

iOS only lets apps run if their signing certificate is trusted. Apple's own apps carry that trust automatically. Anything from an enterprise certificate or a free Apple developer account needs you to manually say "yeah, I trust this person." Until you do, iOS blocks the launch.

There's a second layer that trips people up. iOS pings Apple's servers to verify the certificate hasn't been revoked. If that check fails, or if the certificate has actually been revoked (which happens constantly with enterprise certs that get abused for piracy), you get the same error no matter how many times you tap Trust.

The fix

Make sure you're online. Turn off any VPN. Apple's certificate check (ocsp.apple.com) gets blocked by a lot of VPN DNS filtering. Switch to plain Wi-Fi or cellular data.
Open Settings → General → VPN & Device Management. On older iOS it's called Profiles & Device Management. This is where the enterprise certificate lives.
Tap the developer or enterprise name. You'll see something like "XYZ Solutions LLC" or an Apple ID email. Don't tap the app name, tap the developer entry.
Tap "Trust [developer name]" and confirm with a second tap on the popup. It's a two-tap thing — people miss the second one all the time.
Force-quit the app and relaunch. Swipe up from the bottom (or double-tap Home on an older phone) and flick the app off-screen. It won't pick up the new trust state until it fully relaunches.
Still blocked? Delete the app, delete the profile in Settings, then reinstall. A stale profile from a previous version of the app is a very common trigger.

If the profile isn't listed under Device Management at all, the app didn't ask iOS to register one. That usually means the IPA was signed with a certificate that's already been revoked, and no amount of tapping will fix it.

Quick sanity check via your Mac

If you've got Xcode installed, you can see whether Apple is telling iOS to reject the cert:

# Look at the installed provisioning profile
security cms -D -i ~/Library/MobileDevice/Provisioning\ Profiles/*.mobileprovision | grep -A1 ExpirationDate

If the expiration has passed, that's your answer. The cert is dead, get a fresh build.

If it still fails

Certificate revoked: Enterprise certs get yanked by Apple fast when they're used to distribute pirated apps. Nothing you can do locally. Ask whoever gave you the app for a new build.
Free developer account: Those certs expire after 7 days. Re-sign and reinstall, it's a known limitation.
Date and time wrong: A device clock off by more than a few minutes will fail the certificate validity window. Settings → General → Date & Time → Set Automatically.
Content blockers or Pi-hole: If you're running a DNS filter at home, ocsp.apple.com and crl.apple.com need to resolve. Whitelist both.
Corporate MDM lock: If your iPhone is managed by a work profile, an admin policy can block untrusted developer profiles entirely. You'll have to ask IT, and no, there's no bypass.

The real fix in 9 out of 10 cases is step 4 — the double-tap on Trust that people skip. Start there before you start deleting things.