TrollStore is one of the most talked-about tools in the iOS sideloading community, and for good reason: it lets you install apps and tweaks that stay signed permanently, without the seven-day re-signing treadmill that comes with a free Apple ID or a revoked certificate. In this guide we'll walk through what TrollStore actually is, which devices and iOS versions support it, and how the original TrollHelperOTA installation flow worked — the same method popularized in early 2023 guides for iOS 14.0 through 15.6.1.

What Is TrollStore?

TrollStore, created by developer opa334, exploits a bug in Apple's CoreTrust code-signing checks. Instead of re-validating a certificate every few days like AltStore or Sideloadly, TrollStore uses the bug to sign apps in a way iOS treats as permanent. Once an app is installed through TrollStore, it keeps working indefinitely — no computer, no re-signing, no seven-day countdown.

It's important to be precise about what TrollStore is not: it is not a jailbreak. It doesn't give you root access or remove Apple's sandboxing. What it gives you is persistent code signing, which happens to be enough to install unsigned or resigned IPAs (including many jailbreak-adjacent tweaks and modified apps) without any of the usual expiry headaches.

Device & iOS Compatibility

The original TrollHelperOTA-based install targeted a specific compatibility window:

  • arm64e devices (A12 chip and newer): iOS/iPadOS 14.0 – 15.6.1, plus a handful of 15.5/15.6 betas
  • arm64 devices (A9 – A11 chips): iOS/iPadOS 14.0 – 15.6.1

Since that release, the TrollStore project has continued to evolve, with newer installers covering different iOS ranges as Apple patches the underlying bugs and new ones are discovered. Compatibility for CoreTrust-style exploits changes constantly, so always check the current supported version list on the official TrollStore GitHub repository before attempting an install on your device.

How the TrollHelperOTA Install Worked

For devices inside the supported range, the classic install flow looked like this:

  1. Open the TrollStore installer page in Safari on the device you want to install to (not a computer — this was an on-device, browser-based install).
  2. When prompted to open the page in a different app, allow it — this triggers an over-the-air (OTA) install profile for a small helper app.
  3. Install the helper app when prompted. It was intentionally disguised under an unrelated name so it wouldn't immediately stand out on the Home Screen.
  4. Return to the Home Screen and open the disguised helper app.
  5. Tap the button inside it to install TrollStore itself.
  6. Launch TrollStore from the Home Screen once it appears.
  7. Inside TrollStore, run "Install Persistence Helper." This is the step that actually applies the permanent signing trick.
  8. Choose a rarely-used stock app (Tips is a common pick) to host the persistence helper.
  9. Delete the disguised helper app once TrollStore is confirmed working — it's no longer needed.

Heads up: whichever app you choose to host the persistence helper (e.g. Tips) will stop functioning normally afterward — that trade-off is expected. Your device will also respring (the Home Screen will briefly restart) partway through the process. Only ever install TrollStore itself, and any IPA through it, from sources you trust.

Why This Matters for Sideloading

The appeal of TrollStore comes down to convenience and reliability: once an app is in, it's in for good, even across most iOS updates on the same major version. That's a very different experience from certificate-based signing methods, where an app's install lifetime is tied directly to how long the signing certificate stays valid and unrevoked.

That said, TrollStore only works on the specific chip/iOS combinations its exploit supports. If your device falls outside that window — or you'd rather not depend on an on-device exploit at all — certificate-based signing (the approach CocoCloud is built around) is the more broadly compatible fallback: it works across current iOS versions and device generations, at the cost of needing periodic re-signing when a certificate is revoked.

The Bottom Line

TrollStore remains one of the cleanest ways to get permanent app installs on a supported device, and the TrollHelperOTA flow is a good example of just how far a single CoreTrust bug can go. If your device and iOS version are in range, it's well worth trying — just get it from the official source, double check current compatibility first, and know which app you're sacrificing to host the persistence helper.