--- title: "SDK Sealing" description: "Protect your iOS app by creating a project, downloading the generated SDK, and integrating it into your build pipeline." --- > For the complete documentation index, see [llms.txt](https://docs.doverunner.com/llms.txt). SDK Sealing protects your iOS app through your build pipeline. You create a project in the Developer Console, download the generated SDK, and integrate it into your build — no code changes required. **Note:** If you would rather protect a finished build than change how it is built, see [IPA Sealing](https://docs.doverunner.com/mobile-app-security/ios/ipa-sealing/) instead. ## Guides - [SDK Integration](#applying-doverunner-mobile-app-security) Create a project, download the SDK, and integrate it into your app. - [App Configuration](#app-configurations) Manage service settings for your sealed iOS apps. - [CI/CD Integration](https://docs.doverunner.com/mobile-app-security/ios/cicd/) Automate sealing with Fastlane or Azure DevOps. - [SDK File Structure](https://docs.doverunner.com/mobile-app-security/ios/sdk-file-structure/) Understand the files included in the downloaded SDK package. --- ## Applying DoveRunner Mobile App Security ### Prerequisites Before creating a project, have the following ready: - **Bundle ID** — Your app's Bundle ID (e.g. `com.example.myapp`). This is set at project creation and cannot be changed later. - **Framework** — The framework your app is built with. For React Native, know the exact version used. ### Create a Project 1. In the Developer Console, navigate to **iOS Mobile App Security** → **SDK Projects**. 2. Click **+ Create Project** to open the **New iOS AppSealing Project** dialog. 3. Enter the **Project Name** and your app's **Bundle ID prefix** (for example `com.example`). The console appends `.*` to the prefix, so every Bundle ID that starts with it is covered. 4. Click **Create**. The system validates the Bundle ID and creates the project if the details are correct. **Note:** Each project supports one Bundle ID and it cannot be revised after creation. Your app's Bundle ID must start with the registered Bundle ID prefix. ![ios new project](https://docs.doverunner.com/img/mobile-app-security/console-ios-create-new.png) Each project appears as a card under **Manage Projects**, showing the project name and Bundle ID prefix. You can rename a project with the edit icon next to its name. #### iOS SDK Assistant (Beta) The top of **SDK Projects** shows a banner for **iOS SDK Assistant**, a macOS desktop app (Beta) that walks you through dropping in the SDK zip, installing AppSealing into your target, and archiving and sealing — without the command line. Click **Get the app** to open its details and **Download for macOS (.zip)**. It requires macOS 13 or later with Xcode 15 or later, and an active AppSealing iOS subscription on your account. ### Check Credential Click **Check Credential** on a project card to open **Project's credential information**. Along with the project name and Bundle ID prefix, it shows the project's **Credential**, **IV**, and **Key**, each with a copy button. Use these values if you implement server-side verification of app integrity: following the SDK guide, your app obtains an authentication key and sends it to your authentication server, which verifies it against this credential information. **Caution:** Do not expose the credential information. ### Download SDK 1. In **SDK Projects**, find the project you want to generate an SDK for. 2. Click **Download SDK** to open the download options. 3. Select values from the dropdowns: | Field | Description | | :---- | :---------- | | App Framework | The framework used to develop your iOS app: **Xcode & Flutter**, **Unity**, **Unreal**, **Xamarin**, **React Native**, **Ionic**, or **Cordova**. React Native, Ionic, and Cordova are marked **Hybrid**. | | Sealing Version | The version of DoveRunner protection to apply. The newest version is selected by default; if you pick an earlier one, the console shows **Older AppSealing Version**. Use the latest version for the newest security features. | | Framework Version | Shown for React Native only. Select your React Native major version and minor version from the two dropdowns. | 4. Click **Download**. The system validates the project and begins building the SDK. It downloads automatically when ready. **Note:** Hybrid frameworks (React Native, Ionic, Cordova) require a plan that includes hybrid apps. If they are marked **Expired** in the **App Framework** list, contact the [Help Center](https://support.doverunner.com) to enable them. ![ios download sdk](https://docs.doverunner.com/img/mobile-app-security/console-ios-download.png) #### Optional Settings | Option | Description | | :----- | :---------- | | Allow distributing without using the App Store & TestFlight. | Disables Apple certificate integrity validation. Enable this if your app is distributed outside the App Store or TestFlight (e.g. enterprise distribution or direct IPA installs). Checking it limits **Sealing Version** to the versions built for this distribution and shows a reminder that this SDK weakens some security features — use it only when necessary. | | Do not terminate the App on detecting Threat. | Shown only for sealing version `1.13.0.0` and later. Instead of force-closing the app on detection, the SDK exposes detection flags you can use to implement custom responses — register a callback for each threat type, and do not leave detections unhandled in production. Activated after a successful `generate_hash` run on the built IPA. | --- ## App Configurations **App Configuration** lets you manage service settings for your sealed iOS apps. It is shared by IPA Sealing and SDK Sealing. The list shows apps sealed by you or your team members. **Service** Controls whether DoveRunner Mobile App Security tracks hacking activity for the app. Usage-based charges apply while the service is active. Turn it off here if you are no longer using the app or want to stop protection. ![ios app config](https://docs.doverunner.com/img/mobile-app-security/console-ios-app-conf.png) --- ## Next Steps After downloading the SDK, integrate it into your build pipeline and run `generate_hash` to complete the sealing process. - [Fastlane Integration](https://docs.doverunner.com/mobile-app-security/ios/cicd/fastlane-automation-toolkit-ios/) Automate SDK integration and IPA sealing with Fastlane. - [Azure DevOps Integration](https://docs.doverunner.com/mobile-app-security/ios/cicd/azure-ci-cd-ios/) Set up an automated iOS sealing pipeline with Azure DevOps.