Guide

完整使用教程Full tutorial

九章，从准备工作到日常续签。左边（窄屏是上面）那段轨道可以直接跳章。Nine chapters, from setting up to everyday renewal. Use the rail to jump between chapters.

准备工作Before you start

  • 一台 Windows 电脑、一根数据线，以及 爱思助手A Windows PC, a USB cable, and i4Tools
  • 从官网「下载」拿到的 Seal.ipa（未签名，需要自己签一次）The Seal.ipa from this site (unsigned — you sign it once yourself)
  • 一个自己的 Apple ID：免费账号就可以Your own Apple ID — a free account is fine
  • 需要配对时，手机与电脑能用数据线连上A cable that can connect the iPhone to the PC when pairing
  • 手机连上 Wi-Fi，并开启 LocalDevVPNThe iPhone on Wi-Fi with LocalDevVPN turned on
  • LocalDevVPN 不在国区 App Store，需用外区 Apple ID 搜索下载LocalDevVPN is not on the China App Store — search for it with a non-China Apple ID

用爱思助手安装 SealInstall Seal with i4Tools

Seal 发布的是未签名的包，必须用你自己的 Apple ID 签一次才能装。这一步需要电脑，装好之后就不用再连电脑了。Seal ships unsigned — you must sign it once with your own Apple ID before it can be installed. This is the only step that needs a computer.

  1. 用数据线连接手机和电脑，打开爱思助手。Connect the iPhone to the PC with a cable and open i4Tools.
  2. 点击「工具箱」→「IPA 文件签名」。Go to Toolbox → IPA Signing.
  3. 勾选「同时添加到下载中心」。Tick Also add to Download Center.
  4. 点击「添加 IPA 文件」，选择下载好的 Seal.ipa，点击「打开」。Click Add IPA File, pick the Seal.ipa you downloaded, then click Open.
  5. 确认 Seal 已出现在列表中。Confirm Seal now appears in the list.
  6. 切换到「Apple ID 签名」，点击「添加 ID」。Switch to Apple ID Signing and click Add ID.
  7. 输入自己的 Apple ID 和密码，点击「确定」。Enter your Apple ID and password, then click OK.
  8. 弹出双重认证提示时，先在手机上点击「允许」拿到 6 位验证码，再填到电脑上，点击「确认」。When two-factor authentication pops up, tap Allow on the iPhone to get the 6-digit code, type it on the PC, then click Confirm.
  9. 选中刚添加的 Apple ID，并确认 Seal 也处于选中状态，点击「立即签名」。Select the Apple ID you just added, make sure Seal is selected too, then click Sign Now.
  10. 等待签名完成。失败可以先重试一两次；仍失败就换一个 Apple ID。Wait for signing to finish. If it fails, retry once or twice; if it still fails, try another Apple ID.
  11. 签名成功后关闭窗口，打开爱思助手「下载中心」。Once signing succeeds, close the window and open Download Center in i4Tools.
  12. 选中刚签好的 Seal，点击「安装」，选择自己的设备，等待安装完成。Select the signed Seal, click Install, choose your device, and wait for it to finish.

签名工具就是 爱思助手，不需要其他电脑端工具。The signing tool is i4Tools — no other desktop software is needed.

首次打开并信任 SealOpen and trust Seal

安装完成后，首次打开 Seal 会提示「不受信任的开发者」。The first time you open Seal, iOS warns about an untrusted developer.

  1. 前往「设置」→「通用」→「VPN 与设备管理」。Go to Settings → General → VPN & Device Management.
  2. 找到签名 Seal 用的那个 Apple ID，点进去。Find the Apple ID you used to sign Seal and tap it.
  3. 点击「信任」，弹窗中选择「允许」。Tap Trust, then choose Allow in the dialog.
  4. 回到桌面，连接 Wi-Fi，并开启 LocalDevVPN。Back to the Home Screen, connect to Wi-Fi and turn on LocalDevVPN.
  5. 打开 Seal，允许通知、无线局域网与蜂窝网络权限。Open Seal and allow notifications, local network and cellular permissions.
  6. 阅读隐私政策和用户协议，点击「同意并继续」。Read the Privacy Policy and Terms of Use, then tap Agree and Continue.

协议页点「暂不使用」会留在这一页，不进主界面；要用 Seal 就点「同意并继续」。Tapping "Not now" on the consent screen keeps you on that page — to use Seal, tap Agree and Continue.

设备配对Device pairing

按系统版本选一个方案：iOS 27 及以上用方案 A，直接在手机上配对；iOS 17.4–26 用方案 B 的电脑配对助手。Pick the option that matches your iOS version: on iOS 27 and later use Option A and pair right on the iPhone; on iOS 17.4–26 use Option B with the desktop pairing assistant.

方案 AOption A

iOS 27：直接在手机配对iOS 27: pair directly on iPhone

  1. 连接 Wi-Fi，并开启 LocalDevVPN。Connect to Wi-Fi and turn on LocalDevVPN.
  2. 打开 Seal，进入「我的」→「设备」。Open Seal and go to Me → Device.
  3. 点击「开始设备配对」，允许 Seal 查找本地网络中的设备。Tap Start Device Pairing and allow Seal to find devices on your local network.
  4. 回到桌面，打开「设置」→「隐私与安全」→「开发者模式」。Back to the Home Screen, open Settings → Privacy & Security → Developer Mode.
  5. 点击「与 Seal 配对」→「配对」。Tap Pair with Seal → Pair.
  6. 输入锁屏密码后，系统会要求输入 Seal 显示的 6 位配对码。After your passcode, iOS asks for the 6-digit pairing code shown in Seal.
  7. 切回 Seal 记下页面上的 6 位代码，再回到设置里填入。Switch back to Seal, note the 6-digit code, then return to Settings and enter it.
  8. 切回 Seal，出现「配对完成」即成功。Switch back to Seal — Pairing complete means it worked.
方案 BOption B

iOS 17.4–26：用 Seal 配对助手iOS 17.4–26: use the pairing assistant

  1. 连接 Wi-Fi，并开启 LocalDevVPN。Connect to Wi-Fi and turn on LocalDevVPN.
  2. 打开 Seal「我的」→「设备」，保持这一页打开。Open Seal → Me → Device and leave that page open.
  3. 用数据线连接手机和电脑，保持手机解锁。Connect the iPhone to the PC with a cable and keep the iPhone unlocked.
  4. 系统提示「信任此电脑」时，在手机上点击「信任」并输入锁屏密码。When iOS asks whether to trust this computer, tap Trust and enter your passcode.
  5. 打开 Seal 配对助手，等待识别出设备。Open the Seal Pairing Assistant and wait for it to detect the device.
  6. 点击「开始配对」，期间不要拔线、锁屏或退出助手。Click Start Pairing. Do not unplug, lock the phone or quit the assistant while it runs.
  7. 等待助手提示「配对完成」，配对信息会自动交给 Seal。Wait for "pairing complete" — the pairing data is handed to Seal automatically.
  8. 回到 Seal「设备」页，等待状态变为已配对。Go back to Seal → Device and wait for the status to become Paired.

如果显示「已导入，待验证」，通常是 Wi-Fi 与 LocalDevVPN 没有同时连上；都连上之后回到 Seal 刷新即可。If it says "imported, pending", it is usually because Wi-Fi and LocalDevVPN are not both connected. Connect both, then go back to Seal and refresh.

一台手机对应一份配对文件。换手机、还原手机、系统大版本升级后都要重新配对。iOS 27 起 Seal 不再显示配对助手与导入 / 导出入口。One phone, one pairing file. Re-pair after switching phones, restoring a backup, or a major iOS upgrade. On iOS 27 and later Seal no longer shows the pairing assistant or import / export entries.

添加 Apple ID，并让 Seal 自己续签Add your Apple ID and let Seal renew by itself

  1. 打开 Seal 的「Apple ID」页面，点击右上角「+」。Open the Apple ID page in Seal and tap + in the top-right corner.
  2. 输入刚才用于爱思助手签名 Seal 的那个 Apple ID。Enter the same Apple ID you used to sign Seal in i4Tools.
  3. 弹出双重认证时，在手机上点击「允许」，把 6 位验证码填进 Seal。When two-factor authentication appears, tap Allow on the iPhone and enter the 6-digit code in Seal.
  4. 添加完成后，进入「应用」页，点击 Seal。Once added, go to Apps and tap Seal.
  5. Apple 证书显示「需重新签名」时，点击「立即续签」。If the Apple certificate shows Needs re-signing, tap Renew Now.
  6. 等待 Seal 在本机完成签名、获取证书并重新安装。Wait while Seal signs, fetches a certificate and reinstalls, all on the device.
  7. 应用页状态正常会立即更新；若长时间没变，切到「我的」页再回「应用」页刷新一次。The Apps page normally updates right away; if it stalls, switch to Me and back to Apps to refresh.
  8. Apple 证书显示「可用」，说明以后可以直接在手机上签名和续签。When the certificate shows Valid, you can sign and renew on the iPhone from now on.

证书状态有 可用 / 需重新签名 / 待核验 三种。显示「待核验」时先确认 Apple ID 已添加成功、Wi-Fi 与 LocalDevVPN 都已连上，再回来刷新。Certificates have three states: Valid / Needs re-signing / Pending. If it shows Pending, first make sure the Apple ID was added and that Wi-Fi and LocalDevVPN are both connected, then come back and refresh.

导入 IPA 并签名安装Import an IPA, sign and install

  1. 把要装的 IPA 存到手机上（AirDrop、文件 App、网盘都行），点它选「用 Seal 打开」；也可以在 Seal「应用」页直接导入。Get the IPA onto your iPhone (AirDrop, Files, cloud drive — any way works), tap it and choose Open with Seal. You can also import straight from the Apps page.
  2. 在「应用」页点开这个待签名的应用。On the Apps page, open the app you want to sign.
  3. 签名前可以改名称、图标和包名（Bundle ID）；默认沿用 IPA 里的，一般不用改。You can change the name, icon and bundle ID before signing; the defaults come from the IPA and usually need no change.
  4. 确认后点击「签名并安装」。Confirm and tap Sign and Install.
  5. 等待签名和安装完成，回到桌面就能打开。Wait for signing and installation to finish — the app then sits on your Home Screen.

首次签名 Seal 要先把应用注册到 Apple、申请证书并生成描述文件 —— 这一步最慢，全程保持 Wi-Fi + LocalDevVPN、手机解锁、Seal 停在前台。The first signing registers the app with Apple, requests a certificate and builds a provisioning profile — this is the slowest step. Keep Wi-Fi + LocalDevVPN on, keep the phone unlocked, and leave Seal in the foreground.

日常续签Everyday renewal

  • 续签就是给应用换一份新的描述文件：不用重新导入 IPA，应用数据完整保留；只有证书信息对不上时 Seal 才会完整重签并覆盖安装。Renewing just swaps in a fresh provisioning profile: no need to re-import the IPA and your app data stays intact. Only when the certificate does not match does Seal do a full re-sign and overwrite install.
  • 单独续签：在「应用」页点开某个应用，选续签。One app: open it on the Apps page and choose Renew.
  • 批量续签：点「续签全部」，一次处理全部已签名应用，不用逐个点。All at once: tap Renew All to handle every signed app in one go.
  • 建议在证书到期前续签，不要等应用打不开再处理。Renew before the certificate expires — do not wait until the app stops opening.
  • 续签时保持 Wi-Fi + LocalDevVPN 连接、设备状态为已配对；期间别关 Seal、别断网。During renewal keep Wi-Fi + LocalDevVPN connected and the device Paired; do not close Seal or drop the network.
自动续签Auto renew

用快捷指令定时跑Renew on a schedule with Shortcuts

  1. 到下方「资源中心」，把「Seal 自动续签」快捷指令添加到 iPhone。In the Resources section below, add the Seal Auto Renew shortcut to your iPhone.
  2. 打开快捷指令 App，如果看到一张「未知操作」卡片：在搜索栏搜 Seal，会出现「续签全部应用」，替换进去即可。Open the Shortcuts app. If you see an Unknown Action card, search for Seal, pick Renew All Apps, and drop it in to replace it.
  3. 进「自动化」新建一条：每天固定时间运行这个快捷指令，并关掉「运行前询问」。In Automation, create one that runs this shortcut at a fixed time every day and turn off "Ask Before Running".
  4. 到点时手机解锁、Wi-Fi 与 LocalDevVPN 都已连上，续签就会自己跑完。When the time comes, with the phone unlocked and Wi-Fi and LocalDevVPN both connected, renewal runs by itself.

自动化只在手机解锁且联网时触发。跑没跑、成功还是失败，都能在快捷指令 App 的运行记录里看到。Automation only fires when the phone is unlocked and online. Whether it ran and whether it succeeded are both visible in the Shortcuts run history.

Seal 搭配 LiveContainerSeal with LiveContainer

  1. 进入 Seal「我的」→「签名证书」。Go to Seal → Me → Signing Certificate.
  2. 找到签名 LiveContainer 用的那张证书。Find the certificate used to sign LiveContainer.
  3. 点击「导出证书给 LiveContainer」。Tap Export Certificate for LiveContainer.
  4. 页面会自动跳转到 LiveContainer。The page jumps to LiveContainer automatically.
  5. 打开「免 JIT 模式诊断」，允许无线局域网和蜂窝网络权限。Open No-JIT Diagnostics and allow local network and cellular permissions.
  6. 点击右上角刷新，全部显示正常即可使用。Tap refresh in the top-right corner; once everything shows OK you are set.
  7. 在 LiveContainer 设置里可以按需开启多任务模式，实现小窗口或多个应用同时运行。In LiveContainer settings you can optionally enable multitasking to run apps in a small window or several at once.

遇到问题，先检查这三件事Something wrong? Check these three first

  1. Seal 是否已信任：设置 →「通用」→「VPN 与设备管理」→信任。Is Seal trusted: Settings → General → VPN & Device Management → Trust.
  2. Wi-Fi 和 LocalDevVPN 是否都已连接。Are Wi-Fi and LocalDevVPN both connected?
  3. Seal「我的」→「设备」是否显示已配对。Does Seal → Me → Device show Paired?

这三项没就绪时 Seal 会直接告诉你通道不可用，不用反复重试。更多错误码见「帮助中心」。If any of these is not ready, Seal tells you the channel is unavailable — no point retrying. More error codes live in the Help Center.

开始之前Before you begin

三件事记牢，后面少走弯路。Three things worth knowing up front.

必须用同一个 Apple IDAlways the same Apple ID

签名、续签、更新都必须用同一个 Apple ID。换 ID 会被系统识别为新应用，导致数据丢失；如果 Seal 本身不是用当前 ID 签的，用别的账号续签会改变签名身份，装上后打不开。Signing, renewing and updating all require the same Apple ID. Switching IDs makes iOS treat the app as new and you lose data; and if Seal itself was not signed with the current ID, renewing with another account changes its signing identity and it will not open.

关于数据安全About data safety

Seal 只在你自己的手机上运行。Apple 账号密码只存在手机钥匙串里，配对信息与证书也保存在本机，日志写入前会自动脱敏。Seal runs only on your own phone. Your Apple ID password lives in the iPhone keychain, pairing data and certificates stay on the device, and logs are redacted before they are written.

失败先查通道Check the channel first

签名或续签失败，第一步永远是看 Wi-Fi 与 LocalDevVPN 是否都连着、设备是否已配对。When signing or renewal fails, always start by checking that Wi-Fi and LocalDevVPN are both connected and that the device is Paired.