Code Signing

Indie default: EAS managed credentials. EAS handles cert + profile rotation. You never touch keychains.

Credential and external action gate

Signing certificates, profiles, and App Store Connect keys are private credentials. Do not run eas credentials, create EAS secrets, download a .p8, generate signing material, or revoke a profile without the owner's explicit confirmation of the Apple account, bundle identifier, affected apps, and intended action. Store credentials outside the repository and never display their values.

Initial setup

eas credentials

Choose iOS → Build credentials. EAS will:

1. Log into your Apple Developer account
2. Create Distribution Certificate
3. Create App ID (matching your bundle ID)
4. Create Provisioning Profile
5. Store everything in EAS-managed credentials