As part of ongoing efforts to improve security and privacy on Apple platforms, the App Store’s Signing Intermediate Certificate is being updated to use the SHA-256 cryptographic algorithm. This certificate is used to sign App Store receipts that are proof of purchase for apps and in-app purchases.
This update will be completed in several phases and some existing apps in the App Store may be affected by the next update, depending on how they verify recipients.
Started January 24, 2025If your app does device-based receipt validation and doesn’t support the SHA-256 algorithm, your app won’t validate the receipt. If your app prevents customers from accessing the app or premium content if receipt validation fails, your customers may lose access to their content.
If your app performs on-device receipt validation, update your app to support certificates that use the SHA-256 algorithm; Alternatively, use the AppTransaction and Transaction APIs to verify App Store transactions.
For more details, see TN3138: Handling App Store receipt signing certificate changes.