iOS Mobileconfig Generator

Create iOS configuration profiles (.mobileconfig) for WiFi, WebClip, DNS, and VPN settings. Compatible with iPhone, iPad, and Mac.

🔒 100% Client-Side · No uploads · Processed in your browser

Supported Features

WebClip
Create website shortcuts (WebClip) that can be added to Home Screen with custom icons.
WiFi Profile
Auto-connect to networks with saved SSID and password credentials.
DNS Settings
Configure encrypted DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT).
VPN Config
Set up L2TP/IPSec or IKEv2 VPN connections for devices.

WebClip Configuration

Add a website shortcut to the iOS Home Screen with a custom icon

(Home Screen name)
(e.g. com.example.app)
Full Screen Mode
Precomposed Icon (No iOS effects)
Removable (Allow deletion)
Ignore Manifest Scope
Current bundle:WebClip

📄 Generated Profile

<?xml version="1.0" encoding="UTF-8"?>
<!-- Profile .mobileconfig will appear here -->

Understanding Mobileconfig Profiles

A .mobileconfig file (Configuration Profile) is an XML file used by Apple devices to distribute configuration information. Instead of manually entering Wi‑Fi passwords, configuring VPN servers, or typing out DNS addresses on every device, you can simply install a profile that does it all instantly.

🔒

Security & Signing

The profiles generated by this tool are Unsigned. When you install them, your iOS device will show a warning saying "Unsigned Profile". This is normal for self-created profiles. Since you are generating the data yourself right here in your browser, and the code is open for inspection, it is safe to install.

How to Install

1

Configure

Enter your website address, title, and upload a shortcut icon. Also, fill in the features you need to configure.

2

Generate

Click “Generate Configuration File”. Your configuration will be created immediately, entirely locally, and you can view the source code instantly on this page.

3

Install

"Download". On your iPhone, go to Settings → Profile Downloaded and tap Install to add the icon to your Home Screen.

Frequently Asked Questions

Does this work on iOS 17 and later?

Yes. SafeClip generates configuration files using a standard Apple plist protocol, making it perfectly compatible with iOS 17, iOS 18, iPadOS, and the latest version of macOS.

Can I remove the installed profile later?

Yes. Go to Settings → General → VPN & Device Management, select the profile, and tap "Remove Profile".

What should I do if I get an "unverified" message during installation?

This is a standard Apple notification for unsigned configuration files. Since you generated the profile yourself in your browser, it is safe. Simply tap "Install" in the upper right corner and enter your lock screen passcode to confirm.

Will SafeClip collect my personal information?

Absolutely not. We do not store any URLs, passwords, or icon data you enter. All configuration file generation logic runs entirely in your browser — your data never leaves your device.

Why does iOS show a warning on install?

Apple shows a warning for all unsigned profiles created outside of a paid Apple Developer account. This is expected behavior. The warning does not mean the profile is harmful.

Does the WiFi profile work with WPA3 networks?

Yes. SafeClip maps "WPA2/WPA3 Personal" to the WPA2 EncryptionType value, which iOS accepts for both WPA2 and WPA3 networks via automatic protocol negotiation.

What is the difference between L2TP and IKEv2 VPN?

L2TP/IPSec is an older but widely supported protocol that uses a Shared Secret (PSK) for IPSec plus a username/password for authentication. IKEv2 is a modern protocol that is faster, more stable on mobile networks, and supports MOBIKE for seamless network handoffs.

Why does my IKEv2 VPN fail to connect?

Verify that "Remote Address" and "Remote ID" match exactly (usually the server hostname). Also confirm your Shared Secret and user credentials match what your VPN server expects.

What is Encrypted DNS (DoH/DoT)?

Traditional DNS queries are sent in plain text, allowing ISPs and networks to monitor your browsing. DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT) encrypt DNS traffic so third parties cannot intercept your queries.

Can I install multiple profiles on one device?

Yes. iOS supports multiple installed profiles. However, only one VPN connection can be active at a time. You can manage all profiles in Settings → General → VPN & Device Management.

Nothing happens when I click the download button. Why?

You must open SafeClip in Safari. In-app browsers (WhatsApp, Instagram, Chrome) block system-level file installation. Tap "Open in Safari" if prompted, or copy the URL into Safari manually.

How do I update an existing profile?

iOS does not support in-place profile updates. Remove the old profile in Settings → General → VPN & Device Management, generate a new one with the updated settings, then reinstall.

View all FAQ →