[Guide] How to Downgrade Apps on AppStore with iTunes 12.6.5 & Charles Proxy (no Jailbreak).

If you think this guide is useful, considering support me via Paypal !

Table of Content

• I. Notes
• II. Requirements
• III. Getting Started
  • Step 1. Preparing
  • Step 2. Install Charles Root Certificate
  • Step 3. Create the Breakpoint
  • Step 4. Get the old version of the appplication (IPA)
  • Step 5. Install the IPA
• IV. FAQ

I. Notes

• iTunes 12.6.5 only works on Windows. Apple killed iTunes 12.6.5 on macOS. Even if you manage to get iTunes 12.6.5 on your Mac, the download feature will not work.
• The Guide seems complicated, but it's very easy to follow. Plus, you only need to do Step 1, 2, and 3 once (There are 5 steps in total).
• Jailbreak is NOT needed. Since the iPA comes directly from iTunes, it's encrypted and can be installed without Sideload. The IPA is 100% legit!
• You can get any version of any apps, as long as that version is still available on AppStore.

---

II. Requirements

• iTunes 12.6.5 - the latest version of iTunes that supports download apps. Download: Apple iTunes 12.6.5.3 - 32bit | 64bit / (backup).
• A Windows machine: Windows XP/7/10/11 are supported.
• Charles Proxy: I use version 4.2.7 but I don't think it matters (No need to crack Charles Proxy). Download here/ back up
• An Apple ID for iTunes: Use a spare ID if you like. Keep in mind that if you switch to another ID, you'll need to re-do the process from Step 3.

---

III. Getting Started

Step 1. Preparing

• Nothing special about Charles Proxy so I'll focus on iTunes.
• After you install iTunes successfully, go to Edit > Preferences > Avanced > Untick Check for new software updates automatically to prevent iTunes from asking for update.
• If you get an error about Library.itl when opening iTunes: Go to C:\Users\Username\My Music\iTunes\ and delete the existed Library.itl
• Login to iTunes with your prepared Apple ID: Account > Sign-in.
• The Build version number (or Build Number) of the version you want to downgrade:
  • Method 1: You can get the Build version number of most apps on AppStore from Tool Lantency.
  • Method 2: Ask a jailbroken user who has AppStore++ installed get the Build version number for you.
  • Method 3: Look at the buyProduct content and search for softwareVersionExternalIdentifier, the last line is the latest version, keep trying until you succeed.
  • Method 4: Almost the same as method 3. See here.

---

Step 2. Install Charles Root Certificate

Congrats! You just installed Charles Proxy Certificate! See the FAQ section for how to remove the Charles Proxy Certificate if you don't need it anymore

---

Step 3. Create the Breakpoint

(This is where the fun begins!)

Step 3.1. Open iTunes & Charles Proxy

Step 3.2.

• Search for the app you want to downgrade. I will get the IPA of Facebook v161.0 as an example.
• If the app is removed from AppStore, but still available in your Purchased tab: it can be found in Account > Purchased.

Step 3.3.

• Select Get or Download to download Facebook. This is not the version we want so we'll delete it.

Step 3.4.

• Now, go to Charles Proxy, we'll see a list of domains. Find a domain that has a form of p**-buy.itunes.apple.com, ** is two-random numbers. As you can see in the picture below, mine is p31-buy.itunes.apple.com. Right-click on it and select Enable SSL Proxying

Step 3.5. Enable the Breakpoint

• Go back to iTunes and download Facebook again. This is still not a version we want, so we'll delete it.
• In Charles Proxy, you'll see a new p31-buy.itunes.apple.com address with the blue icon at the top of the line. Expand this address to buyProduct, and then follow the pictures:

---

Step 4. Get the old version of the appplication (IPA)

Note: You only need to do all the previous steps once. Next time you downgrade an app, you'll start from this step (Step 4).

• Go back to iTunes and download Facebook, again! Charles Proxy will automatically show the Breakpoint popup.
• Edit Request > XML Text > Replace the current Build Number Version of Facebook with the Build Number of Facebook v161.0 (826067593) > Execute > Execute. Now iTunes will download Facebook v161.0 instead of the latest version.
• In some cases, the Breakpoint popup can appear twice, simply edit the current Build Number Version like above one more time and you're good to go.

But how do I know the Build Number of Facebook v161.0 is 826067593? - Read Preparing Section carefully!

---

Step 5. Install the IPA

• The IPA will be saved at C:\Users\<User>\Music\iTunes\iTunes Media\Mobile Applications. Tips: Open the IPA in Explorer by going to iTunes > Library > Right-click on the app > Open in Explorer

5.1. Windows

It is a pain in the neck to install the IPA via iTunes. That's why we will not iTunes. AppManager & iMazing are good alternatives. 3uTools is not recommended

• AppManager (recommended): Plug your device into your PC, click on Install new and select the IPA.

• iMazing: Manage Apps > Device Tab > Drag & Drop the IPA into the window. (Note: iMazing does work on Windows, but I'm too lazy to setup iMazing on Windows just for 2 screenshots).

• 3uTools (may not safe, not recommended): Drag & drop the IPA into the Apps tab.

macOS

Simply Airdrop the IPA from your Mac to your device. You can use Apple configurator 2 to install the IPA as well.

IV. FAQ

1. I can't see the Build number of the version I need on Tool Lantency?

• The easiest way to get the Build version number is to ask a jailbroken user who has AppStore++ installed. Just tell them the app & the version you need to get.
• If you have nobody to ask, you could try this way. It will take a while depending on your luck. qnblackcat#8 (comment)
• Still can't find the Build version number? Well, open a new issue, I will help you.

2. Can I share the IPA with my friends?

• Absolutely yes! However, you have to give them the IPA with the Apple ID you used to get the IPA. Why? Because the first time they open your app, they will be asked to enter the purchased ID. That's how iOS works.
• Don't want to share your main account? Use a clone Apple ID then.

3. Can Apple revoke my IPA?

• No, they can't! If you use iOS long enough, I'm sure you remember that time when we can download IPA directly from iTunes. Our IPAs came from iTunes just like an app from AppStore. Apple can do nothing about it.

4. Can the app be able to receive push notifications?

• Again, the IPA comes from iTunes, which is the same as AppStore... So YES, it works like an app from AppStore.

5. I got errors installing the IPA via AltStore/Sideloadly/...

• The IPA is encrypted with your purchase ID. You CAN NOT sideload it. I mentioned how to install the ipa in Step 4. (FYI: you only sideload decrypted IPA. You DO NOT sideload encrypted IPA!).

6. Can I install the IPA from iTunes via Filza?

• Yeah, you can install the IPA using Filza.

7. What happens if I use another Apple ID?

• You have to re-start the process from Step 3.

8. Apps crash on openning?

• Most likely the version is too old and not compatible with your current iOS/iPadOS anymore.

9. How do I remove Charles Proxy Certificates?

• Open Run window (Windows + R) and type in certmgr.msc
• In the certmgr window, go to Trusted Root Certification Authorities - Certificates - Right click on Charles Proxy CA certificate and delete it.

10. Is it possible to install the IPA without a computer?

• Yes, it is 100% possible!. However, it requires more additional Steps. I may add it in the future.