pymobiledevice3 cryptex

Manage cryptexes via cryptexd (iOS 17+, requires an RSD tunnel).

list

List installed cryptexes (a mounted personalized DDI appears as com.apple.MobileAsset.DDI).

pymobiledevice3 cryptex list [OPTIONS]

Options:

Option	Description
--native	macOS only: reach the iOS 17+ tunnel by piggybacking Apple's own remoted tunnel via the remotepairingd service. NO root, no entitlement, no Xcode, and remoted is left running (so it coexists with Xcode/devicectl). Rides Apple's kernel-routable tunnel, so throughput matches the kernel tunnel. Mutually exclusive with --rsd/--tunnel/--userspace. [env var: PYMOBILEDEVICE3_NATIVE]

Accepts the connection options: --rsd, --tunnel, --userspace.

auto-install

Personalize and install the DeveloperDiskImage cryptex, using only cryptexd.

pymobiledevice3 cryptex auto-install [OPTIONS]

Options:

Option	Description
--native	macOS only: reach the iOS 17+ tunnel by piggybacking Apple's own remoted tunnel via the remotepairingd service. NO root, no entitlement, no Xcode, and remoted is left running (so it coexists with Xcode/devicectl). Rides Apple's kernel-routable tunnel, so throughput matches the kernel tunnel. Mutually exclusive with --rsd/--tunnel/--userspace. [env var: PYMOBILEDEVICE3_NATIVE]
--restore-dir <directory>	Unpacked DDI Restore directory holding the Cryptex1 assets, e.g. Xcode's own (/Library/Developer/DeveloperDiskImages/iOS_DDI/Restore). Defaults to downloading and caching the DDI.

Accepts the connection options: --rsd, --tunnel, --userspace.

personalization-identifiers

Read the AppleImage4 chip instance used to personalize a cryptex.

pymobiledevice3 cryptex personalization-identifiers [OPTIONS]

Options:

Option	Description
--native	macOS only: reach the iOS 17+ tunnel by piggybacking Apple's own remoted tunnel via the remotepairingd service. NO root, no entitlement, no Xcode, and remoted is left running (so it coexists with Xcode/devicectl). Rides Apple's kernel-routable tunnel, so throughput matches the kernel tunnel. Mutually exclusive with --rsd/--tunnel/--userspace. [env var: PYMOBILEDEVICE3_NATIVE]

Accepts the connection options: --rsd, --tunnel, --userspace.

nonce

Read the nonce for a nonce domain.

pymobiledevice3 cryptex nonce [OPTIONS]

Options:

Option	Description
--native	macOS only: reach the iOS 17+ tunnel by piggybacking Apple's own remoted tunnel via the remotepairingd service. NO root, no entitlement, no Xcode, and remoted is left running (so it coexists with Xcode/devicectl). Rides Apple's kernel-routable tunnel, so throughput matches the kernel tunnel. Mutually exclusive with --rsd/--tunnel/--userspace. [env var: PYMOBILEDEVICE3_NATIVE]
--nonce-domain <int>	Nonce domain index (defaults to the cryptex domain).
--nonce-domain-handle <int>	Nonce domain handle, as an alternative to --nonce-domain.

Accepts the connection options: --rsd, --tunnel, --userspace.

roll-nonce

Roll a nonce domain's nonce (invalidates a personalized DDI; it must be re-mounted).

pymobiledevice3 cryptex roll-nonce [OPTIONS]

Options:

Option	Description
--native	macOS only: reach the iOS 17+ tunnel by piggybacking Apple's own remoted tunnel via the remotepairingd service. NO root, no entitlement, no Xcode, and remoted is left running (so it coexists with Xcode/devicectl). Rides Apple's kernel-routable tunnel, so throughput matches the kernel tunnel. Mutually exclusive with --rsd/--tunnel/--userspace. [env var: PYMOBILEDEVICE3_NATIVE]
--nonce-domain <int>	Nonce domain index (defaults to the cryptex domain).
--nonce-domain-handle <int>	Nonce domain handle, as an alternative to --nonce-domain.

Accepts the connection options: --rsd, --tunnel, --userspace.

uninstall

Uninstall an installed cryptex by its identifier.

pymobiledevice3 cryptex uninstall [OPTIONS] {identifier}

Arguments:

Argument	Description
identifier	[required]

Options:

Option	Description
--native	macOS only: reach the iOS 17+ tunnel by piggybacking Apple's own remoted tunnel via the remotepairingd service. NO root, no entitlement, no Xcode, and remoted is left running (so it coexists with Xcode/devicectl). Rides Apple's kernel-routable tunnel, so throughput matches the kernel tunnel. Mutually exclusive with --rsd/--tunnel/--userspace. [env var: PYMOBILEDEVICE3_NATIVE]
--version <str>

Accepts the connection options: --rsd, --tunnel, --userspace.