Shortcut Signing
Apple Shortcuts only imports .shortcut files that are signed. Shortcuts Toolbox signs the files it
exports using Apple’s own shortcuts sign tool, so the shortcuts you download and share can
actually be installed — by you on another device, or by anyone you send them to, without security warnings.
Where Signing Applies
- Shortcut downloads — every shortcut’s download dropdown offers both a signed copy (ready to install anywhere) and an unsigned copy (useful as a raw backup)
- Self-contained downloads — composed shortcuts are signed automatically before download
- Backups — backed-up
.shortcutfiles are signed when signing is enabled (see Backups & Restore)
Signature Identities
Anyone
The shortcut can be imported by anyone — the right choice for sharing publicly
People who know me
The shortcut can only be imported by people in your contacts
Signing is enabled by default and can be toggled with the SIGN_SHORTCUTS setting. With signing
disabled, downloads and backups produce unsigned files. Run shortcuts sign --help in Terminal for
details on Apple’s underlying signing tool.