Free tool

pkpass validator

Check an Apple Wallet .pkpass file in your browser: pass.json keys, manifest SHA-1 hashes, required icons and barcodes. Nothing is uploaded.

The file is read in your browser and never uploaded.

What it checks

  • The file is a zip and contains pass.json, manifest.json and signature.
  • pass.json is valid JSON with the required keys, exactly one pass style, valid barcode formats and an authenticationToken when webServiceURL is set.
  • Every file's SHA-1 hash matches manifest.json, and no file is missing from it.
  • icon.png exists, and every PNG has a valid PNG header.

What it cannot check

  • The signature. It confirms the file exists but cannot verify the certificate chain, so always test on a device.
  • Image dimensions and design quality.

Issuing passes from code? See the API quickstart.

Wallet passes

Skip the file wrangling.

Shakewell signs and delivers Apple Wallet and Google Wallet passes for you.