If you think this guide is useful, considering support me via Paypal !

• I. Notes
• II. Requirements
• III. Getting Started
  • Step 1. Preparing
  • Step 2. Install Charles Root Certificate
  • Step 3. Create the Breakpoint
  • Step 4. Get the old version of the appplication (IPA)
  • Step 5. Install the IPA
• IV. FAQ

• iTunes 12.6.5 only works on Windows. Apple killed iTunes 12.6.5 on macOS. Even if you manage to get iTunes 12.6.5 on your Mac, the download feature will not work.
• The Guide seems complicated, but it's very easy to follow. Plus, you only need to do Step 1, 2, and 3 for the first time (There are 5 steps in total).
• Jailbreak is NOT needed. Since the iPA comes directly from iTunes, it's encrypted and can be installed without Sideload. The IPA is 100% legit!
• You can get the old version of any apps as long as that version is still available on AppStore.

• iTunes 12.6.5 - the latest version of iTunes that supports download apps. Download: Apple (archive)/ backup.
• A Windows machine: Windows XP/7/10/11 are supported.
• Charles Proxy: I use version 4.2.7 but I don't think it matters (No need to crack Charles Proxy). Download here/ back up
• An Apple ID for iTunes: Use a spare ID if you like. Keep in mind that if you switch to another ID, you'll need to re-do the process from Step 3.

• Nothing special about Charles Proxy so I'll focus on iTunes.
• After you install iTunes succesfully, go to Edit > Preferences > Avanced > Untick Check for new software updates automatically to prevent iTunes from asking for update.
• If you get an error about Library.itl when opening iTunes: Go to C:\Users\Username\My Music\iTunes\ and delete the existed Library.itl
• Login to iTunes with your prepared Apple ID: Account > Sign-in.
• The Build version number (or Build Number) of the version you want to downgrade. You can get the Build version number of most apps on AppStore from Tool Lantency.

Congrats! You just installed Charles Proxy Certificate! See the FAQ section for how to remove the Charles Proxy Certificate if you don't need it anymore

(This is where the fun begins!)

• Search for the app you want to downgrade. I will get the IPA of Facebook v161.0 as an example.
• If the app is removed from AppStore, but still available in your Purchased tab: it can be found in Account > Purchased.

• Select Get or Download to download Facebook. This is not the version we want so we'll delete it.

• Now, go to Charles Proxy, we'll see a list of domains. Find a domain that has a form of p**-buy.itunes.apple.com, ** is two-random numbers. As you can see in the picture below, mine is p31-buy.itunes.apple.com. Right-click on it and select Enable SSL Proxying

• Go back to iTunes and download Facebook again. This is still not a version we want, so we'll delete it.
• In Charles Proxy, you'll see a new p31-buy.itunes.apple.com address with the blue icon at the top of the line. Expand this address to buyProduct, and then follow the pictures:

• Go back to iTunes and download Facebook, again! Charles Proxy will automatically show the Breakpoint popup.
• Edit Request > XML Text > Replace the current Build Number Version of Facebook with the Build Number of Facebook v161.0 (826067593) > Execute > Execute. Now iTunes will download Facebook v161.0 instead of the latest version.
• In some cases, the Breakpoint popup can appear twice, simply edit the current Build Number Version like above one more time and you're good to go.

But how do I know the Build Number of Facebook v161.0 is 826067593? - Read Preparing Section carefully!

• The IPA will be saved at C:\Users\<User>\Music\iTunes\iTunes Media\Mobile Applications. Tips: Open the IPA in Explorer by going to iTunes > Library > Right-click on the app > Open in Explorer

It is a pain in the neck to install the IPA via iTunes. That's why we will not iTunes. AppManager & 3uTools & iMazing are good alternatives.

• AppManager (recommended): Plug your device into your PC, click on Install new and select the IPA.

• 3uTools (may not safe, not recommended): Drag & drop the IPA into the Apps tab.

• iMazing: Manage Apps > Device Tab > Drag & Drop the IPA into the window. (Note: iMazing does work on Windows, but I'm too lazy to setup iMazing on Windows just for 2 screenshots).

Simply Airdrop the IPA from your Mac to your device. You can use Apple configurator 2 to install the IPA as well.

• The easiest way to get the Build version number is to ask a jailbroken user who has AppStore++ installed. Just tell them the app & the version you need to get.
• If you have nobody to ask, you could try this way. It will take a while depending on your luck. qnblackcat#8 (comment)
• Still can't find the Build version number? Well, open a new issue, I will help you.

• Absolutely yes! However, you have to give them the IPA with the Apple ID you used to get the IPA. Why? Because the first time they open your app, they will be asked to enter the purchased ID. That's how iOS works.
• Don't want to share your main account? Use a clone Apple ID then.

• No, they can't! If you use iOS long enough, I'm sure you remember that time when we can download IPA directly from iTunes. Our IPAs came from iTunes just like an app from AppStore. Apple can do nothing about it.

• Again, the IPA comes from iTunes, which is the same as AppStore... So YES, it works like an app from AppStore.

• The IPA is encrypted with your purchase ID. You CAN NOT sideload it. I mentioned how to install the ipa in Step 4. (FYI: you only sideload decrypted IPA. You DO NOT sideload encrypted IPA!).

• Yeah, you can install the IPA using Filza.

• You have to re-start the process from Step 3.

• Most likely the version is too old and not compatible with your current iOS/iPadOS anymore.

• Open Run window (Windows + R) and type in certmgr.msc
• In the certmgr window, go to Trusted Root Certification Authorities - Certificates - Right click on Charles Proxy CA certificate and delete it.

• Yes, it is 100% possible!. However, it requires more additional Steps. I may add it in the future.