What is the PKPASS file format?
Files with the .pkpass extension contain different types of data packaged with ZIP compression, including everyday tickets, boarding passes, coupons, member cards, student IDs, loyalty cards, and credit or debit cards that work with Apple Pay.
On a mobile device, passes are displayed as barcodes in formats such as Aztec, PDF417, QR, or Code 128 (1D).
Additional information
This format was introduced in 2012 by Apple for the Passbook app - renamed Apple Wallet in iOS 9 (2015). It can be opened by other programs on different platforms as well.
Internally, a .pkpass bundle is a ZIP archive containing several required files:
pass.json- the core pass data: type, display fields, colours, and URLsmanifest.json- JSON dictionary of SHA-1 checksums for every included filesignature- a detached PKCS#7 signature generated with an Apple-issued Pass Type ID certificate- image assets such as
icon.png,logo.png, andstrip.png
.pkpass files can be distributed in different ways - within apps, websites, social platforms, via SMS, MMS, email, and QR codes or barcodes.
Security & safety
RISK: LOWPKPASS files are cryptographically signed with an Apple-issued certificate and contain only data and images - no executable code - so they cannot infect a device. Wallet rejects passes whose signature doesn't validate. The real risk is privacy: a pass's barcode encodes your booking/ticket data, so don't share pass files or screenshots publicly, and be cautious uploading boarding passes to online conversion sites.
Format details
in a nutshellPrograms that open PKPASS files
Technical details
deep spec| Container format | ZIP archive; magic bytes 50 4B 03 04 ("PK" local file header) |
| Required internal files | pass.json, manifest.json, signature, and at least one icon image |
| Pass descriptor | pass.json - defines pass type, display fields, colors, barcode type, and web-service URLs |
| File integrity manifest | manifest.json - JSON dictionary of SHA-1 checksums for every file in the bundle |
| Digital signature | Detached PKCS#7 signature (file named signature), signed with an Apple-issued Pass Type ID certificate |
| Certificate authority | Apple Developer Program; a Pass Type ID certificate is required to generate valid signatures |
| MIME type | application/vnd.apple.pkpass |
| Supported barcode formats | Aztec, PDF417, QR Code, Code 128 (1D) |
| Pass types | boardingPass, coupon, eventTicket, generic, storeCard (defined in pass.json) |
| Image assets | PNG files: icon.png, logo.png, strip.png, thumbnail.png, background.png; Retina variants at @2x and @3x |
| NFC support | Optional NFC payload for contactless tap; requires an Apple entitlement granted to the issuer |
| Distribution channels | Email attachment, website download, in-app delivery, AirDrop, SMS/MMS, QR code scan |
| Multi-pass bundle | Multiple passes can be packaged together as a .pkpasses file (also ZIP-based) |
| Platform support | Native on iOS and macOS (Apple Wallet); Android support via third-party apps such as PassWallet and Pass2U Wallet |
| Released | 2012 (iOS 6, as Passbook; app renamed Wallet in iOS 9, 2015) |
| Open standard | Yes · royalty-free |
| Specification | developer.apple.com |
PKPASS conversions
Community Q&A
asked by usersNo questions yet - be the first to ask about PKPASS files.