TestFlight Update: Streamlined App Distribution and Identity Handling with iOS 18 and macOS 15

WHAT APPLE JUST SHIPPED

On June 23, 2026, Apple released an update to TestFlight, supporting apps built for iOS 18.x and macOS 15.x. This update enables testers and developers to view granular release notes directly within the TestFlight app and web interface. It applies to both internal and external testers, including those using Managed Apple IDs in federated enterprise environments.

Specifically, TestFlight now surfaces the “What’s New” field for each build, supports rich formatting, and enforces consistency in release note display across platforms. Admins can more easily audit app update flows and testers receive clearer context before updating.

Version Requirements

• TestFlight app v4.6 or later
• iOS 18.x (developer beta 2 and later)
• macOS 15.x (developer beta 2 and later)

Security and Identity Adjacent Changes

• Support for Passkey-protected TestFlight sign-ins using Apple ID and Managed Apple ID.
• Enhanced privacy controls: Testers can now opt-in to “Hide My Email” during TestFlight registration, shielding their address from developer access.
• Improved MDM visibility: Device enrolment attributes now include TestFlight participation status, allowing admins to audit pre-production app exposure.

WHAT’S COMING

At WWDC 2026, Apple announced several upcoming TestFlight and identity platform features:

• App Distribution via Managed Apple ID: TestFlight will soon support direct assignment and revocation of pre-release apps to users/groups in Apple Business Manager and federated directories (Entra ID, Okta, Google Workspace).
• Passkey-based authentication for developers: App Store Connect and TestFlight will require passkey-based SSO for all developer and tester logins by end of 2026.
• MDM-automated TestFlight enrolment: Declarative Device Management profiles will allow admins to pre-enrol devices in TestFlight builds for managed testing fleets.
• Granular SCIM provisioning: Managed Apple ID creation will soon support TestFlight group assignment during SCIM sync, improving onboarding flows for enterprise testers.

WHY THIS IS BETTER

Previously, release notes in TestFlight were inconsistent, lacked rich formatting, and were often missed by testers. The new system ensures release notes are visible and actionable at the point of update, reducing confusion and improving compliance (especially for regulated environments tracking QA and change management).

Identity improvements (Passkey sign-in, Hide My Email) address longstanding privacy and phishing risks. Compared to Android’s Play Beta, Apple’s approach now offers stronger identity privacy controls and seamless federated management for enterprise testers. The ability for MDM to audit TestFlight participation closes a visibility gap for security teams monitoring pre-release app exposure.

HOW TO IMPLEMENT OR RESPOND

Developers: Enhance Release Notes

Update your release notes in App Store Connect using Markdown for rich formatting. Example:

// Example: App Store Connect release notes
## New Features
- Added passkey authentication for login
- Improved privacy with Hide My Email support

## Bug Fixes
- Fixed crash on iOS 18 beta 2
- Resolved MDM enrolment issues

Developers: Passkey Sign-In Integration

Implement passkey authentication in your app using AuthenticationServices:

import AuthenticationServices

func signInWithPasskey() {
    let request = ASAuthorizationPlatformPublicKeyCredentialRegistrationRequest()
    request.challenge = ... // Server-provided challenge
    let controller = ASAuthorizationController(authorizationRequests: [request])
    controller.delegate = self
    controller.performRequests()
}

Admins: Audit TestFlight Participation

Use MDM queries to check which managed devices have TestFlight installed and are enrolled in specific builds:

    Identifier
    com.example.testflight.audit
    PayloadType
    com.apple.application-access
    ApplicationIdentifiers
    
        com.apple.TestFlight
    
    TestFlightParticipation
    

Admins: Enable Hide My Email for Managed Apple IDs

Set managed Apple ID privacy restrictions in Apple Business Manager:

1. Log in to Apple Business Manager.
2. Navigate to Accounts > Managed Apple IDs.
3. Edit privacy settings to allow tester opt-in for Hide My Email during TestFlight registration.

WHAT TO CHECK

• On a device running iOS 18.x or macOS 15.x, open TestFlight and verify the “What’s New” notes display for each build.
• Confirm testers can choose to “Hide My Email” during registration.
• Run MDM queries to verify TestFlight participation status.
• Check App Store Connect for release notes formatting preview.

BOTTOM LINE

Update TestFlight release notes for clarity and rich formatting, implement passkey sign-in where possible, and configure MDM for visibility into test builds. Prepare for upcoming managed distribution and passkey requirements by auditing your Apple Business Manager and App Store Connect workflows now. Prioritise privacy settings for Managed Apple IDs in enterprise fleets.