Mobileconfig Viewer & Editor

Open any .mobileconfig configuration profile — signed or unsigned — inspect every payload, fix mistakes, validate the structure and download a clean profile.

Reads signed profiles
Structure validation
Edit payloads in a tree
Never uploaded

Ready to open a file processed locally — nothing is uploaded

AI profile explainer & security check

Paste a profile or pick a file to get a plain-English explanation of every payload and a list of potential security risks — trusted root certificates, VPN and proxy routing, MDM enrollment rights, non-removable profiles and more.

…or choose a .mobileconfig file

Sends the profile to the configured AI provider for analysis. Passwords, keys and certificate data are removed first.

Loading profile review…

What gets validated

Top-level PayloadType is Configuration, with PayloadContent as an array
Every payload has PayloadType, PayloadIdentifier, PayloadUUID and PayloadVersion with the right types
No duplicate PayloadUUID or PayloadIdentifier across the profile
UUID format, PayloadScope values, expiration date in the past

Signed profiles

Profiles exported from Apple Configurator or an MDM are often signed. openplist.com unwraps the signature to show the profile inside and lists the certificate names. Any edit invalidates the signature, so downloaded profiles are unsigned — re-sign them with your own certificate before distributing.

Frequently asked questions

Can I create a new configuration profile?: Yes. Click New profile for a starter profile with a Wi-Fi payload and fresh UUIDs, then edit or add payloads.
Is my profile uploaded anywhere?: Viewing, editing and exporting stay in your browser. Only when you explicitly request AI review is redacted profile content sent to the configured AI provider.
Does it verify the signature?: No — it shows the signer certificate names and the content, but does not check the certificate chain.