OtaKitHow to bypass App Store review for Capacitor app updates
You can update a Capacitor app without waiting for another App Store or Play review — legitimately. How over-the-air updates let you bypass the store review queue for web-layer changes, and where the line is.
“How do I bypass App Store review?” is one of the most-searched questions in mobile development, and it has a legitimate answer that isn't a hack: over-the-air updates let you push web-layer changes to a Capacitor app without waiting for another review. Not by sneaking around Apple and Google — by using a mechanism they explicitly allow. Here's exactly how it works and where the line is.
To be precise about the word: you're not bypassing the first review — your app still gets submitted and approved once. You're bypassing the review queue for every subsequent web-layer update. That's the part that's allowed.
Why this is allowed, not a loophole
Both stores permit updating interpreted web code after approval. Apple's guideline 2.5.2 carves out an explicit exception for code run by WebKit/JavaScriptCore; Google Play's policy restricts native executable code, not web assets. Your Capacitor JS/HTML/CSS falls on the allowed side of both. See does Apple allow live updates and does Google allow live updates.
What you can ship without review
- Bug fixes and hotfixes — see deploy a hotfix in minutes.
- UI changes, copy, layout, styling.
- New screens and features built from your existing web stack.
- Feature-flag flips, A/B tests, config changes.
What still needs a review
- New native plugins, permissions, or SDKs.
- Changes to the app's core purpose (the one thing the rules genuinely forbid).
- Anything you couldn't have submitted through the store originally.
How to actually do it
Add the plugin, ship one store binary, and from then on push web-layer changes over the air:
otakit upload --release production
The change reaches devices on their next check — minutes, not the days a review can take. See how OTA works for the delivery model.
The one thing not to do: use OTA to push something review would have rejected. That's the behavior the rules exist to stop, and it's how apps get pulled. Ship the honest version of your app — just without the two-week tax on every fix.
Where to go next
See app-store-compliant OTA updates for the full compliance picture and Setup to get started.