Home / Apps / iOS, watchOS
PureGym Apple Wallet screenshot

PureGym Apple Wallet

PassKit Vapor Reverse Engineering

Personal project to reduce gym entry time from 47 seconds to 3 seconds. Not open-sourced due to potential TOS implications.

  • Reverse engineered PureGym's authentication and QR code APIs via mitmproxy
  • Built Vapor backend for PassKit certificate signing and push updates
  • Auto-refreshing QR codes via silent push notifications
  • Location-aware passes using scraped coordinates of all UK gyms
  • Apple Watch support for wrist-scan entry
Platform iOS, watchOS Year 2025
📝 Related Article 💬 176 comments

How I accidentally became PureGym's unofficial Apple Wallet developer

Tired of fumbling with the PureGym app for 47 seconds every morning, I reverse-engineered their API to build an Apple Wallet pass that gets me in with a quick wrist scan. Along the way, I discovered their bizarre security theatre: QR codes that expire every minute while my ancient 8-digit PIN lives forever.

Read article →