 <p>Just to extend @ohmi's answer:</p> <ol> <li>You cannot prevent passes from being installed on more than one device - e.g. if user enables iCloud for Passbook, the passes will get synced automatically across devices.</li> <li>Considering your links to pkpasses are public, you may want to consider introducing one-time download links, but while it can fill your needs just fine, users can be really disappointed if it's impossible to re-add passes that they manually deleted. So I wouldn't recommend such solution. </li> <li>You can make you pkpass links kind of private, so only GET request originating from your application and carrying a specific value for specific header field (e.g. auth_token), will receive a pkpass file, however this way you almost disable pass distribution via email or via sharing URLs to passes and make pass updating probably impossible.</li> </ol>