All posts
GuideJul 8, 2026 · 10 min

App Store Review Notes and Demo Accounts: The Setup That Avoids Rejection

A working demo account plus clear review notes are how login-gated apps pass App Review. Here's the exact setup that avoids a Guideline 2.1 rejection.

RA

The Argus Team

Reply Argus

If your app makes users sign in, App Review needs a demo account that works and notes that tell them how to reach every screen behind that login. Put both in App Store Connect under App Review Information: flip on "Sign-In required," enter a username and password for an account that stays active, and use the Notes field to walk the reviewer to each gated feature step by step. Skip either and you get the single most common rejection login-gated apps hit: the reviewer couldn't test the app, so Apple couldn't approve it.

This isn't the reviewer being difficult. Apple's Guideline 2.1 requires that a submitted app be complete and fully testable, and a wall the reviewer can't get past reads as an incomplete app. The good news: this rejection is almost entirely preventable, and the fix takes about fifteen minutes. Below is the exact setup — where the fields live, what a working demo account actually requires, and a review-notes template you can paste and adapt.

Why does App Review reject login-gated apps?

Because a human reviewer has to open your app and exercise its features, and if the first screen is a login they don't have credentials for, they're stuck at the door. Apple's own Common App Rejections guidance puts performance and completeness issues (Guideline 2.1) near the top of the list, and "we couldn't sign in to review your app" is one of the most routine flavors of it. The reviewer won't sign up for your service, invent test data, or guess a password. If they can't get in, they reject and move on. It's worth knowing the other frequent triggers too, since a resubmission that fixes the login only to trip a different guideline still costs you a full review cycle — [the common App Store guideline rejections guide](/blog/app-store-guideline-rejections-guide) breaks them down.

The trap is that everything works on your device because you're already logged in, your account has data, and your paid features are unlocked. The reviewer starts from a clean install with nothing. Every gate you've forgotten about — a paywall, an invite-only flow, a feature that only appears once you have three saved items — is one they'll hit cold. Hand them a key to each one before they ask.

Where do the demo account and notes actually go?

In App Store Connect, open your app version and scroll to the App Review Information section. It's easy to blow past because it sits below the screenshots and description, but it's the part App Review reads first. Four fields matter here:

  • Sign-In required (toggle) — turn this on if any part of the app needs an account. Turning it on reveals the username and password fields. Leave it off only if the app is fully usable with zero login.
  • Demo account username + password — the credentials the reviewer will use. This is a real, working account on your production backend, not a placeholder. Type it somewhere you can copy it exactly; a single wrong character is a rejection.
  • Notes — free-text instructions to the reviewer. This is where you explain how to reach anything that isn't obvious from the launch screen: how to unlock Pro features, trigger a specific flow, or work around anything region- or hardware-dependent.
  • Attachment — an optional file. A 30-second screen recording that shows the login and the main flows is the single most effective thing you can add when a feature is genuinely hard to reach or needs external hardware.

There's also a Contact Information block (name, phone, email) on the same screen. Fill it with a real person who answers during the review window, because a blocked reviewer messages that contact before rejecting. Google Play has its own version, covered further down. For the wider picture of what happens after you hit Submit, [the App Store review process explained](/blog/the-app-store-review-process-explained) walks the pipeline, and [how long App Store review takes](/blog/how-long-does-app-store-review-take) covers the timing — every rejection sends you back to the end of the queue.

What makes a demo account actually work?

A demo account that exists isn't the same as a demo account that works for a reviewer. Most 2.1 rejections on this front come from an account that technically logs in but hits a wall two screens later. Run through this before you submit:

  • It stays active through review. Don't use a trial account that expires in 7 days, or one you might delete during testing. Reviews can take a few days and can come in waves; the account has to be live the whole time.
  • It has full access. Unlock every paid tier and premium feature on this account. The reviewer needs to test what a paying user sees, and they won't buy an in-app purchase to find out. If your app is subscription-gated, the demo account should behave like an active subscriber.
  • It's pre-loaded with sample data. An empty account shows empty screens, and empty screens look like broken or incomplete features. Seed it so the dashboard, feeds, and lists all have realistic content to look at.
  • No 2FA the reviewer can't pass. If sign-in sends a one-time code to a phone or email the reviewer doesn't control, they're locked out. Give the demo account a bypass, a static code you document in the Notes, or an OTP that routes somewhere you can relay from.
  • No region or hardware lock they can't clear. If a feature needs a specific country, a physical device, a Bluetooth accessory, or a live backend in a certain region, say so in the Notes and attach a video showing it working.

The 2FA trap catches almost everyone

The most common silent rejection cause is a login that texts a verification code to a phone number. The reviewer has your password but not your phone, so they can never complete sign-in — and from their side it looks like the login is broken. Before you submit, either disable 2FA on the demo account, hardcode a known test code, or provide a way for the reviewer to obtain the code, and spell it out in the Notes.

How to write review notes that prevent rejection

Good review notes assume the reviewer has never seen your app and has about ten minutes. Don't describe your value proposition — they don't care, and they'll skim past it. Tell them exactly where to tap to reach each thing they need to test. Structure it like a checklist a stranger could follow.

  1. 1

    Step 1 — Lead with the credentials

    Put the username and password at the very top of the Notes too, not just in the fields. Reviewers copy from here. State plainly that the account is pre-configured and needs no setup.

  2. 2

    Step 2 — Map every gated feature to a tap path

    One line per feature: "Pro export — tap Settings > Export; this account has Pro unlocked, no purchase needed." Cover anything that isn't visible on the first screen after login.

  3. 3

    Step 3 — Call out anything unusual up front

    Region requirements, required hardware, a demo mode toggle, a specific test card for payments, or the 2FA workaround. If it could block the reviewer, it goes here before they hit it.

  4. 4

    Step 4 — Point to the attachment when a flow is hard

    If a feature genuinely can't be reached without special conditions, say "See attached video for the full X flow" and attach a short screen recording. A video preempts the back-and-forth.

  5. 5

    Step 5 — Give them a live human

    End with a name and a contact that answers fast during review hours. A reviewer who can ping you is far more likely to message than to reject.

Here's a template you can paste into the Notes field and adapt. Keep it terse — the reviewer wants a map, not an essay:

text
Demo account (already created, stays active through review):
  Username: reviewer@demo.myapp.com
  Password: AppReview2026!

This account is pre-loaded with sample data, so every screen has content,
and has Pro fully unlocked (no in-app purchase needed to test paid features).

How to reach each gated feature:
  - Dashboard      - opens on launch right after sign-in
  - Pro export     - Settings > Export  (Pro is unlocked on this account)
  - Team invite    - Settings > Team > Invite  (a second demo seat is ready)
  - Push test      - Settings > Send test notification

Important:
  - No 2FA on this account. The password above logs you straight in.
  - Backend is live in all regions; no VPN or specific country needed.
  - Payments use Apple's sandbox; no real charge occurs.

Contact during review: Jane Doe, +1 555 0100, dev@myapp.com (replies fast).
A review-notes template — swap in your own paths and credentials.

Test the credentials from a clean install first

Before you submit, install the build fresh on a device you're not signed into, and log in using only the exact username and password you put in App Store Connect. If you can't reach every feature you listed, neither can the reviewer. This one dry run catches the vast majority of 2.1 login rejections.

What about Google Play?

Play has the same problem and its own home for the answer. In Play Console it's the App access section (under App content): you declare whether all functionality is available without special access, or you provide instructions and credentials for restricted parts. Same principle, same failure mode — if the reviewer can't get into a gated flow, your release gets held up. Provide a demo login, document the path to each gated feature, and keep the account active. The two stores diverge in plenty of places once you're live and users start reviewing you, covered in [App Store vs Google Play review replies](/blog/app-store-vs-google-play-review-replies), but on the submission demo-account question they want the same thing: a way in and a map.

You passed review. Now the other kind of reviews start.

The demo-account fix gets you through App Review once. The moment you're live, a different and never-ending kind of review begins: public star ratings and written feedback from real users — and unlike App Review, these you answer for the life of the app. Some will be about the exact login flow you just spent a day getting past a reviewer, because a stranger's device is where edge cases live.

That's the job [ReplyArgus](/features) is built for. It watches your App Store and Google Play reviews in one inbox, drafts an on-brand reply in the reviewer's own language grounded in your past replies and store listing, and lets you approve each one (or auto-publish only the safe cases you opt into by rating, keyword, and language). It won't write your App Review notes — that's a one-time submission task — but it handles everything after launch, so a rough first-week login complaint gets a fast, specific answer instead of sitting for a week. Here's the kind of reply it drafts for exactly that:

Downloaded it, tried to sign in, and it just spins forever on the login screen. Never gets past it on my phone.

Reply

That spinning login screen shouldn't happen, and I'm sorry it's blocking you before you've even seen the app. It usually means our auth server hiccuped for your region. Can you reply with your device model and country, or email dev@myapp.com? We'll get you in or send a workaround today, and if the fault is on our side a patch goes out this week.

That reply is specific, grounded, and out the door in minutes instead of Monday — the difference between a two-star that stays two and one the user quietly updates. For the full playbook on the angry ones, see [how to respond to negative app reviews](/blog/how-to-respond-to-negative-app-reviews).

Frequently asked

What are App Store review notes and where do I add them?
Review notes are free-text instructions to Apple's App Review team, added in App Store Connect under the App Review Information section of your app version. Use them to give the reviewer a demo account and to explain, step by step, how to reach every feature that isn't visible on the first screen. They're the main way to prevent a Guideline 2.1 rejection on a login-gated or feature-gated app.
Do I need a demo account for App Review?
Yes, if any part of your app requires signing in. In App Store Connect, turn on the Sign-In required toggle and provide a username and password for an account that stays active through review, has full (including paid) access, and is pre-loaded with sample data. Without working credentials, the reviewer can't test the app and will reject it under Guideline 2.1.
Why does the App Store keep rejecting my app for login issues?
Almost always because the demo account doesn't fully work for the reviewer: it expired, lacks premium access, shows empty screens, or requires a two-factor code sent to a phone the reviewer doesn't have. Test it from a clean install using only the exact credentials you entered, unlock every feature on that account, and remove or document any 2FA before resubmitting.
How do I handle two-factor authentication for App Review?
Give the demo account a path the reviewer can complete without your phone: disable 2FA on that account, set a static known verification code and document it in the Notes, or route the one-time code somewhere you can relay from. If the reviewer can't receive the code, they can never sign in, and the app reads as broken.
Does Google Play need demo account details too?
Yes. Play Console has an App access section (under App content) where you either confirm all functionality is available without special access or provide login credentials and instructions for restricted parts. It's the same idea as Apple's demo account and notes — give the reviewer a way in and a map to each gated feature, and keep the account active.
Can I attach a video for App Review?
Yes. The App Review Information section includes an Attachment field where you can upload a document or a short screen recording. A 30-second video showing the login and any hard-to-reach flow is the most effective way to demonstrate features that need special hardware, a specific region, or a setup the reviewer can't easily reproduce.

Set the demo account, fill the Notes with a tap-by-tap map, kill any 2FA the reviewer can't clear, and do one clean-install dry run before you submit — that's the whole defense against the most common login-gated rejection. Once you're through and live, [start free with ReplyArgus](/signup) (no card): both stores land in one inbox with a grounded reply already drafted, so the reviews that come after launch never sit unanswered while you build the next release.

Try it

Let Argus draft your next reply.

Watch it answer a real review in your voice. 10-day trial, no card to begin.

See the features or pricing.

Keep reading