Ios 9.3.5 Untethered Jailbreak 〈1080p〉

Important Note on Reboots: If your device runs out of battery or you restart it:

If you are sitting on an iPhone 4s, 5, or 5c running iOS 9.3.5, here is your realistic path:

iOS 9 introduced KPP (Kernel Patching Protection) – a hardware/software monitor that checks the kernel’s integrity every few milliseconds. On iOS 9.0-9.1, Pangu9 used an off-by-one bug in kernel task port naming to disable KPP permanently without crashing. By 9.3.5, Apple had hardened KPP significantly.

To be untethered, you need:

No known public chain exists for 9.3.5 that satisfies #1. The last known bootloader vulnerability (iBoot) was for iOS 4. Post-iOS 8, Apple moved to secure boot chains with hardware verification (Secure Enclave on A7+).

To understand the scarcity, look at the OS release date: August 25, 2016.

By this point, Apple had introduced:

A common mistake online is confusing EtasonJB (for iOS 8.4.1) with iOS 9.3.5. EtasonJB is an untethered jailbreak, but it does not work on iOS 9.3.5. Search engines frequently conflate these two because they both target 32-bit devices. Do not download a tool claiming "EtasonJB for 9.3.5"—it does not exist.

To answer the keyword directly: No, there is currently no public, stable, untethered jailbreak for iOS 9.3.5. The tools that exist (Phoenix, kok3shi) are semi-untethered, requiring a re-jailbreak after every reboot.

Do not let the clickbait videos fool you. If you want an untethered experience on that hardware, downgrade to iOS 8.4.1. If you must stay on 9.3.5 for app compatibility, embrace the Phoenix. It is stable, secure, and—given the age of the OS—the best you are going to get.

The era of truly untethered jailbreaks ended with iOS 9.0.2. iOS 9.3.5 is a testament to how far Apple’s security has come and how the modding community evolved to meet the challenge—not by breaking the chain, but by redefining what a "jailbreak" actually needs to be.

Disclaimer: Jailbreaking can void warranties, expose security risks, and violate Apple’s terms of service. This article is for educational and legacy preservation purposes only. Always back up your device before attempting any modification.

no direct untethered jailbreak for iOS 9.3.5. The primary tools available, such as

, are semi-untethered, meaning you must re-run the app after every device reboot.

However, users can achieve a "fully untethered" experience by first installing a semi-untethered jailbreak and then applying specific post-installation tweaks: How to Achieve an Untethered Setup Install Phoenix : Use a tool like Sideloadly

to install the Phoenix IPA on your 32-bit device (e.g., iPhone 4S, iPad 2/3, iPad Mini 1). Run Phoenix

: Open the app on your device, tap "Prepare for Jailbreak," and follow the prompts. Once the device reboots, Cydia will be available. Apply Untether Tweak

: To make it permanent, you can search Cydia for untether packages (like the one discussed on

) that automate the "kickstart" process during boot, effectively making the jailbreak persist without manual intervention. Key Limitations 32-Bit Only

: iOS 9.3.5 was the final firmware for many 32-bit devices. If you are on a 64-bit device (like an iPhone 5s or newer), these specific tools will not work. App Compatibility

: Most modern apps (like Netflix) require newer iOS versions and may not run even after jailbreaking. You can sometimes bypass this by downloading "Last Compatible Versions" from your App Store purchase history. Semi-Untethered Nature

: Without the additional untether tweak, you must open Phoenix and tap "Kickstart Jailbreak" whenever your battery dies or you restart the phone. using a computer? How To Jailbreak iOS 9.3.5 NO PC 2024! 22 Jan 2024 —

For years, users on iOS 9.3.5 and 9.3.6 were limited to semi-untethered jailbreaks, such as Phoenix, which required re-activating the jailbreak via an app after every reboot. However, as of March 2026, a fully untethered jailbreak has been released, allowing the device to remain jailbroken persistently without user intervention during startup. The Evolution of iOS 9.3.5 Jailbreaking

Historically, iOS 9.3.5 was the final update for many 32-bit legacy devices, including the iPhone 4s, iPad 2, iPad 3, and iPod Touch 5.

The Semi-Untethered Era (Phoenix & p0laris): For a long time, the primary tool was Phoenix. It required sideloading an IPA file using a computer or third-party app stores. Because these apps were signed with free developer certificates, they often expired every seven days, requiring users to re-sign and re-install the tool if the device rebooted after that window.

The Untethered Breakthrough (2026): Community developers recently achieved a full untether for these versions. This development is significant for the "Legacy Jailbreak" community, as it removes the reliance on expiring certificates and manual "kickstarting". Comparison of Jailbreak Types

Understanding the difference between these methods is key for legacy device maintenance: Phoenix / p0laris (Semi-Untethered) New 2026 Untether Persistence Lost upon reboot; requires "Kickstart" Remains active permanently Ease of Use High maintenance (7-day re-signing) Install once and forget Boot Time Normal, then manual activation Automatically applies patches at boot Practical Utility for Legacy Devices

Jailbreaking remains the only viable way to keep these aging devices functional in a modern ecosystem. Roblox Mobile System Requirements

Current supported devices The Roblox application requires iOS 13 / iPadOS 13 or higher. Roblox Support

The release of iOS 9.3.5 marked a significant turning point in the history of iPhone customization. As the final software update for several iconic 32-bit devices, it became the "end of the road" for hardware like the iPhone 4s and iPad 2. For the jailbreak community, this version represented a final challenge to unlock these legacy devices permanently. The Search for the Untethered Holy Grail

In the world of iOS exploitation, an untethered jailbreak is the gold standard. It allows a device to remain in a jailbroken state even after a reboot, requiring no external computer or app re-activation. For iOS 9.3.5, the journey to achieving this was long and complex. Initially, users relied on semi-untethered tools like Phoenix, which required re-running an app every time the battery died. However, the community eventually saw the release of the Kok3shi9 and later the Daibutsu jailbreaks, which provided a more stable experience for 32-bit users. Technical Vulnerabilities and Exploits

The breakthrough for iOS 9.3.5 relied on a series of critical vulnerabilities, most notably the Trident exploits. These were a set of three zero-day vulnerabilities originally discovered being used in the wild for targeted surveillance. The exploits targeted the kernel and Safari's WebKit engine, allowing for arbitrary code execution. Developers repurposed these high-level security flaws to bypass Apple’s "Code Signing" and "Root" protections, giving users full control over the file system. The Impact on Legacy Hardware

The availability of a jailbreak for iOS 9.3.5 breathed new life into aging hardware. Because these devices were no longer receiving performance updates, they often felt sluggish. Jailbreaking allowed users to:

Downgrade Firmware: Using tools like OdysseusOTA or CoolBooter, users could revert to older, faster versions of iOS like 6.1.3.

Customization: Standard tweaks like WinterBoard and Cylinder allowed users to modernize the UI or embrace nostalgia.

Functional Longevity: Users could install "Fixes" for apps that no longer supported older iOS versions, extending the utility of the device as a dedicated music player or e-reader. The End of an Era

iOS 9.3.5 was one of the last versions where 32-bit architecture was the primary focus of the jailbreak scene. As Apple transitioned fully to 64-bit chips and introduced more robust security measures like KPP (Kernel Patch Protection), the era of easy, untethered jailbreaks began to fade. Today, the iOS 9.3.5 jailbreak stands as a monument to the persistence of developers who refused to let perfectly good hardware be locked away by software limitations. Safety and Modern Considerations

While jailbreaking iOS 9.3.5 is now considered stable, it is not without risks. Users must be cautious of downloading tweaks from "pirate" repositories, which can contain malware. Furthermore, because the vulnerabilities used to jailbreak the device are the same ones used by malicious actors, a jailbroken device on such an old firmware is inherently less secure than a modern one. For enthusiasts, however, the trade-off for total digital freedom remains a price worth paying.

Let me know your hardware model and I can provide specific instructions.

The Legacy of the iOS 9.3.5 Untethered Jailbreak: A Deep Dive ios 9.3.5 untethered jailbreak

For many Apple enthusiasts, the era of iOS 9 represents a turning point in the history of mobile customization. Specifically, the quest for an iOS 9.3.5 untethered jailbreak became a legendary pursuit within the community. While modern jailbreaking has shifted toward "semi-tethered" solutions, the desire for a permanent, reboot-proof exploit remains the gold standard for power users. Understanding the Landscape of iOS 9.3.5

Released in August 2016, iOS 9.3.5 was a critical security update designed to patch the "Pegasus" spyware vulnerabilities. For users of older hardware—like the iPad 2, iPad 3, iPhone 4S, and iPod Touch 5G—this version was the final stop. Since these 32-bit devices cannot upgrade to iOS 10 or later, jailbreaking became the only way to keep them functional and modern. Tethered vs. Untethered: What’s the Difference?

To understand why the iOS 9.3.5 untethered jailbreak is so sought after, you have to look at the mechanics:

Tethered: Requires a computer to boot the device into a jailbroken state every time it restarts.

Semi-Untethered: Allows the device to boot normally, but you must run an app (like Phoenix) on the device to re-enable jailbreak features after a reboot.

Untethered: The "Holy Grail." Once installed, the jailbreak persists through reboots automatically. No apps to run, no computers needed.

The Reality: Is there a true Untethered Jailbreak for 9.3.5?

The short answer is: Not in the traditional sense for all devices.

The most famous tool for this firmware is Phoenix. Developed by Siguza and tihmstar, Phoenix is technically a semi-untethered jailbreak. While it provides full access to Cydia and the root filesystem, you have to tap "Prepare for Jailbreak" every time your battery dies or you restart the device.

However, for the dedicated community, there are workarounds. Using a tool called "UntetherHomeDepot" or specific "untether" packages from Cydia repositories, some users have successfully converted their semi-untethered environments into fully untethered ones on 32-bit devices. How to Jailbreak iOS 9.3.5 (The Phoenix Method)

If you are looking to breathe new life into an old device, here is the standard process:

Backup Your Data: Always use iTunes or iCloud before attempting an exploit.

Download the Phoenix IPA: Visit the official Phoenix website to get the latest IPA file.

Sideload the App: Use a tool like Sideloadly or AltStore (if compatible) to install the IPA onto your iPhone or iPad using your Apple ID.

Trust the Developer: Go to Settings > General > Device Management and trust your certificate.

Run Phoenix: Open the app and tap "Prepare for Jailbreak." The device will respring, and Cydia will appear on your home screen. Why Jailbreak iOS 9.3.5 Today?

You might wonder why anyone bothers with a decade-old operating system. The reasons are surprisingly practical:

App Compatibility: Many apps no longer support iOS 9. Jailbreak tweaks like LowerInstall allow you to download versions of apps that would otherwise be restricted.

Performance Boosts: Tweaks can disable system animations and "bloatware," making an old iPad 2 feel significantly snappier.

Legacy Gaming: Use your device as a dedicated retro gaming station with emulators like RetroArch or Happy Chick.

Customization: Classic themes (WinterBoard/Anemone) allow you to change the look of the OS in ways Apple still doesn't permit. A Note on Security

Jailbreaking removes the "walled garden" security layers of iOS. Since iOS 9.3.5 is no longer receiving security patches from Apple, a jailbroken device is technically more vulnerable. It is highly recommended to change your root password via Terminal immediately after jailbreaking to prevent unauthorized access. Final Thoughts

While a native, "out-of-the-box" iOS 9.3.5 untethered jailbreak never became as mainstream as the exploits for iOS 6 or 7, the combination of Phoenix and community-made untether scripts has made it a reality for those willing to do the work. It remains the best way to save 32-bit Apple hardware from the junk drawer.

iOS 9.3.5 Untethered Jailbreak: A Comprehensive Guide

The iOS 9.3.5 untethered jailbreak is a software exploit that allows users to gain root access to their iOS devices running on iOS 9.3.5. This guide will walk you through the process, benefits, and risks associated with jailbreaking your device.

What is a Jailbreak?

A jailbreak is a process that removes software restrictions imposed by Apple on its iOS devices. This allows users to install unauthorized apps, tweaks, and modifications that can enhance the functionality and customization of their device.

What is an Untethered Jailbreak?

An untethered jailbreak is a type of jailbreak that does not require a computer to be connected to the device at all times. Once the jailbreak is installed, the device can be rebooted and will still retain its jailbroken state.

Benefits of iOS 9.3.5 Untethered Jailbreak

The iOS 9.3.5 untethered jailbreak offers several benefits, including:

Risks Associated with Jailbreaking

While jailbreaking offers several benefits, it also comes with risks, including:

How to Perform an iOS 9.3.5 Untethered Jailbreak

The iOS 9.3.5 untethered jailbreak can be performed using the following tools:

Step-by-Step Guide

Here is a step-by-step guide to perform an iOS 9.3.5 untethered jailbreak using Phoenix:

Conclusion

The iOS 9.3.5 untethered jailbreak offers users a way to gain root access to their device and install unauthorized apps, tweaks, and modifications. However, it also comes with risks, including security risks, instability, and warranty voidance. Users should carefully consider these factors before deciding to jailbreak their device. Important Note on Reboots: If your device runs

Disclaimer

This guide is for educational purposes only. We do not encourage or support piracy or any other malicious activities. Jailbreaking your device is at your own risk. Make sure to understand the risks and benefits before proceeding.

iOS 9.3.5 is a legendary version for legacy Apple device owners. It represents the final software update for iconic hardware like the iPad 2, iPad Mini 1, and iPhone 4s. Because these devices are no longer supported by Apple, jailbreaking is the only way to keep them functional, fast, and capable of running modern apps.

If you are looking for an iOS 9.3.5 untethered jailbreak, here is the definitive guide on what is possible today and how to do it. The Reality of Untethered vs. Semi-Untethered

In the jailbreak world, "Untethered" is the gold standard. It means you can reboot your phone and the jailbreak remains active. However, for iOS 9.3.5, the situation is slightly different:

Semi-Untethered: Most modern tools for this version (like Phœnix) require you to run an app on the device after every reboot to re-enable the jailbreak.

Fully Untethered: This is possible on iOS 9.3.5 using a specific combination of tools, but it is generally achieved by first using a semi-untethered jailbreak and then "upgrading" it via a Cydia package. Best Tools for iOS 9.3.5 Jailbreak 1. Phœnix Jailbreak (Semi-Untethered)

This is the most stable and widely used tool for 32-bit devices on iOS 9.3.5.

Supported Devices: iPhone 4s, iPhone 5, iPhone 5c, iPad 2, iPad 3, iPad 4, iPad Mini 1, iPod Touch 5G. Pros: Very reliable, easy to use.

Cons: Requires a computer to sideload the app every 7 days (unless you have a developer account). 2. KokoshiX / Phœnix Untether (Fully Untethered)

To turn your Phœnix jailbreak into a permanent, untethered experience, developers released "untether" packages. Once Phœnix is installed, you can add a specific repository in Cydia to install a patch that makes the jailbreak persist through reboots. Step-by-Step Guide: How to Jailbreak iOS 9.3.5 Phase 1: Preparation Backup Your Data: Use iTunes or iCloud.

Disable Passcode: Go to Settings > Touch ID & Passcode and turn it off.

Find My iPhone: Turn this off in your iCloud settings temporarily. Phase 2: Installing the Jailbreak

Download Sideloadly: On your PC or Mac, download Sideloadly (the modern successor to Cydia Impactor).

Download Phœnix IPA: Get the official .ipa file from the Phœnix website.

Connect Device: Plug your iPhone or iPad into your computer.

Sideload: Drag the Phœnix IPA into Sideloadly, enter your Apple ID, and hit "Start."

Trust the Profile: On your iOS device, go to Settings > General > Device Management and trust your Apple ID profile. Phase 3: Activating the Jailbreak Open the Phœnix app on your home screen. Tap "Prepare For Jailbreak." Wait for the device to respring. Once it reboots, you will see Cydia on your home screen. Making it "Untethered"

To ensure you never have to run the Phœnix app again after a reboot: Open Cydia.

Add a reputable community repo that hosts the "iOS 9.3.5 Untether" package (often found in the Tihmstar or specialized legacy repositories). Search for and install the untether patch.

Restart your device to verify that Cydia still opens immediately. Why Jailbreak iOS 9.3.5 in 2024?

🛠️ App Admin: Downgrade apps to older versions so they actually work on legacy hardware.🚀 Performance Fixes: Use tweaks like "NoSlowAnimations" to make an old iPad 2 feel snappy again.📁 Filza File Manager: Gain full access to the iOS root system.🎮 Emulators: Turn your old device into a retro gaming console for GBA, SNES, and PS1 games.

If you'd like to move forward, I can help you find the exact repository URLs for the untether patch or troubleshoot Sideloadly errors if the installation fails. Let me know which device model you're using!

For a long time, iOS 9.3.5 was limited to semi-untethered jailbreaks, requiring you to re-run an app every time your device rebooted. However, as of March 2026, a full untethered jailbreak is now available for these legacy devices using a combination of the Phoenix tool and the iocaste untether. Core Components

The Exploit (Phoenix): A semi-untethered tool that supports all 32-bit devices on iOS 9.3.5–9.3.6.

The Untether (iocaste): A recent package from the lukezgd repository that converts the semi-untethered state into a permanent, fully untethered one. Supported 32-bit Devices

This method is exclusively for 32-bit (A5 and A6 chip) devices: iPhone: Go to product viewer dialog for this item. Go to product viewer dialog for this item. iPad: 2, 3, 4, Mini (1st Gen) Go to product viewer dialog for this item. iPod Touch: 5th Generation

These video guides provide step-by-step instructions for both the initial jailbreak process and applying the untether:

Find the correct tool (Phœnix, kok3shi9, etc.) for your hardware. Troubleshoot signing errors when installing the jailbreak. If you are sitting on an iPhone 4s, 5, or 5c running iOS 9

For a long time, an untethered jailbreak for iOS 9.3.5 was considered the "holy grail" for legacy 32-bit devices (like the iPhone 4S and iPad 2). While semi-untethered tools like

have existed for years, a true untethered solution—where the jailbreak persists after a reboot without needing to run an app—only recently became a widespread reality. The Modern Solution (2026)

A fully untethered jailbreak for iOS 9.3.5 and 9.3.6 was released in late March 2026. This is often achieved using a combination of a semi-untethered jailbreak and a secondary "untether" package. Carbon / EverPwnage : Tools like EverPwnage

now provide a direct untethered experience for 32-bit devices on iOS 9.3.5/6. Iocaste / jsc_untether

: This is a persistent exploit that can be installed via Cydia after using a tool like Phœnix or Carbon to make the jailbreak permanent. The Traditional Path (Semi-Untethered)

Until the recent untethered releases, the standard method was

. This method is still widely used as a "stepping stone" to the full untether.

A new FULLY untethered jailbreak for iOS 9.3.5 to 9.3.6 has just came!

For legacy 32-bit devices running iOS 9.3.5, finding a truly untethered jailbreak remains rare, as the standard Phoenix jailbreak

is semi-untethered, requiring a "kickstart" after every reboot.

Here is a post for your community or social media to clarify the current status and best practices as of April 2026:

🔓 iOS 9.3.5 Jailbreak Status: Untethered vs. Semi-Untethered

Still rocking an iPad 2, iPhone 4S, or iPod Touch 5? While the "untethered" dream for iOS 9.3.5 has been elusive, you can still get full functionality with the right tools. The Current Reality: Most Common Method: Phoenix Jailbreak semi-untethered

tool. This means if your battery dies or you restart, you just need to open the Phoenix app on your home screen and hit "Kickstart Jailbreak" to get Cydia back up and running. The "Untethered" Workaround:

If you want a permanent untethered jailbreak, many in the community recommend using Legacy iOS Kit downgrade to iOS 8.4.1

. iOS 8.4.1 has a fully untethered jailbreak (EtasonJB), which is often smoother on older A5/A6 devices. How to Jailbreak iOS 9.3.5 in 2026:

Bringing Your Legacy Device Back to Life: The iOS 9.3.5 Jailbreak Guide

If you have an older iPhone, iPad, or iPod Touch sitting in a drawer, you might find it increasingly difficult to use as modern apps drop support for older iOS versions. Jailbreaking iOS 9.3.5 can breathe new life into these devices, allowing for UI customization, performance tweaks, and access to older app versions.

As of April 2026, here is the most current state of jailbreaking for iOS 9.3.5 and 9.3.6. The Status of "Untethered" vs. "Semi-Untethered"

For a long time, the primary methods for iOS 9.3.5—such as Phoenix and p0laris—have been semi-untethered. This means the jailbreak is disabled every time you reboot your device, requiring you to open an app on your home screen to "kickstart" the jailbreak again.

However, recent developments in 2026 have introduced new possibilities for a fully untethered experience:

EverPwnage (iocaste untether): This tool provides a fully untethered jailbreak for 32-bit devices on iOS 9.3.5–9.3.6 using the iocaste untether by staturnz.

New 2026 Methods: Community reports from March and April 2026 indicate new browser-based methods are emerging that aim for a permanent, untethered state without needing a computer for reactivation. Supported 32-Bit Devices

These tools are specifically designed for 32-bit (A5/A6) devices, including:

The iOS 9.3.5 untethered jailbreak is a significant event in the world of iPhone and iPad hacking. In 2016, a team of hackers, including Luca Todesco, released a jailbreak tool for iOS 9.3.5, which allowed users to gain root access to their devices.

What is a Jailbreak?

A jailbreak is a process that allows users to remove software restrictions on their iOS devices, giving them more control over their device and allowing them to install third-party apps and tweaks not available on the App Store.

The iOS 9.3.5 Untethered Jailbreak

The iOS 9.3.5 untethered jailbreak was a significant achievement, as it was the first public jailbreak for iOS 9.3.x. The jailbreak was released by a team of hackers, including Luca Todesco, who had previously released several other jailbreaks.

The jailbreak was made possible by a vulnerability in the iOS kernel, which allowed the hackers to create a tool that could exploit the vulnerability and gain root access to the device. The tool, known as "H3lix," was released as a semi-untethered jailbreak, meaning that the device would reboot normally, but the jailbreak would remain in place.

Features and Benefits

The iOS 9.3.5 untethered jailbreak offered several benefits to users, including:

Risks and Limitations

While the iOS 9.3.5 untethered jailbreak offered several benefits, it also came with risks and limitations, including:

Conclusion

The iOS 9.3.5 untethered jailbreak was a significant event in the world of iPhone and iPad hacking, offering users more control over their devices and allowing them to install third-party apps and tweaks not available on the App Store. However, it also came with risks and limitations, including security risks, instability, and warranty voidance. As with any jailbreak, users should carefully consider the benefits and risks before deciding to jailbreak their device.

For 32-bit devices (iPhone 4s, iPad 2), there is technically an untethered jailbreak for iOS 9.3.5 – but it's not public. The tihmstar team demonstrated a private untethered for 32-bit using a bootROM exploit (limera1n – patched in A5 devices but still present in early A5 revisions). However:

Thus, the public 32-bit jailbreak (Phoenix) remains semi-untethered.

TL;DR: There is no public untethered jailbreak for iOS 9.3.5. The only public jailbreaks are semi-untethered (Phoenix for 32-bit, kok3shi9 for 64-bit). This post explains why the untethered dream remains unrealized and what that actually means for end users.