Ios 9.3.5 Untethered Jailbreak Instant

Enter Siguza, a renowned security researcher and reverse engineer. He looked at the patched exploit and realized Apple hadn't fixed everything. The door was closed, but they had left a window open.

Siguza discovered that while the specific exploit Moonshine used was patched, the underlying vulnerability in the IOHIDFamily kernel extension remained viable. Apple had fixed the "trigger," but not the "gun."

For months, Siguza worked in the shadows. The goal was ambitious: to build the first truly untethered jailbreak for iOS 9.3.5. He wasn't just building a tool; he was resurrecting a dead era. He collaborated with other legends, including tihmstar and mbazaliy, to weaponize the exploit.

A common mistake online is confusing EtasonJB (for iOS 8.4.1) with iOS 9.3.5. EtasonJB is an untethered jailbreak, but it does not work on iOS 9.3.5. Search engines frequently conflate these two because they both target 32-bit devices. Do not download a tool claiming "EtasonJB for 9.3.5"—it does not exist.

To visualize the untethered process on iOS 9.3.5:

This contrasts sharply with a semi-tethered jailbreak like Yalu102 for iOS 10.2, which required re-running an app after every reboot. Phœnix’s untethered nature was a regression to the golden age of iOS 4-6, but on far more hostile hardware.

No one is working on an iOS 9.3.5 untethered jailbreak. The last known private chain (32-bit) was abandoned in 2018. The 64-bit chain would require a bootROM or iBoot vulnerability – none exist publicly for A6-A7 devices on 9.3.5.

If you absolutely need an untethered experience on that version:

Otherwise, use Phoenix/kok3shi9 and accept the 30-second re-jailbreak process after a reboot.

To appreciate the achievement, one must first understand what “untethered” means in the context of jailbreaking. A jailbreak is the process of removing the sandbox restrictions imposed by iOS, granting root access to the user. This is achieved by exploiting vulnerabilities in the kernel or userland services. Jailbreaks fall into three categories: tethered, semi-tethered, and untethered.

By the time iOS 9.3.5 was released, untethered jailbreaks were becoming rarities. Apple’s introduction of KPP (Kernel Patch Protection), mandatory code signing, and the gradual hardening of the boot process made persistent, reboot-proof code execution extraordinarily difficult. The Phœnix jailbreak for 9.3.5 was one of the last publicly available untethered jailbreaks for a modern (64-bit) iOS version.

On January 24, 2017, the bomb dropped. Siguza released "Phoenix" (also known as "jalbreak" in its early iterations).

It was a miracle of engineering. It utilized the "extra_recipe" exploit to bypass Apple's securities and drop the payload. But it wasn't perfect yet. The initial release was a "semi-untether

For years, users on iOS 9.3.5 and 9.3.6 were limited to semi-untethered jailbreaks, such as Phoenix, which required re-activating the jailbreak via an app after every reboot. However, as of March 2026, a fully untethered jailbreak has been released, allowing the device to remain jailbroken persistently without user intervention during startup. The Evolution of iOS 9.3.5 Jailbreaking

Historically, iOS 9.3.5 was the final update for many 32-bit legacy devices, including the iPhone 4s, iPad 2, iPad 3, and iPod Touch 5.

The Semi-Untethered Era (Phoenix & p0laris): For a long time, the primary tool was Phoenix. It required sideloading an IPA file using a computer or third-party app stores. Because these apps were signed with free developer certificates, they often expired every seven days, requiring users to re-sign and re-install the tool if the device rebooted after that window.

The Untethered Breakthrough (2026): Community developers recently achieved a full untether for these versions. This development is significant for the "Legacy Jailbreak" community, as it removes the reliance on expiring certificates and manual "kickstarting". Comparison of Jailbreak Types

Understanding the difference between these methods is key for legacy device maintenance: Phoenix / p0laris (Semi-Untethered) New 2026 Untether Persistence Lost upon reboot; requires "Kickstart" Remains active permanently Ease of Use High maintenance (7-day re-signing) Install once and forget Boot Time Normal, then manual activation Automatically applies patches at boot Practical Utility for Legacy Devices ios 9.3.5 untethered jailbreak

Jailbreaking remains the only viable way to keep these aging devices functional in a modern ecosystem. Roblox Mobile System Requirements

Current supported devices The Roblox application requires iOS 13 / iPadOS 13 or higher. Roblox Support

iOS 9.3.5 is a legendary version for legacy Apple device owners. It represents the final software update for iconic hardware like the iPad 2, iPad Mini 1, and iPhone 4s. Because these devices are no longer supported by Apple, jailbreaking is the only way to keep them functional, fast, and capable of running modern apps.

If you are looking for an iOS 9.3.5 untethered jailbreak, here is the definitive guide on what is possible today and how to do it. The Reality of Untethered vs. Semi-Untethered

In the jailbreak world, "Untethered" is the gold standard. It means you can reboot your phone and the jailbreak remains active. However, for iOS 9.3.5, the situation is slightly different:

Semi-Untethered: Most modern tools for this version (like Phœnix) require you to run an app on the device after every reboot to re-enable the jailbreak.

Fully Untethered: This is possible on iOS 9.3.5 using a specific combination of tools, but it is generally achieved by first using a semi-untethered jailbreak and then "upgrading" it via a Cydia package. Best Tools for iOS 9.3.5 Jailbreak 1. Phœnix Jailbreak (Semi-Untethered)

This is the most stable and widely used tool for 32-bit devices on iOS 9.3.5.

Supported Devices: iPhone 4s, iPhone 5, iPhone 5c, iPad 2, iPad 3, iPad 4, iPad Mini 1, iPod Touch 5G. Pros: Very reliable, easy to use.

Cons: Requires a computer to sideload the app every 7 days (unless you have a developer account). 2. KokoshiX / Phœnix Untether (Fully Untethered)

To turn your Phœnix jailbreak into a permanent, untethered experience, developers released "untether" packages. Once Phœnix is installed, you can add a specific repository in Cydia to install a patch that makes the jailbreak persist through reboots. Step-by-Step Guide: How to Jailbreak iOS 9.3.5 Phase 1: Preparation Backup Your Data: Use iTunes or iCloud.

Disable Passcode: Go to Settings > Touch ID & Passcode and turn it off.

Find My iPhone: Turn this off in your iCloud settings temporarily. Phase 2: Installing the Jailbreak

Download Sideloadly: On your PC or Mac, download Sideloadly (the modern successor to Cydia Impactor).

Download Phœnix IPA: Get the official .ipa file from the Phœnix website.

Connect Device: Plug your iPhone or iPad into your computer.

Sideload: Drag the Phœnix IPA into Sideloadly, enter your Apple ID, and hit "Start." Enter Siguza , a renowned security researcher and

Trust the Profile: On your iOS device, go to Settings > General > Device Management and trust your Apple ID profile. Phase 3: Activating the Jailbreak Open the Phœnix app on your home screen. Tap "Prepare For Jailbreak." Wait for the device to respring. Once it reboots, you will see Cydia on your home screen. Making it "Untethered"

To ensure you never have to run the Phœnix app again after a reboot: Open Cydia.

Add a reputable community repo that hosts the "iOS 9.3.5 Untether" package (often found in the Tihmstar or specialized legacy repositories). Search for and install the untether patch.

Restart your device to verify that Cydia still opens immediately. Why Jailbreak iOS 9.3.5 in 2024?

🛠️ App Admin: Downgrade apps to older versions so they actually work on legacy hardware.🚀 Performance Fixes: Use tweaks like "NoSlowAnimations" to make an old iPad 2 feel snappy again.📁 Filza File Manager: Gain full access to the iOS root system.🎮 Emulators: Turn your old device into a retro gaming console for GBA, SNES, and PS1 games.

If you'd like to move forward, I can help you find the exact repository URLs for the untether patch or troubleshoot Sideloadly errors if the installation fails. Let me know which device model you're using!

The release of iOS 9.3.5 marked a significant turning point in the history of iPhone customization. As the final software update for several iconic 32-bit devices, it became the "end of the road" for hardware like the iPhone 4s and iPad 2. For the jailbreak community, this version represented a final challenge to unlock these legacy devices permanently. The Search for the Untethered Holy Grail

In the world of iOS exploitation, an untethered jailbreak is the gold standard. It allows a device to remain in a jailbroken state even after a reboot, requiring no external computer or app re-activation. For iOS 9.3.5, the journey to achieving this was long and complex. Initially, users relied on semi-untethered tools like Phoenix, which required re-running an app every time the battery died. However, the community eventually saw the release of the Kok3shi9 and later the Daibutsu jailbreaks, which provided a more stable experience for 32-bit users. Technical Vulnerabilities and Exploits

The breakthrough for iOS 9.3.5 relied on a series of critical vulnerabilities, most notably the Trident exploits. These were a set of three zero-day vulnerabilities originally discovered being used in the wild for targeted surveillance. The exploits targeted the kernel and Safari's WebKit engine, allowing for arbitrary code execution. Developers repurposed these high-level security flaws to bypass Apple’s "Code Signing" and "Root" protections, giving users full control over the file system. The Impact on Legacy Hardware

The availability of a jailbreak for iOS 9.3.5 breathed new life into aging hardware. Because these devices were no longer receiving performance updates, they often felt sluggish. Jailbreaking allowed users to:

Downgrade Firmware: Using tools like OdysseusOTA or CoolBooter, users could revert to older, faster versions of iOS like 6.1.3.

Customization: Standard tweaks like WinterBoard and Cylinder allowed users to modernize the UI or embrace nostalgia.

Functional Longevity: Users could install "Fixes" for apps that no longer supported older iOS versions, extending the utility of the device as a dedicated music player or e-reader. The End of an Era

iOS 9.3.5 was one of the last versions where 32-bit architecture was the primary focus of the jailbreak scene. As Apple transitioned fully to 64-bit chips and introduced more robust security measures like KPP (Kernel Patch Protection), the era of easy, untethered jailbreaks began to fade. Today, the iOS 9.3.5 jailbreak stands as a monument to the persistence of developers who refused to let perfectly good hardware be locked away by software limitations. Safety and Modern Considerations

While jailbreaking iOS 9.3.5 is now considered stable, it is not without risks. Users must be cautious of downloading tweaks from "pirate" repositories, which can contain malware. Furthermore, because the vulnerabilities used to jailbreak the device are the same ones used by malicious actors, a jailbroken device on such an old firmware is inherently less secure than a modern one. For enthusiasts, however, the trade-off for total digital freedom remains a price worth paying.

Let me know your hardware model and I can provide specific instructions.

For a long time, an untethered jailbreak for iOS 9.3.5 was considered the "holy grail" for legacy 32-bit devices (like the iPhone 4S and iPad 2). While semi-untethered tools like This contrasts sharply with a semi-tethered jailbreak like

have existed for years, a true untethered solution—where the jailbreak persists after a reboot without needing to run an app—only recently became a widespread reality. The Modern Solution (2026)

A fully untethered jailbreak for iOS 9.3.5 and 9.3.6 was released in late March 2026. This is often achieved using a combination of a semi-untethered jailbreak and a secondary "untether" package. Carbon / EverPwnage : Tools like EverPwnage

now provide a direct untethered experience for 32-bit devices on iOS 9.3.5/6. Iocaste / jsc_untether

: This is a persistent exploit that can be installed via Cydia after using a tool like Phœnix or Carbon to make the jailbreak permanent. The Traditional Path (Semi-Untethered)

Until the recent untethered releases, the standard method was

. This method is still widely used as a "stepping stone" to the full untether.

A new FULLY untethered jailbreak for iOS 9.3.5 to 9.3.6 has just came!

Bringing Your Legacy Device Back to Life: The iOS 9.3.5 Jailbreak Guide

If you have an older iPhone, iPad, or iPod Touch sitting in a drawer, you might find it increasingly difficult to use as modern apps drop support for older iOS versions. Jailbreaking iOS 9.3.5 can breathe new life into these devices, allowing for UI customization, performance tweaks, and access to older app versions.

As of April 2026, here is the most current state of jailbreaking for iOS 9.3.5 and 9.3.6. The Status of "Untethered" vs. "Semi-Untethered"

For a long time, the primary methods for iOS 9.3.5—such as Phoenix and p0laris—have been semi-untethered. This means the jailbreak is disabled every time you reboot your device, requiring you to open an app on your home screen to "kickstart" the jailbreak again.

However, recent developments in 2026 have introduced new possibilities for a fully untethered experience:

EverPwnage (iocaste untether): This tool provides a fully untethered jailbreak for 32-bit devices on iOS 9.3.5–9.3.6 using the iocaste untether by staturnz.

New 2026 Methods: Community reports from March and April 2026 indicate new browser-based methods are emerging that aim for a permanent, untethered state without needing a computer for reactivation. Supported 32-Bit Devices

These tools are specifically designed for 32-bit (A5/A6) devices, including:

Important Note on Reboots: If your device runs out of battery or you restart it: