iOS 9.3.5 Jailbreak: Phœnix and The Untethered Myth While iOS 9.3.5 is the final software version for several legacy devices like the iPad 2 and iPhone 4s, finding a true untethered jailbreak
(one that persists after a reboot without any app intervention) for this version is complicated. For most users, the standard solution is , which is technically semi-untethered The Reality of "Untethered" on iOS 9.3.5
Most modern jailbreaks for this firmware require you to re-run an app every time your device restarts. However, a specialized tool called
remains the gold standard for 32-bit devices on this version. Semi-Untethered: This is what
provides. After a reboot, the device returns to a "stock" state. You simply open the Phœnix app on your home screen and tap "Prepare For Jailbreak" to re-enable your tweaks. The "Untether" Tweak: There is a package called "UntetherHomeDepot"
or similar community patches available via Cydia once jailbroken. These attempt to automate the re-jailbreak process on boot, effectively making it feel untethered, though they can be less stable than the base jailbreak. Compatible 32-bit Devices
iOS 9.3.5 was the end-of-the-road for these specific devices, making them prime candidates for jailbreaking: 2, 3, 4, and Mini (1st Gen) iPod Touch: How to Jailbreak Using Phœnix
Because Apple no longer signs old apps easily, the most reliable way to install Phœnix is using a computer: Download the Tools: Get the Phœnix IPA from the Official Phœnix Website Sideloadly for your computer. Connect & Sideload:
Plug your device into your computer. Drag the Phœnix IPA into Sideloadly, enter your Apple ID, and click "Start." Trust the App: On your iOS device, go to Settings > General > Device Management and trust your Apple ID profile. Run Phœnix: Open the Phœnix app on your home screen and select "Prepare For Jailbreak." Your device will respring, and Cydia will appear. Important Tips Battery Life:
Older devices on iOS 9.3.5 can struggle with battery drain. Avoid installing heavy "winterboard" themes. App Compatibility:
Many apps in the App Store require iOS 12 or later. Use the Cydia tweak "Checkmate, Store!"
to help download the last compatible versions of apps for your device. If you'd like to know more about: Installing specific tweaks for legacy performance Bypassing the 7-day app signing limit for the jailbreak app Downgrading to iOS 8.4.1 (which has a true untethered jailbreak)
As of 2026, a new fully untethered jailbreak has emerged for 32-bit A5/A6 devices on iOS 9.3.5, allowing devices to remain jailbroken after reboots. This process involves using tools like Sideloadly to install an untethered IPA file, or converting the existing Phoenix jailbreak to an untethered state via Cydia packages . For more detailed information, read the guide at
www.reddit.com/r/LegacyJailbreak/comments/1s4qjp8/a_new_fully_untethered_jailbreak_for_ios_935_to/. ios 9.3.5 untethered jailbreak
The iOS 9.3.5 untethered jailbreak is a significant event in the world of iPhone and iPad hacking. In 2016, a team of hackers, including Luca Todesco, released a jailbreak tool for iOS 9.3.5, which allowed users to gain root access to their devices.
What is a Jailbreak?
A jailbreak is a process that allows users to remove software restrictions on their iOS devices, giving them more control over their device and allowing them to install third-party apps and tweaks not available on the App Store.
The iOS 9.3.5 Untethered Jailbreak
The iOS 9.3.5 untethered jailbreak was a significant achievement, as it was the first public jailbreak for iOS 9.3.x. The jailbreak was released by a team of hackers, including Luca Todesco, who had previously released several other jailbreaks.
The jailbreak was made possible by a vulnerability in the iOS kernel, which allowed the hackers to create a tool that could exploit the vulnerability and gain root access to the device. The tool, known as "H3lix," was released as a semi-untethered jailbreak, meaning that the device would reboot normally, but the jailbreak would remain in place.
Features and Benefits
The iOS 9.3.5 untethered jailbreak offered several benefits to users, including:
Risks and Limitations
While the iOS 9.3.5 untethered jailbreak offered several benefits, it also came with risks and limitations, including:
Conclusion
The iOS 9.3.5 untethered jailbreak was a significant event in the world of iPhone and iPad hacking, offering users more control over their devices and allowing them to install third-party apps and tweaks not available on the App Store. However, it also came with risks and limitations, including security risks, instability, and warranty voidance. As with any jailbreak, users should carefully consider the benefits and risks before deciding to jailbreak their device.
Bringing Your Legacy Device Back to Life: The iOS 9.3.5 Jailbreak Guide Customization : Users could customize their device to
If you have an older iPhone, iPad, or iPod Touch sitting in a drawer, you might find it increasingly difficult to use as modern apps drop support for older iOS versions. Jailbreaking iOS 9.3.5 can breathe new life into these devices, allowing for UI customization, performance tweaks, and access to older app versions.
As of April 2026, here is the most current state of jailbreaking for iOS 9.3.5 and 9.3.6. The Status of "Untethered" vs. "Semi-Untethered"
For a long time, the primary methods for iOS 9.3.5—such as Phoenix and p0laris—have been semi-untethered. This means the jailbreak is disabled every time you reboot your device, requiring you to open an app on your home screen to "kickstart" the jailbreak again.
However, recent developments in 2026 have introduced new possibilities for a fully untethered experience:
EverPwnage (iocaste untether): This tool provides a fully untethered jailbreak for 32-bit devices on iOS 9.3.5–9.3.6 using the iocaste untether by staturnz.
New 2026 Methods: Community reports from March and April 2026 indicate new browser-based methods are emerging that aim for a permanent, untethered state without needing a computer for reactivation. Supported 32-Bit Devices
These tools are specifically designed for 32-bit (A5/A6) devices, including:
The story of an untethered jailbreak for iOS 9.3.5 is a digital legend, a tale of a cat-and-mouse game played at the highest level, involving espionage, tragic timing, and a community refusing to let hardware die.
Here is the story of how the "Phoenix" rose from the ashes.
For 32-bit devices (iPhone 4s, iPad 2), there is technically an untethered jailbreak for iOS 9.3.5 – but it's not public. The tihmstar team demonstrated a private untethered for 32-bit using a bootROM exploit (limera1n – patched in A5 devices but still present in early A5 revisions). However:
Thus, the public 32-bit jailbreak (Phoenix) remains semi-untethered.
To answer the keyword directly: No, there is currently no public, stable, untethered jailbreak for iOS 9.3.5. The tools that exist (Phoenix, kok3shi) are semi-untethered, requiring a re-jailbreak after every reboot.
Do not let the clickbait videos fool you. If you want an untethered experience on that hardware, downgrade to iOS 8.4.1. If you must stay on 9.3.5 for app compatibility, embrace the Phoenix. It is stable, secure, and—given the age of the OS—the best you are going to get. Risks and Limitations While the iOS 9
The era of truly untethered jailbreaks ended with iOS 9.0.2. iOS 9.3.5 is a testament to how far Apple’s security has come and how the modding community evolved to meet the challenge—not by breaking the chain, but by redefining what a "jailbreak" actually needs to be.
Disclaimer: Jailbreaking can void warranties, expose security risks, and violate Apple’s terms of service. This article is for educational and legacy preservation purposes only. Always back up your device before attempting any modification.
Compatible Devices: iPhone 5, iPhone 5c, iPad 4, iPad Mini 1, iPad 2, iPhone 4s. Constraint: This requires a computer to re-sign the app every 7 days (unless you have a paid developer account). The jailbreak disables after a reboot.
iOS 9.3.5 was released in August 2016. It is the final version of iOS 9. It supports two distinct device families:
This split is critical because exploit primitives differ drastically between ARMv7s and ARM64.
Note: This does not actually downgrade; it upgrades you to 9.3.6 and patches the kernel.
In the world of iPhone modding, few phrases generate as much nostalgia and technical intrigue as "iOS 9.3.5 untethered jailbreak."
For users clinging to legacy devices like the iPhone 4s, iPhone 5, iPhone 5c, or the original iPad mini, iOS 9.3.5 represents the final, bittersweet chapter. It was the last version of iOS supported by these 32-bit classics. However, it is also infamous for being patched against the powerful Trident exploit chain—making it one of the most secure (and locked-down) versions of iOS ever released for that architecture.
But the question remains for collectors, gamers, and tinkerers: Does a true untethered jailbreak exist for iOS 9.3.5?
The short answer is complicated. The long answer requires a deep dive into exploit types, tool compatibility, and a major evolution in how we define "jailbreak."
In the annals of Apple’s mobile operating system history, iOS 9.3.5 occupies a unique and infamous position. Released in August 2016, it was not a feature-rich update but a panicked security patch. The update closed a chain of three zero-day vulnerabilities (collectively known as “Trident”) that had been actively used to deploy the Pegasus spyware against a single human rights activist in the UAE. For most users, iOS 9.3.5 was a mandatory security fortress. Yet, for the jailbreak community, it became a holy grail—a heavily fortified system that seemed impervious to public exploits. The eventual release of an untethered jailbreak for iOS 9.3.5, spearheaded by developer Siguza and the team at Phœnix, represents not just a technical triumph but a watershed moment marking the end of an era in iOS exploitation.
Before we hunt for the tool, we must understand the terminology.
For years, an untethered jailbreak for iOS 9.3.5 was considered impossible. Apple had closed the kernel vulnerabilities needed to persist a jailbreak across reboots. Yet, in the underground development community, something shifted.