This tutorial will show you how to jailbreak your iPhone 3G using PwnageTool for Mac. Following this guide is the first step to take in order to unlock your iPhone 3G later on using UltraSn0w.

1. Make sure you have downloaded the latest version of iTunes 8.2 and that you have updated your iPhone to the latest 3.0 firmware.

2. Create a folder on your desktop. In this folder, download PwnageTool 3.0 and your iPhone 3G 3.0 firmware from our iPhone downloads page.

3. Launch PwnageTool, agree to the warning, and select the “expert mode”.

4. Select your iPhone model (iPhone 3G) and click the blue arrow to continue.

5. Now if your computer doesn’t automatically detect the iPhone 3G 3.0 firmware you downloaded in step 1, browse for it.

6. You will then have a menu with 6 choices. Choose “general”, which will allow you to set your own root partition size. Click the blue arrow to continue.

7. You will now have 3 checkboxes. Make sure only “enable baseband update” is checked. You will also need to increase the root partition size. Usually setting the root partition around 700MB is enough. Click next to continue.

8. When you get to the “bootneuter settings”, simply click the blue arrrow to continue.

9. The  “Cydia settings” allow you to choose packages to download now so you don’t have to download them from Cydia later. Choose any of the packages you want and click next.

10. You will now have the possibility to choose your own boot logo. I will skip this step as it is useless.

11. After setting your own boot logos (if you chose to), you will now be able to build your own IPSW file. Click the blue “build” button to start.

12. Choose a folder to save your custom firmware (ie. desktop).

13. Your custom firmware will now be built, which may take up to 15-20 minutes. Be patient.

14. Enter your administrator password.

15. When asked if your iPhone has been pwned before, say “no”, even if it has.

16. Make sure your iPhone is connected to your computer and turn it off, as prompted.

17. This is the tricky part. You will now have to follow directions to enter DFU mode. It will ask you to hold the home and power buttons for 10 seconds. Then, you will have to release the power button and hold the home button for 10 seconds.

18. If done correctly, you will get a message saying that you successfully entered DFU mode. Close PwnageTool and launch iTunes.

19. iTunes will give you a message saying it has detected an iPhone in recovery mode. Click OK.

20. In iTunes, hold the Alt/Option key and click “restore” at the same time. It will open a window where you will have to select the custom firmware that you built a few minutes before.

21. iTunes will then restore your iPhone 3G using the custom firmware. This step may take 15-20 minutes so again, be patient.

22. Once done, you will have to “set up your iPhone”, either as a new phone (which I recommend), or from backup.

23. Reboot your iPhone and you should have a Cydia icon on the springboard.

24. Congrats! You just jailbroke your iPhone 3G using PwnageTool 3.0 🙂

  • Mojtaba Cazi

    i get error 1600 when try to restore iPhone (2G) with custom firmware. any idea to solve it?

  • mmm… it say i have to update my phone. im on 2.1 JB its ok to update via itunes?? then do the JB with costume FW

  • D

    Will we have to activate the iPhone again after we install 3.0? I’m asking because I bought my iPhone already activated from a 3rd party and don’t want to activate it again and have to sign up for a data plan. I know I can just cancel it later and say I’m switching back to my old cell phone, but I don’t to go through all that hassle.

  • fei

    I still got the emergency call screen after following ur steps (exactly). Any idea?

  • edgarcn

    me too (got the emergency screen after the procedure). have i just bricked my phone? this is reversible, right?

  • Wil340

    Thx for this nice tut , work great !

  • D

    Fei and Edgarcn:

    I think that means you have to activate your iPhone through iTunes again. Did you “update” or “restore” to 3.0?

  • im on the emergency screen too

  • D

    I know this may sound like a silly question, but have you tried taking out and putting your SIM back in, or connecting to iTunes?

  • yeah @D try it im going to do it one more time it was the first try always fails for me the secon time always made it

  • @D thnks any way

  • icstars989

    works like a champ, thanks alot!

  • Danny

    I get error 1600 on itunes 8.2 for some reason… when i try installing the custom restore ipsw flie.. how come??????

  • D

    Well RedSn0w just got released. I know I should just wait, but I’m like a little kid on Christmas. It said on the site that using RedSn0w WILL upgrade baseband. I am an AT&T customer, but my contract is about to expire at the end of August and if they hassle me about getting a data plan, I may want to switch to T-Mobile. So my question is, will I still be able to use UltraSn0w later to unlock it if I use RedSn0w now?

  • Joshua

    For those of you with 2g’s like myself, I found that when I got to step 7 on the second try, I selected to activate the phone, and on step 8 I chose to click on the upgrade to 4.6 option. I’m currently restoring all my old apps as I type. Also, I use T-Mobile, not AT&T so I don’t know how that affects it. I guess unlocked is unlocked right?

  • adii

    after going through all the steps correctly I find I HAVE NO SIGNAL from my operator!

  • adii

    oh…and even though i’m connected to wifi, i cannot load up me network error message.. What is this?? :((

  • Seven

    I guess that the best option for us now is to wait, Till all the current problem get reported and fixed. Even for FM 3.0 it self is slower and when am typing the message the screen view keep moving to the title of this page. I wish I kept my iPhone 2.2.1. When it was just working without problems.

  • D


    After updating to 3.0, did you have to activate your phone through iTunes again?

    Yes, RedSn0w is out for PC users, but was wondering about it, It said on the site that using RedSn0w WILL upgrade baseband. I am an AT&T customer, but my contract is about to expire at the end of August and if they hassle me about getting a data plan, I may want to switch to T-Mobile. So my question is, will I still be able to use UltraSn0w later to unlock it if I use RedSn0w now?

  • spliff

    When the PwnageTool begins to build the custom IPSW for some reason it unexpectedly shuts down…. andy suggestions?

  • antonio

    A question. Why do I have to install the 3.0 firmware in my iphone before?
    I mean… is it possible to create a custom 3.0 ipsw from original 3.0 ipsw and without connect the iphone to the computer using pwnage tool?
    Then, when you have created the custom, you can restore from itunes using that new ipsw, even if you have a 2.2 firmware working in your iphone? Is it possible?
    Another question, Can I download the restore ipsw from itunes without install in my iphone this version, just download to my computer? Is there an option to do so

  • Wow! Worked like a charm. I guess most of the people that tried this don’t know what there doing. I have a 3G running 3.0 and it’s jailbroken and running great!!

  • daveh760

    worked although it took two tries. after i jailbroke it i realized i had no service though. so i basically had to restore back to my same old 3.0 stock iphone to get my service back.
    im sure someone had the same issue as myself. does anyone know why i can jailbreak but i lose my service?

  • wta0035

    Hi, I follow the procedures for jailbreaking my iPhone 3G but during the restoration after the ” preparing the iphone for restore” period during step 21, it give me the 1604 error. Anyone encounter the same error as I am? Any idea how to get around this? thx..

  • 20092009

    Hi – I cant download PwnageTool 3.0 from piratbay, because my country banned this site, any other pace I can find the PwnageTool 3.0

  • matt

    If you are using a mac you will need a USB hub to get around some things, instead of connecting your iphone directly into the computer, connect it through the hub, im on the new macbook pro and apple has protected its usb ports from jailbreak, usb hub solves this problem!

  • one simple question ?? i dnt got my info and settings back for some reason

  • D


    Did you set up your phone as a new phone when asked, or set it to your back up settings?

  • Macan

    I’ve tried 3 times now to Jailbrake my iPhone 3G and each time I’ve broken it I loose mobile service. In setting it doesn’t even have a tab for it. I’ve done it twice with General settings and once in Expert mode. I’ve been able to restore it each time to standard firmware.

    Anyone have any ideas?


  • Robbie

    ok so i jailbroke my iphone and now i cant call or text anyone

  • kyle butler

    say i have JB 2.2.1 already on my iphone, do i have to restore it and download 3.0 before all of this?

  • Daveh760

    Macan and Robbie I feel what your saying about losing your mobile service. I’ve asked that same question on acouple of forums and no one seems to have the answer. Please let me know if U figure the JB out! I might try redsnow next but I am not to fond of using it. Any suggestions on that anyone?

  • Kristen

    I also get 1600… and when i restart my phone, i still see the apple icon instead of the pineapple..

  • Tom

    Thanks a lot for the tutorial, once again i am free.

  • titty

    7. You will now have 3 checkboxes. Make sure only “enable baseband update” is checked. You will also need to increase the root partition size. Usually setting the root partition around 700MB is enough. Click next to continue.

    this corrects the no signal error.

  • tommy

    Thanks for the tutorial. I wasn’t patient in the final step and unplugged before it fully rebooted. Now I’m stuck with the PWNApple logo. It just seems to reset itself every five minutes or so. Am I bricked? It doesn’t connect to any computers anymore as well. help please?!

  • Macan

    Thank you Titty

    I should have read the instructions properly.

  • Michael

    I have tried this with pwnage tool and redsnow…I have tried on a pc and a mac, I have reinstalled itunes on both and I always get error message 1604, when I try and install with the normal package I do not get this message…so is there anyway to install the custop 3.0 and not get error message 1604?

  • Brad

    Why does pwnage tool keep saying I have the wrong firmware bundle?

    • Jeff

      Did anyone answer this question, I have the same problem?

  • ruinedcanvas

    Hey all,

    To everyone who has jailbroken and was unable to make/receive calls, I had the same problem first go around. I tried it a second time and found my error: pay attention to step 7! Make sure you un-check “Activate Phone” and everything should be good to go – at least that seemed to solve my problem.

    • Rajapayu

      I tried 7 times to jailbreak,restore,sync,and after searching through some 200 or so posts,yours is finally the one that did it!!!!!!!!!!!

  • kc

    it works great on my iphone 3G! thx!

  • Jared

    Yeah, paying attention to step seven in manual mode rather than easy mode fixed it. Can now make calls however after trying to restore to factory settings doesn’t seem to work. The pwned logo stays but i know am missing cydia. so weird but at least i can make calls again.

  • Rus-T

    On my 2g, I had to setup my custom ipsw for T-mobile just to get my pre-paid at$t sim to work with signal. I have noticed though that 3.0 seems to drain my battery really fast though. Hope its just a bug that will get worked out. I hope this helps someone.

  • Mustafa

    I install iPhone 3G 3.0 firmware from iTunes should I install the firmware again ? or I could install Cydia only.

  • joshjoshjosh

    Howdi – FYI I had the 1600 message, so mv’d the Device whatever dir and so got further, but only so far as to get a 1604 – SO! Some googling suggested a reboot (of macbook) this worked. I’m guessing that I had downloaded a patch but not rebooted prior to attempting pwn (sp?), or similar. REBOOT. Then try again. Peace out. JoshJoshJosh

  • jimboh

    mac osx 10.5.7
    itunes 8.2
    iphone 3g
    firmware 3.0
    jailbroken and unlocked

    I used pwnge tool 3.0 (tip if you’re looking for the ipsw file and you are getting the folders w/ .dmg files etc. all you have to do is change the extension from .zip to .ipsw and accept the warning. I had to download it with windows because my mac was decompressing it automatically after downloading and it needs to be left compressed). I went crazy for days trying to find the dang .ipsw file wondering why every website had that dumb folder full of stuff that didn’t :).

    error 1600 1604

    I ran into this problem a few times and did a number of things. I’m not sure what actually fixed the problem, but i’ll list what I did after running into this problem.

    1. place custom ipsw file on desktop
    2. restart the computer
    3. changed usb ports (using a hub did not work, although I did try it)
    4. once i entered DFU mode I closed out of pwngtool app completely and closed itunes completely. (after you enter DFU mode with the help of pwngtool, itunes automatically detects the phone in recovery mode, but i closed the warning and itunes)
    5. once it was completely closed I restarted itunes and once the phone was detected I held the “option” key and clicked on restore and selected my custom firmware from my desktop and it worked ;).

    Things that did not work for me.
    1. Using a hub
    2. no need to downgrade to earlier versions of itunes
    3. I also closed the itunes helper using activity moniter i’m not sure if that did anything though. need to cry it didn’t help me 😉

    keep messing with it you’ll get it. hope this helped if not kiss my buttocks and post what worked for you.

  • jimboh

    dang i forgot to mention i used ultrasn0w for unlocking the iphone. you can find a good tutorial at

  • BockHock


    hey man, cheers for your many ideas. Don’t know what did the trick for me, but after getting 1600 a couple of times I copied the Custom-restore-file to my desktop and changed the USB-port. It’s restoring right now.

    Another one for the jailbreakers!

  • bmitnick

    I followed the procedure yesterday and the jailbreak seems to have worked however, I have no service. After reading back through the instructions, I am pretty sure Step 7 is where I went wrong. I left everything checked. My question is what would be the best route for me to take to follow the instructions again….do I need to factory restore it to 3.0 and start over at ground zero?

    Please help!!

    • bmitnick

      So I restored the phone….luckily, I did a backup before attempting the jailbreak procedure so I told it to restore that and everything returned to normal. (pre jailbreak)

      I’m ready to try again but as I think about this….3.1 is gonna drop in less than a month??? I just want to make sure going forward, I understand this….

      Everytime Apple releases an update, I am going to have to restore my phone to factory default before updating and then wait for a new jailbreak procedure to come out in order to re-jailbreak the phone?

  • I succedded (not easely with version 2.2.5
    now for resons unknown even to me, I tried un update to 3.0.
    after having created a folder containing:
    pwage 3.0
    askes manything but

    3. Launch PwnageTool, agree to the warning, and select the “expert mode”.