This step by step guide/tutorial will show you how to update your iPhone 4 to iOS 4.1 while preserving the baseband. Because we will not update the baseband, you will still be able to run the latest iOS version available, you will be able to jailbreak using LimeRa1n, and you will be able to unlock your iPhone using UltraSn0w.

This method works for both Windows and Mac. It is pretty simple but it does require you to read the steps carefully. As usual when hacking your iPhone, you are proceeding at your own risks. This being said, this is how to upgrade to iOS 4.1 without upgrading the baseband…

Note: This is for iPhone 4 only.

Step 1: Download TinyUmbrella from here. Download iOS 4.1 for your iPhone 4 here.

Step 2: Make sure you are running the latest version of iTunes. If not, update iTunes, then close it.

Step 3: Launch TinyUmbrella and plug your iPhone in. If you are on Windows, make sure to run TinyUmbrella as Administrator. If you haven’t already done so, make sure to save your iPhone 4.1 SHSH blobs.

Step 4: Click “Start TSS Server”. It will kill iTunes. You are now ready for the restore process.

Step 5: Launch iTunes. If you are on Mac, hit the Alt/Option key while clicking Restore. If you’re on Windows, hit the Shift key while clicking Restore. A window will open from where you can navigate to the iOS 4.1 firmware you downloaded in step 1. Select it.

Step 6: iTunes will tell you it’s ready to erase and restore your iPhone. Click ok.

Step 7: At some point, you should get the error 1004. Don’t panic, this is actually a good sign. Simply go back to TinyUmbrella and click Kick Device Out of Recovery.

You should now be on iOS 4.1 but the good thing is you haven’t updated your baseband. At this point, you should be able to jailbreak using LimeRa1n and even unlock using UltraSn0w.

  • I’m not sure I’d really want to use Limera1n, after what Geohot did. He was our hero back then, but betrayed us by stealing code from the Cronic Dev Team.

    • Use it !!!!!! It works perfectly but fine if not ur juz missing out

      • I’m not really in the hurry to upgrade to 4.1 yet. Although, I might soon.

  • Max

    for 3gs too?

    • justabrake

      I just used limera1n on a 3Gs with 4.0.2 firmware and the baseband was 05.13.04 and i’m jailbroken and unlocked if you guys need proof let me know what you need and I’ll see if I could show you.

      • Robert

        I dont understand the significance here? Im not being an ass i just dot understand. I used limera1n on a 3gs and am jb too. It worked flawlessly.

        How did you unlock it? My baseband is 5.14.02

      • Liusi

        Hi there!
        I have 3GS with 4.0.2 FW and basaband 05.13.04 too.The phone was never been JB before. I need to jailbreak and unlock it. You said you used limera1n. What you used to unlock it?
        Any suggestions I should have in mind when I start the JB and Unlocking?
        I will appreciate your help.

  • Hey Sebastien, does this work on an iPhone 3G?

    • I think it does, because the 3G doesn’t upgrade it’s baseband anymore, it’s possible for any firmware towards that.

      • Yes it does, I got a 3G on 4.1 and the baseband got upped to 5.14.02. Stuck till a new tool is released

  • Eric

    He did not steal code from the Chronic Dev team. COMEX gave him the userland exploit to that was used in to make the Limera1n exploit untethered. He just used the exploit before Comex wanted him to, please know what your talking about before you post things. GEOHOT did us all favor by not burning 2 bootrom exploits so Geohot your the man, but i dont agree with your dramatic ways.

    And is this tutorial for iphone 4 only?

    • Well, in my terms it’s kinda called stealing. Geohot wasn’t supposed to release the exploit into his new jailbreak. Anyways, lets for get about it, and jailbreak if you wish. I’m going to wait for a later release.

      • Robert

        In their world, i believe the most important thing ultimately (after all the dust settles) is to give credit where it is due. George did give credit to comex on his web page and in the app.

  • Eric

    nevermind this is for iphone 4 only..

  • Max

    All the guides in the net is for upgrade “IPHONE 4” whitout update baseband, this the first for all models?mmmm

    • Just to be precise (sorry, if this little detail bothers you), iOS4 doesn’t support the iPhone first generation. But the 3G version might just be a little slow.

  • It should work for every device. Ok, it only works with the iPhone 4. Proceed at your own risks.

    • Shrike1978

      It only works for iPhone 4. iPhone 4 uses separate SHSH’s on the baseband which can allow for possible downgrade. This option uses that to prevent the baseband from being signed. This feature does not exist on any other hardware so this option will not work on any other hardware.

  • Shrike1978

    You might want to point out that this *only works for the iPhone 4 and nothing else*

    Also, to Jacky, he didn’t steal anything from Chronic. This uses a completely different exploit than Chronic intended to use. He did take some code given to him by Comex (not Chronic) and release it without explicit permission, but Comex later gave the release his blessing. Geohot is an egotistical dick, but he did have a very good reason for release when he did. He’s had this exploit for months, but after he saw that Chronic Dev had a different one, he rushed his because there is very, very strong evidence that Apple has found the limera1n exploit and will fix it in the next hardware revision. There is no evidence that they know about SHAtter yet, therefore, burning SHAtter now would destroy any chance at a rapid iPhone 5 jailbreak next year. He certainly released limera1n before it was ready for primetime, but he wanted to force Chronic to keep SHAtter under wraps to have the chance of helping the most people in the future. has more details via @veeence.

    • EJ ROCK

      Not really, Chronic Dev team- if succcedded and almost did would be awesome. They would be number 1. on the news, etc. Geohot thought if he just said he quit months ago and then out of nowhere stole credit and got the prime news on. He is trying to stay popular. He is extremely talented but also verry selfish and greedy. Chronic Dev Team was not really in the prime news in the iOS history. When it was their time to show off their great stuff, Geohot stole it. That’s it, it’s not a favor it’s just trying to stay number 1.

      • Shrike1978

        I’m not arguing that Geohot isn’t an egotistical asshole, but he’s never let his interests get in the way of the good of the community, and he’s never asked for any donations until results were produced. Everyone involved has said that he didn’t steal Chronic’s exploit, including the Chronic Dev Team members You can argue that he stole the untether from Comex, but Comex is unconnected with Chronic, and the untether had nothing at all to do with the core exploit. SHAtter exploit still exists and is perfectly usable for a future jailbreak. Geohot’s has been elimnated from the softcode in the latest versions of iBoot. That’s a clear indication that Apple already knows about it and it will be gone from the next hardware revision. If SHAtter isn’t discovered by Apple before then, it will still be usable, and there will be a week zero exploit on the next hardware. You can argue about his methods all you want, but he may have just saved a very valuable exploit for a future where it’s needed.

    • Now, this is the answer I was looking for. Thank You 🙂

  • Tim

    will that work on iOS 4.0.1 to 4.1, or you have to be 4.0.2?

  • 4.0.1 to 4.1 works too

  • Oscar

    What happens if you run this on 3GS jail-broken with old boot ROM? Currently on 4.0.1, save SHH for 4.0 and 4.1. Base band: 05.13.04.
    Thanks so much for any input.
    Really want to updated to 4.1 and keep by base-band intact so I don’t loos my Unlock.

    • James

      If you run this on a 3GS your baseband will be updated. The developer of tiny umbrella himself has stated numerous times that the baseband update protection is ‘only’ for the iphone 4.

      • Oscar

        Thanks so much for the prompt reply. Will stay away for the moment.

    • Overseer

      Use ih8sn0w. I used it to update my 3GS from 4.0.1 to 4.1 and preserved my 05.13.04 baseband for unlock with ultrasn0w. There’s a guide on this site.

      • Oscar

        Great. I will give it a try.

      • Oscar

        Hello, been lookig for a while and can not find it. Do you just happen to have the link? Thanks so much.

      • Burge

        It’s called SNOWBREEZE not ih8snow ….ih8snow is the maker of it….
        @Overseer you need to learn what your talking about befor you give out advice

      • sn0wbreeze will only work on 3GS old bootrom

  • 2meu

    Too late. I followed the instructions to update to 4.1 with a 3G and now I’m jailbroken but I can’t unlock it because the baseband was updated. I hope geohot’s unlocking tool is true and is release soon.

  • Gary

    I’ll wait for sn0wbreeze so I won’t have to restore my cydia apps, etc. after re-jailbreaking.

  • iphoneswiss

    Is a hacktivation possible with limera1n?

    • iphoneswiss

      ok it’s not possible but the rest worked really fine 😀 thanks Seb

  • Ahmad

    Bloody hell…..this didn’t work. I followed the instructions to the letter and yet wrecked my phone. It’s now on baseband 5.14 and locked!!!!!!!

  • KP

    Thanks for the guide Sebastien. I was able to update my iPhone 4 to 4.1 and retain my 01. 59.00 baseband. Now I finally get to use 4.1 HDR Camera mode 😀

  • Andrew

    I’m hoping someone can answer this question. Im currently on 3.1.2 on a 3GS. I’ve unlocked by phone by contacting my carrier and i can use sim cards from other carriers. I then have only ran blackrain to jailbreak my phone. If i upgrade my phone to 4.1 and it will upgrade my baseband, will it cause my phone to be locked again?

    • James

      If you have an official unlock via the carrier you should be fine. Only those using a software unlock need to be careful of this.

  • Meknessi14

    Mon shsh ne s affiche plus sur cydia c normal docteur

  • raymond

    worked exactly like it said but im stuck in recovery mode anyone know how to get out of it

    • KP

      after kicking it out of recovery mode with TinyUmbrella. You will need to use iTunes to activate

    • James

      close tinyumbrella and restart it and click kick out of recovery. Its a bug the author knows anout in 4.1.6

  • Meeee

    Hope to get a reply on this question, I’m on 4.0.2 out of the box, never jailbroken, saved by SHSH in tiny umbrella 1 month ago. Is my understanding correct that if i upgrade to 4.1 i will preserve the baseband 1.59.00 AND jb using limera1n AND now unlock using ultrasn0w?

    • Monther

      If you upgrade it to 4.1 by following this method, yes you can jailbreak it then unlock it.
      Or if you dont want to use limera1n, wait for snowbreeze “ih8sn0w is working on a new version that will support ip4” it will allow you to restore to a custome firmware without upgrading your bb.

  • freddy

    worked great!

  • Nacho

    I already download everything, I’m ready to start… but…
    Do I have to edit host file in windows, before doing this?

    • Nacho

      with this?

      • Burge


  • Meeee

    I already updated to 4.1 however i cannot log in to itunes because i do not have the original AT&T sim wiht me. is there a way to activate without it?? help pls…..

    • Andres

      Find any AT&T sim ! And connect ur phone to iTunes

      • Andres

        This sim does no have to be activate just look for one from a friend !

      • Meeee

        This iphone came from the US and it’s now here with me in Singapore so i do not have a way to find an AT&T sim. I found a deactivated sim and it still says insert valid SIM. How do i proceed?

  • luis

    @Sebastien man, i lost like 3 hours because of that error, i only needed to upgrade, since you didn’t have this guide i had to figure it out like with the craziest ways around, i tried mac/windows/downloading it several times, wow everything. luckily, now people have this guide.

    PD: be sure to tag 1004. 100% helpfull

  • Yo sebas , greenposi0n is out ,,,,. Givenme some !!!

  • So now you can download greenposi0n , so who screwed us now, geohot or the dev team ??? 2 exploits bye bye !!!

    • SK

      Apparently, it isn’t 2 exploits….they’ve built on the Geohot exploit & excluded SHAtter for 4.2. So relax. It also expands support to 3Gs & 3G.

    • Burge

      @arampe do you know if GP can jailbreak a iPod 2g mc modle ? My son needs this so much .. He doesn’t won’t a tertheard break that redsnow gives him (on 4.1)

      • Not sure Burge , my daughter lost her iPod 2g. Do u have an iPad ?

    • excellent pic of ur profile….! can u email it to me?

  • Impact

    I followed the steps exactly! But i use a proxy server and it didnt work. Will there be a unlock soon?

    • if your going through a proxy network, it’s best you should use the tor browser. it’s available for the iphone, mac, windows, and other platforms.

  • raymond

    Just to reiterate, if I want to upgrade my 3GS to 4.1 and preserve my baseband, I would wait for sn0wbreeze, because tinyumbrella is only for iPhone 4?

  • iphone 3g

    PwnageTool for iOS 4.1 coming this Sunday – iPhone 3G On BB: 05:14:02

  • trav

    Burge is a dick! take you’re own advice and “learn what you’re talking about.”

  • Mr560

    If you’re trying to jailbreak a 2G ipod Touch, check out this forum link:

    Look for Pedetricians post. I followed it almost exactly (used limera1n after the 1st failed attempted then it when smoothly) and was able to downgrade the ipod to 4.0 and use…unfortunately, using redsn0w or sn0wbreeze to jailbreak an ios 4.1 ipod touch 2G (MC model) results in a tethered jailbreak. 🙁

    Choose wisely your method. Hope this helps.

    P.S: I’m still looking for a way to upgrade to ios 4.1 while preserving the baseband from 4.0.2…I found it on awhile ago but am having trouble finding it again. Shoulda bookmarked it.

  • daffy

    i did this with 3gs, 4.01 to 4.1 and updated my baseband… not that it matters tho im AT&T i just bought no contrract and using it under family plan.. with NO DATA plan added… so its only 9$ under family plan.. hehe

  • Oscar

    Mr MBerman and Overseer mention that is possible to update a 3GS Old boot ROM with 4.0 to 4.1 using sn0wbreeze.
    I do have a 3Gs, with old boot rom, jailbroken and unlocked on iOS 4.0.1, base band: 05.13.04 with saved SSHs in cydia. I do want to update to 4.1 and keep my unlock.

    Can someone confirm to this and provide more information. I would really appreciated.

  • Nacho

    Seb, IDB Team… time to say Thanks!!!
    I could finally Jbreak and unlock my Iphone 4 from 4.0.2 out of the box to 4.1
    Following yours step by step, I preserved my baseband and unlock without inconvenience (redsn0w).

    I didn’t use a AT&T sim, just put my Argentinian sim and “Buala”, “You Iphone is now Activated”

    You guys are the best! Seriously!
    Thanks a lot!!!

    Just 1 Question: I used LimeRa1n to jailbreak, and it works. Today I saw you recommend GreenPois0n. Should I change? What is your advice?

    • Hey Nacho,

      Thank you for the comment. I’m glad you got all your stuff going like you wanted.

      If LimeRa1n is working fine for you, there is absolutely no reason to jailbreak again using GreenPois0n.



    what about iphone 3Gs with 3.1.2 firmware and lock(at&t)

  • cjmcd9

    I followed the steps on my Windows PC to try to upgrade my iphone4 on 4.0.2 to 4.1 however when it comes time to select the file that I have downloaded from your link provided above from where I saved it on my desktop, all of the folder options that show are blank when clicking to conclusion. Which folder are you even supposed to select?

  • Therooke

    sooooo much info. I have a 3gs os 3.1 Jailbroke. i dont care about the unlock. but i want to upgrade to 4.1 and re-jail break. do i need to save any old info off my phone, or can i just upgrade firware and re break? i wish id stayed in the phone hack loops….

  • Mark

    Fantastic guide, very clearly written and well explained.

  • rahul gupta

    hey i have and i phone 4 with 4.2.1 and bb 3.10.01… will i be able this to use it to downgrade it to 4.1 and the unlock.. i am desperate for an unlock …. please help me……

  • adil

    I am not able to download tinyumberalla …. please post the link thnx