How to Save iOS 5 SHSH Blobs and Create Custom Firmware to Downgrade iOS 5.x Using iFaith

By , Dec 5, 2011

As we told you yesterday, iFaith — the Windows based tool that allows you to manage SHSH blobs on all devices sans the iPhone 4S — has been updated with the ability to save iOS 5.x blobs, and create custom firmware that you can use to downgrade your iOS 5 device.

It works very similar to RedSn0w’s stitching feature, except the big difference here is that it encompasses Apple’s APTicket and features iOS 5 compatibility.

Up until now it was impossible to downgrade an iOS 5.x device to a previous version of iOS 5. That’s no longer the case, as our video tutorial shows you inside…

As noted, iFaith is a Windows only tool, so until RedSn0w or some other Mac based software is updated, you will need a Windows box to successfully back up your SHSH blobs for iOS 5 and create a signed IPSW that you can use regardless of whether or not Apple is still signing that particular firmware.

TinyUmbrella has been updated to allow you to save your SHSH blobs, but there’s still the question of APTicket, and there’s still no “stitching” or signing solution for Mac users just yet. We’ll go out on the limb and say there will certainly be a full Mac solution soon.

How to Save Your iOS 5 SHSH Blobs

Notes: You must be on a Windows box. You must have an iDevice (not compatible iPhone 4S yet) that has iOS 5+ installed. Run iFaith as administrator for best results. You will need your current Firmware available to create the custom IPSW.

Step 1: Download and run iFaith.

Step 2: Put Your device into DFU Mode.

Step 3: Select “Dump SHSH Blobs” click Proceed, Let’s Go!, select No on the Apple TV 2 prompt, and click Start.

Step 4: iFaith will dump your SHSH Blobs and ask you to save them. Save them on your desktop.

How to Create a Custom Signed IPSW for Future Downgrading

Step 1: Run iFaith.

Step 2: Put Your device into DFU Mode.

Step 3: Select “Build *signed* IPSW w/ Blobs”.

Step 4: Browse for your device’s current firmware. You can also download directly from iFaith, but I recommend using the browse feature.

Step 5: Click Build IPSW.

Step 6: It will Extract the IPSW and place it on your desktop.

Step 7: Click Proceed and Click Start (Your device should already be in DFU mode, this will place it into PwnedDFU mode for custom restore using iTunes).

Step 8: Close iFaith, open iTunes and it should find your device in recovery mode. Hold Shift and click Restore and find your custom firmware. The firmware should be named something like: 0000000000_iFaith_iPhone_4-5.0.1 (9A405)_signed.ipsw.

In this example I created a custom 5.0.1 IPSW file. Since Apple is still signing this firmware, I won’t be able to verify my downgrade until iOS 5.1 is released, and Apple stops signing 5.0.1. Until then, I recommend keeping your custom firmware in a safe place for future pain-proof restores.

If you’re on iOS 5.0, you can test out your downgrade capabilities now since iOS 5.0 is no longer being signed. Just make sure that you select the custom firmware when you do your restore.

Again, this will NOT work on an iPhone 4S since, like the iPad 2, the 4S isn’t limera1n susceptible.

Have you tried saving your iOS 5 blobs, creating custom firmware, upgrading, and downgrading? If so, let us know how it worked for you in the comments below!

  • Share:
  • Follow:
  • http://twitter.com/drgfrt Fırat Çiftçi

    Thanks iDB, thanks iFaith, thanks Windows 7…. :)

  • Anonymous

    So I’m assuming you still can’t downgrade to iOS 4.3.5 and below?

    • http://www.youtube.com/myjailbreakmovies/ Jeff Benjamin

      Yes, if you have your 4.3.5 SHSH blobs you can. Use Tiny Umbrella

      • Anonymous

        I have my blobs from 4.3.3 to 4.2.1 according to Cydia.

        However, whn my iPod got screwed up on 4.3.3, and I was trying to restore back to it (I was in pwned and regular DFU mode by the way), TinyUmbrella, nor iFaith, were able to retrieve my SHSH. I’ll try to get them later today, but I’m not getting my hopes up.

        I also found out that the reason for not being able to downgrade to 4.3.3 was because of the fact iTunes, nor other programs liked my blobs, and sent the device into a DFU loop.

      • http://twitter.com/choukrallajouni choukralla jouni

        yes u can downgrade to 4.3.5 but the baseband didnt change still 4.11.8

      • http://twitter.com/choukrallajouni choukralla jouni

        can i downgrade baseband 4.11.8 to 4.10 with ifaith coz i upgrade to 5.0.1 is lock now but i have 4.3.5 shsh save can i downgrade the baseband

      • http://twitter.com/oneBurge Burge

        No ..

  • Anonymous

    will this program work if i use VMware on mac? and jb my iphone 4 using redsn0w mac?

    • Anonymous

      It should if you can transfer the blobs from a virtual machine to your Mac.

      • Anonymous

        the problem is that ifaith doesnt detect my iphone in DFU even though itunes in VMWare detects it…no matter what i do ifaith will not put phone in DFU method….does it matter if i used mac to jb it? if so does that mean i cant use ifaith?

      • Allie Rankin

        If I’m not mistaken, iFaith only works on the Windows platform.

      • http://twitter.com/AdamLeithP Adam Pietrantonio

        Same here, I’m using Vmware 4 with windows7 on my mac. I have put it into DFU mode then tried it, and still nothing… Windows7 recognizes the iphone is in DFU mode, but iFaith just says “failed to enter DFU”…

        Please create a MacOSX version of iFaith.

    • https://1id.com/=christopher Guest

      Problems I had with VMWare, is that the host sometimes grabs your device USB connection before the guest does, which can interfere with the restore process (eg: it sits there forever, and never ends…)

  • http://twitter.com/BouchardAnthony Anthony Bouchard

    Very helpful; thank you, Jeff!

  • http://twitter.com/OriDahan Ori Dahan

    Can I save iOS 5 blobs if I’m on iOS 4.3.3?

    • Paul Maniscalchi

      no this method will only dump the blob of the firmware you are currently on

    • http://twitter.com/oneBurge Burge

      Use tinyumbrelle for that…

      • http://twitter.com/OriDahan Ori Dahan

        But tinyumbrella does not save the AP ticket. Will i be able to upgrade to iOS 5.0?

  • http://twitter.com/ice2dragonkiss visar abdulai

    Wow thnx you made my day with this

  • Luan Nguyen

    iFaith doesn’t detect my phone in DFU mode
    iPhone 3GS running 5.01

  • http://twitter.com/choukrallajouni choukralla jouni

    can i downgrade baseband 4.11.8 to 4.10 with ifaith

    • http://twitter.com/choukrallajouni choukralla jouni

      can i downgrade baseband 4.11.8 to 4.10 with ifaith if 4.3.5 save ?

      • Anonymous

        No bro.

  • Anonymous

    I upgraded my iPhone 4 from 4.3.3 directly to 5.0.1 (while preserving my old bb using sn0wbreeze). Is it possible to use this tool to downgrade to 5.0.0?

  • http://twitter.com/stoyanovvitalii vitaly

    It work`s great!!! Thank you so much))))

  • http://twitter.com/jlr2112 Jose Luis

    Sorry, I don’t see the utility on this. I mean, I have a locked iphone 4 with iOs 5, can I downgrade it and and unlock the phone with this?.
    Note: I have SHSH blobs of 4.3.5 but not from 4.3.4 or 4.3.3

  • http://twitter.com/stoyanovvitalii vitaly

    but i tried it before you post this tutorial))) because H1Siri cracked my phone)) And thanks for icloud)))

  • http://twitter.com/stoyanovvitalii vitaly

    try to run ifaith as administrator and with XP compatibilities

  • http://www.facebook.com/asrap Asrap Js

    i never try to downgrade before, so i have a question here, will i lost the jailbreak if i downgrade? will it update my baseband? should i choose my custom-snowbreeze ipsw during ‘iFaith build signed ipsw’? sorry for this dummy question since i scared to try

  • Anonymous

    Thanks Jeff, very nice; but you should remind some of your readers, that you better have a good backup/restore fuction of all your Cydia apps/tweaks because you are going to lose them all.

  • http://twitter.com/stoyanovvitalii vitaly

    no. this tool only can save SHSH from currently installed firmware

  • Anonymous

    So this doesnt work with iphone 4s and ipad 2?

  • http://www.facebook.com/profile.php?id=100002032084929 Julian Poy

    Hey, my device is giving me:

    [NOTICE] This iDevice has the 24kpwn untether applied!
    Since the 24kpwn untether is applied to your iDevice,
    no SHSH blobs are on your iDevice. As long as you
    restore to custom firmware, no SHSH blobs are needed.

    Anyone else getting this?
    I am on a 3GS old bootrom jailbroken with redsnow untethered 16GB 5.0.1

    • http://twitter.com/x_rus_x Vitaliy Anonymous

      Just as explained. You don’t need to downgrade your iPhone. It will always be jailbreakable.

      • http://www.facebook.com/profile.php?id=100002032084929 Julian Poy

        Cool, thanks! That makes life a lot easier.

    • pUnEeT JaSwAL

      What firmware you are on ?

  • Anonymous

    done. iP4 iOS 5.0.1

  • http://iph0ne4s.blogspot.com/ iPhone 4S

    Thanks, for article! For how to save iOS 5 SHSH.

  • Massimo Viriglio

    Hi,
    I’m on iPhone 4 4.3.3 untethered if I upgrade to iOS 5.0.1 (the last beacouse I don’t have SHSH for 5.0) then I can downgrade to iOS 5.0? thanx

    • http://www.facebook.com/people/Brandon-Maikits/1831072598 Brandon Maikits

      no you need your apticket for ios5 to downgrade

  • http://twitter.com/Mallouk_ Mallouk Malek

    what if i want to create a custom firmware to use it for a later restore and not just directly restore?

  • Anonymous

    Why would I restore to the custom IPSW for iOS 5.0.1 right now and if I have 5.0, why would I restore to the custom 5.0 IPSW?

  • http://twitter.com/Gam3rzDude alex woods

    I just upgraded my itouch 4g from 5.0 to 5.0.1 and downgraded back to 5.0 ill have a vid up soon

    • Flip Pepot

      dude how to downgrade it back? do i need to use iFaith again or just go straight using itunes? i also saved and did the shsh blobs using this new iFaith and now im confuse on how to downgrade it back to ios 5.0…. youd dont mind telling us what to do, or im just being dumb about it… Thanks =)

  • Daniel Marnie

    Where does iFaith download and save the .ipsw to? I can’t find it anywhere, and hope that it doesn’t just download and then delete…

    • Allie Rankin

      Desktop

  • http://www.facebook.com/profile.php?id=652051463 Sayed O. Niloy

    so, anyone want to upload their 5.0 shsh blobs? or would that not work?

    • Anonymous

      Shsh blobs are unique for each idevice :)

  • Anonymous

    Ok, since no one seems to care or no one talks about it, I might as well give it a try. I was just wondering, WHAT THE HELL IS GOING ON WITH THE BB4.11.08? It seems to me as if only a few people actually realize the issue, when there’s actually hundreds of thousands of people like me stuck on this infamous baseband. I KNOW I was the stupid one to upgrade to iOS 5 without BB preservation mode, but I certainly wouldn’t mind a little help from devs. Worst thing of all is that there HASN’T BEEN A WORD ABOUT IT. Not even a “You will never unlock your iPhone, f*** off”. Jesus, if only they put a little more effort into it, like they do with the untethered JB (which I now find it completely unnecessary, since people have been tethered for two months already). PLEASE GOD GIVE US HOPE

    • Anonymous

      I’m In The Same Boat As You And I Wished There Was A Solution… If Only Somebody Would Take their Time Out To Help Us…

      • bryan templin

        Yes, please someone throw us a bone. I upgraded to ios 5 and now am stuck with 4.11.08.

  • http://twitter.com/Dongiuj Giulio

    first time i’ve ever tried this kind of stuff and it worked a charm! Nice one!

    • Flip Pepot

      dude how to downgrade it back? do i need to use iFaith again or just go straight using itunes? i also saved and did the shsh blobs using this new iFaith and now im confuse on how to downgrade it back to ios 5.0…. i tried to downgrade but im getting an error 1604. hope you dont mind telling us what to do, or im just being dumb about it… Thanks =)

  • Anonymous

    If my iphone 4 GSM is on 4.3.3 with the blobs saved, can I upgrade to 5.0.1 then create a custom 5.0 ipsw using the 5.0.1 blobs and restore to 5.0?

  • Flip Pepot

    IDB can you pls make a tutorial on how to downgrade from ios 5.0.1 back to ios 5.0 using the shsh blobs that we saved using this new iFaith v1.4 as im quite confuse on how to do it and im always getting an error 1604 when ever im trying to downgrade it…

    thanks guys! =)

  • Flip Pepot

    i finally did it… ive restored back to iOS 5.0 using iFaith v1.4 , thanks for the tutorial Jeff Benjamin of iDB all i did was to keep on doing DFU Mode again and again till iReb pops up…

    CHEERS to iH8sn0w and iDB!! =)

  • Anonymous

    So i’m on 4.3.3. Untethered with all my blobs saved. Is it possible to upgrade to 5.0.1 and downgrade to 5.0 or is iFaith really for people who had upgraded to 5.0 and subsequently 5.0.1 but want the opportunity to be able to downgrade when a possible untether is made available. Do you have to have upgraded to 5.0 before apple stopped signing it for this method to be of any real benefit? Thanks.

  • http://twitter.com/iAhMeDz_ Ahmed Safwat

    I don’t have any SHSH Blobs saved, yet, can I downgrade iOS 5 back to iOS 4.2.1?

    • http://twitter.com/mrmberman Marc

      No, no blobs, no downgrade.

  • http://www.facebook.com/profile.php?id=528530805 Billy Katsourakis

    Ok, so I have my 4.3.3 blobs for my ipad 2. I upgraded it to 5.01. Is it impossible to downgrade? I keep receiving error 9.

    • http://www.facebook.com/zarogon Daniel Kurapov

      Can someone tell me. Is it possible create signed IPSW with baseband preserve?

    • Mike Jorgensen

      You can use tinycfw from notcom to downgrade to 4.3 3, if you have shsh blops and its a iPad 2-gsm (3G)

  • http://www.facebook.com/profile.php?id=100000514380051 John Sklikas

    Hey does anyone know if I can use as firmware file the custom firmware that was created by Sn0wbreeze?

  • http://twitter.com/AliLars Ali A

    Will this method of building custom IPSW prevent from updating the baseband?

    • klaus lund

      i get the error 2005 in itunes??????

      • http://twitter.com/dangerxtrem dangerxtrem

        same here, I got the dreadful error 2005… Been trying for over 2 hours trying iReb over and over and resigning my ipsw… However, no success and I also tried on another computer (MAC) and no success either…

  • Anonymous

    I need help from anyone that knows about this:

    My iPhone 4 is completely functional, but I want/need to restore it for irrelevant reasons. It’s on iOS 4.1, baseband 2.10.04 (the one in that FW). I want to simply restore it in an “Erase all content and media” fashion, practically from 4.1 to 4.1, stock of course. I was wondering, as I am neither downgrading nor upgrading, but staying on the same iOS, do I need to have SHSH saved?

    I mean, if I already don’t have 4.1 blobs saved, am I screwed? Or iFaith can help me, even without them?

    Any help is appreciated.

    • Ryan Dack

      Get tiny unbrella to save your SHSH Blobs, then you should be able to download the 4.1 firmware for your device, and use TinyUmbrella for the restore. Just google a downgrade guide, its essentially the same thing, only you won’t need custom firmware… hopefully.

  • http://www.facebook.com/Dw1981 David Williams

    So… I’m a lil slow to the game…but my iPhone 4 is on the iOS 5.0.1 firmware. How exactly do I use iFaith to downgrade back to 5.0?

    • Ryan Dack

      You don’t.

  • Anonymous

    OK CRAZY IDEA I HAD! Could anyone with an iPhone 4 16GB send me their iOS 4.3.3 blobs by mail?

    If you have a 4.3.3 iPhone 4, save your blobs with iFaith and send them to me PLEASE. Thanks

  • http://www.facebook.com/people/Marcio-Amaral-Campos/100001756552407 Marcio Amaral Campos

    Creating a custom iphone 4g with im, I can restore another iPhone 4 using the same firmware? Or it only works for the same iphone 4 ?

    • http://twitter.com/danielsolfa Daniel Solfa

      i think you just can restore the same iphone you used to create de custom firmware,as long as it uses the shsh which is unique for each iPhone!….i don´t know if this is right,but i think so!

      • http://www.facebook.com/profile.php?id=694156555 Timo Bouerdick

        right.

  • http://twitter.com/danielsolfa Daniel Solfa

    if i downgrade to iOS5 with the Firmware that Ifaith created,will it update my baseband??

  • http://twitter.com/immu99 immu

    currently i am on 5.0.1 , i want to downgrade to 5.0 , is this possible to downgrade ? when i was on 5.0 i jailbreaked my iphone4 , how can i get the SHSH blobs of 5.0 ??????????

  • omakad

    Jeff, I see a lot of people are asking about this in the comments but no one seems to know the answer to this question. I’m currently on iOS 5.0 and I have preserved my IP4 baseband to the unlockable 01.59.00 via Snowbreeze preservation mode. I would like to create a downgradable custom firmware using this process but I’m wondering if that will save my old baseband or will it upgrade it to the new one? I don’t want to downgrade one day and than realize I have locked baseband. I have tried using “Snowbreeze created preserved baseband IPSW” but when I try running it in the step 4 I get an error from iFaith that the firmware is invalid. Has anyone tried this? If you save the custom firmware and than restore from it do you get to keep the old baseband or is the new one used? Thank you.

  • Anonymous

    how do you make it show up in cydia or can it not do that?

  • mohammed wasef

    i have iphone 4 on 4.3.3 firmware i used ifaith and saved the shsh and i build the new ipsw , can i upgrade now to ios 5.0.1 and downgrade to 4.3.3 again ?

    • http://www.facebook.com/profile.php?id=694156555 Timo Bouerdick

      yes, you can. via the pwnd function of iFaith.

  • http://www.facebook.com/profile.php?id=694156555 Timo Bouerdick

    iFaith does not recon the DFU Mode… redsn0w and itunes do so… I upgraded to 5.0.1 (iphone 4) from 4.3.3, with 4.3.3 it wasn´t a prob, I could dump the shsh and make a custom ipsw of 4.3.3 – but now I tried a million times but it just wont recon the DFU mode…anyone else with this problem? any advice?

    (btw I also tried xp-compatibility and admin rights)

  • http://twitter.com/BulatovicZeljko Zeljko Bulatovic

    Here is my expirience:

    I have iPhone 4, with 4.2.1 firmware. I never installed iOS 5, or iOS 5.0.1.

    1. I downloaded TinyUmbrella
    2. Unchecked “Download from Cydia” or whatever is called that option
    3. Downloaded all shsh’s for my phone (from 4.2.1. version up to 5.1b1, including shsh for 5.0.1)
    4. Opened iFaith 1.4.1
    5. Clicked “Build signed ipsw”
    6. Choosed shsh for iOS 5.0.1
    7. Choosed firmware for 5.0.1
    8. Clicked Build
    ——
    Error: Pops up Error message x with “Oversized APTicket!”

    Clicked OK. Custom firmware is built, but i am wondering why is this message poped up?
    Thanks.

  • Anonymous

    just wondering. presently my iphone 4 is on ios 5.01. created signed custom firmware 5.0.1 for future restoration. restored my iphone back to 4.3.3. can i upgrade back again to 5.0.1 with the signed custom firmware without upgrading the baseband even when apple stop signing for it?

  • Siebe Diels

    Is it possible to build a custom signed IPSW without having to restore (using itunes) and loose all my apps/cydia-tweaks/jailbreak? I don’t need to restore to a custom firmware right now (I’m running a tethered ios 5.0.1), but I’d like to be able to downgrade in the future. Can I exit ‘pwned DFU-mode’ without having to restore?
    Thanks!

    • http://www.facebook.com/profile.php?id=1009073663 Erich Rivera

      Same here I want to create a custom IPSW. Been reading guides for the past few minutes but they all point out to restore. I don’t want to rejailbreak my ipod again.
      (Ipod touch 4g 5.0.1 untethered)

  • http://www.facebook.com/profile.php?id=100001507006978 Rudraksh Shukla

    how i downgrade apple iphone 4 baseband 4.11.08?????