Having discussed the possibility of an upcoming jailbreak for iOS 9.3.5 on this month’s episode of Let’s Talk Jailbreak, it now seems the rumours were true, and that a tool for legacy devices really was in the works.

Dubbed Phœnix, after the mythical bird which rises from its ashes to live again, the tool is sure to resurrect many legacy devices which were gathering dust, and perhaps rekindle some interest within the jailbreaking community to boot.

The jailbreak, which is semi-untethered, and for all 32-bit devices on iOS 9.3.5 only, is the work of Siguza and tihmstar, both well-known iOS hackers. In addition, they credit Luca Todesco, Max Bazaliy, and jk9357 for providing additional input and UI elements.

Internally, the jailbreak app seems to be quite similar to the iOS 9.1-9.3.4. Home Depot jailbreak, which would make sense as it’s the only other 32-bit jailbreak of recent times, covers adjacent firmwares, and is the work of the aforementioned jk9357. Of course, the jailbreak payload itself may be quite different, and the exploit is original work. Tihmstar has indicated that the code will not be open-sourced, though some vague details as to whose work is whose are alluded to in a tweet of his on the topic.

As with most jailbreaks of late, this too is a semi-untethered affair, requiring re-running of the app after each boot. There was a hint of an untether at an earlier stage of development, though this doesn’t seem to have come off. Unfortunately, Cydia Extender and its derivatives don’t work on iOS 9, so the app will have to be side-loaded to the device each week, unless you have an Apple developer account. Though these considerations make it a little less user-friendly, it’s certainly better than nothing, and may be irrelevant to some users. Due to the tool’s inclusion of tfp0, it will allow downgrading to other firmwares (if you have blobs saved), and so the Phœnix jailbreak may serve mainly as a stepping stone for legacy device owners to return to older firmwares of their choosing.

With iOS 9.3.5 likely to be the final firmware released for most 32-bit devices, the importance of this release is particularly salient. Providing an iOS 9.3.6 doesn’t patch the tool, legacy devices may have found in Phœnix a permanent end-of-life jailbreak, which they can always re-use in the case of having to restore their devices. No more forced upgrades to unjailbroken firmwares, we hope.

We’ll be trying out the tool soon, and posting a how-to guide if there’s enough interest too. For now, the creators have said that the tool is pretty stable, so give it a go if you please, or hang back and wait for some success stories if you’re cautious. The tool can be downloaded from the official Phœnix jailbreak website, and side-loaded with Cydia Impactor as usual.

Have you given Phœnix a try yet? Let us know your experiences in the comments section!

  • japplemusik

    Finally! Please post a how-to guide for amateurs like me. 🙂

  • japplemusik

    After I enter my Apple ID and password (step 5 on the Phoenix website), I get this error message. https://uploads.disquscdn.com/images/b89221c3714d22393f32ee4d3a8ccd1d359c6cd5ebe142b78757d2b783858fb1.png

    • David

      Pretty sure last time I got that message all I had to do was use cydia impactor and delete profiles associated with my account and that fixed it

      • japplemusik

        Well first, I am using Cydia impactor so I’m not sure what you mean… second, what do you mean by “delete profiles associated with my account”?

      • David

        Open up cydia impactor, click on xcode, and revoke certificates….

      • japplemusik

        Hmmmm, I’m still getting the error

      • David

        Have you at one time or another signed up as a developer maybe? I tried to post a link to Apple’s page but I guess you can’t post links. Google ” Manage app-specific passwords” click on the link for Apples website and go down to “Manage app-specific passwords” and revoke any individual passwords

      • japplemusik

        That got me somewhere! Now I have a new problem. I can now click start and then it starts to load a bunch of things in the Cydia Impactor window. But, now I get this message https://uploads.disquscdn.com/images/0af5985ca628d8ee285b26b12b10cb3790d51426b9dbe491594c3ad386d66dc1.png

      • David

        Have you trusted your pc thru iTunes

      • japplemusik

        Not sure what you mean

      • David

        When u first connect your phone/ipad to your pc you have to ‘trust’ that pc by clicking on a ‘trust’ popup on your phone/ipad. If you have iTunes installed (which I hope you do since impactor won’t work without it) you should be able to access your device if you have trusted that computer. I googled that error and from what I’ve read the main cause for that error is Two Step Verification for signing in. Workaround would be to just create another apple id without Two Step Verification
        just for sideloading apps with impactor.

      • japplemusik

        Still not working. Ugh 🙁

      • Abhinav Chaudhary

        How about update your device to latest firmware and then try?

      • prodromos

        you must disable 2 step verification from apple site

      • japplemusik

        Still not working

    • Abhinav Chaudhary

      This happens when you have 2 factor authentication enabled, you need a custom password to install the app, you can get on from the site mentioned, under the section App Specific Password.

    • try using another acc

  • Ronny Llerena

    I thought ios 10.3.3 was as far as 32-bit devices were going to go? I have an iphone 5 on 10.3.2.

    • Digitalfeind

      iPhone 5 is the last to get that far. That’s why it stats most 32bit devices.

      • Arjan Vlek

        With a bit of luck a similar jailbreak comes to the iPhone 5 and iPad 4 once they are no longer updated by apple (10.3.4 might still come, idk)

  • Abhinav Chaudhary

    Tried to jailbreak my iPad 3, 4 times now, no luck.

    Oh it worked on 5th time 😛

  • Adrian

    iOS 11 about to drop & the JB devs are releasing iOS 9.x JBs?! Lmfao- yup, JBreaking is Dead.

    • Abhinav Chaudhary

      Lol you are so stupid, this jailbreak is for 32 bit legacy devices that we have lying around, this jailbreak gives them a new life. iOS 11 isn’t even compatible with 32 bit devices. Your comment is just so stupid. Btw I am enjoying my Yalu102 jailbreak just fine, jailbreak isn’t dead.

      • waverdr

        Sorry dude, i have to agree with Adrian, jailbreaking is certainly dead. For older legacy 32 bit devices its okay but side-loading weekly and tethered really? It wont be long until there will be no need for jailbreaking as apple start to build the most popular jailbreaking apps into there firmware. Newer and newer devices coming along and not a decent jailbreak in site. The scene is dead dude

      • Abhinav Chaudhary

        Not if you wanna be in the chains of apple, even with most of the features that apple took from jailbreak, btw they took a really long time to do that, jailbroken iOS is still the best mobile operating system on this planet. Even iOS even doesnt have the functionality of Callbar.

      • Adrian

        Who the hell uses 32bit devices still?? lol what a joke… I been jail breaking since iPhoneOS 2.0 & at this point hackers can’t keep up with Apple. I’m running most up to date FW, & zero jailbreaks have been released in over 2 years that support current FW. Apple is winning.

      • Abhinav Chaudhary

        Only if you let them and be a slave to their iOS then keep updating. The stock icons https://uploads.disquscdn.com/images/961cdd583a5a0e757c469df1385b42b787619f31dab6fca6be6d29eee054f55d.png hurt my eyes, they are so ugly.

      • Arjan Vlek

        Which theme are you using?

      • Rob Mincey

        I’ve got an iPad 2 (Not iPad Air 2, but iPad 2) that is perfectly suitable for email, reading books with iBooks, and general web surfing. I have no reason to get rid of this device.

      • Arjan Vlek

        I still use my iPad 4 (on iOS 10.3.2 so this jailbreak is irrelevant) on a daily base and haven’t bought a newer Apple device. As long as it still handles everything I throw at it, I won’t be upgrading to a newer device anytime soon. Also the battery life is still great.

  • Abhinav Chaudhary

    Anyone got success? Cydia is installed but crashes when i open it.

    • Sachka

      Do you require blobs for this?

      • MrTarek

        I want to know too

      • Νίκος Τιτομιχελάκης

        No coolbooter lets you dualboot ios without the need of shsh blobs

      • Joaquim Barbosa

        Downgrading needs blobs, yes. CoolBooter doesn’t need blobs, but is not a true downgrade.

      • Abhinav Chaudhary

        No, just install the latest CoolBooter and install the firmware you want to downgrade to. It’s a dual boot utility.

    • ‘Ariff

      Is the iOS 7 you’ve got through coolbooter jailbroken? I just want to be able to use AirBlue Sharing again

      • Rob Mincey

        The latest beta of CoolBooter asked me if I wanted to jailbreak the secondary OS as it installed it. I chose “yes” and am waiting on it to finish now.

      • Abhinav Chaudhary

        Yeah, you get an option to jailbreak the iOS you are dual booting during the installation process.

    • Aditya

      Hey Abhinav, I’ve got an iPad 3 too, and I’ve got an idea too.
      Its that,
      1)We installed Phoenix using AppleSignatureCertificate, that expires every 7 days
      2) We have the ipa for Phoenix.
      So, once I have my iPad 3 jailbroken, and I install
      {iAppFree/ iApCrazy/ whatever that lets me install ipa’s directly}
      using apps like
      {AppCake/ AppAddict/ iFunBox},
      what if I uninstall the Phoenix app, and reinstall it using this method?
      In this case I don’t need to connect my pad to pc every 7 days to renew the certificate of the app right!
      Do you think it would work?

      • Abhinav Chaudhary

        Nope, this doesn’t work. I already tried this on my phone with Yalu102, I use Extender on my iPhone to auto sign my Yalu102 ipa and I don’t even remember when was the lat time I plugged my phone into a computer to transfer the app.

  • J Reilly

    Cydia missing sources and packages after reset. I’ll what to do. It can’t find them now either.

  • Petrea Andrei

    Any method of downgrading an iPad 2 running 9.3.5 after jailbreaking using Phoenix? No blobs saved…

    • Gil

      Coolbooter, just used it for ipad 2 and it work

    • Joaquim Barbosa

      Not without blobs, sorry. CoolBooter will let you dual-boot, but isn’t a true downgrade. Thanks for reading!

      • Arjan Vlek

        But what if you “downgrade” using CoolBooter and save blobs for that firmware? Or can’t you save SHSH blobs anymore for the firmware which is present on your device?

    • The Forgotten King

      OdysseusOTA should work if you have a mac/linux

    • ropi nsem

      Try odyseusota. You can still go to 8.1.4

  • Chenhan Shao

    https://uploads.disquscdn.com/images/28203781fdc07b6b697fecae02bdd5f4ce237193b1374a26fabe6e0016a2c13e.jpg
    Tried to jailbreak my iPhone 4S. Why does it require a developer ID?

    • Joaquim Barbosa

      It shouldn’t require a paid developer account, but you might have to register your Apple ID as a free developer account.

    • Rob Mincey

      This is as far as I can get. I’m registered as a developer, have used an app-specific password… Can’t figure out how to get past this.

    • Tjibbe de Haan

      Just drag and drop Phoenix again in Impactor. You are probably trying to install Cydia extender 😉

  • Sertug

    Thanks to developers. They are best

  • Mark S

    “rekindle some interest within the jailbreaking community to boot.” Jailbreakers are something like, what 1% of iphone owners? So this could awaken .0003% of that group? Yawn. Why people waste their time on such old operating systems is beyond me.

    • Joaquim Barbosa

      Yes, but as I said, the “jailbreaking community”, not “iPhone owners”. Some people from around the world can’t afford the newest device every year, or at all, and a 9.3.5 jailbreak will give a permanent jailbreak for all legacy devices going forward.

  • Aadil

    Hey, so I just jailbroke my iPod 5th gen and when I open cydia, the app shows the loading screen for 1 second and crashes the next. I tried to reboot and kickstart jailbreak using phoenix though nothing worked. If someone could help me that would be great! Thanks!

    • Jonitas Caçula

      Same here, waiting for a fix.

    • Abhinav Chaudhary

      I was able to run cydia after kickstarting the jailbreak for few times. May be try again.

      • rck

        same here!

  • Rob Mincey

    I was having trouble getting past the “Network extensions requires a developer account issue.” Impactor would hang at this point even though I have a free developer account. Once I turned off 2-Factor Authentication, everything worked smoothly. Hope this helps someone else.

  • Doug Guita

    Thanks! Worked Fine!

  • Gerben Zomer

    i jailbroken now my iPad mini one
    but how can i downgrade to a lower version
    i have no shsh2 files.

  • Jonitas Caçula

    Installed on my iPod touch 5, crashed, now I want to remove Cydia icon and there’s no way I can do that.

    • rck

      same here i cant remove the cydia app also and i am now going to reinstall the jb and see if it will load it mine keeps crashing

  • rck

    it jb my ipad 2 9.3.5 but! it wont open cydia it crashes on opeing ? WHY?

    • Rob Mincey

      Sounds like you need to run Phoenix again and “kickstart the jailbreak.” Usually, when Cydia crashes immediately after starting up, that means the jailbreak isn’t enabled.

      • rck

        i did run it again and also ran kickstart and still the same issue

      • Rob Mincey

        Earlier today, when I rebooted to go back to 9.3.5 (after being in7.1.2,) I had to run Phoenix 3-4 times to get the jailbreak to stick.

        If that doesn’t work, I don’t know what to tell you.

      • Arjan Vlek

        Restore your device using iTunes (you’ll still be on 9.3.5 as it is the latest version).

      • rck

        still no luck! re ran it and also kick start and same nothing! so if the jb is not enabled what could be stopping it?

  • rck

    it jb my ipad 2 9.3.5 but! it wont open cydia it crashes on opeing ? WHY?

  • rck

    it jb my ipad 2 9.3.5 but! it wont open cydia it crashes on opening ? WHY?

    • Joaquim Barbosa

      It’s not jailbroken. You need to run the app again until it succeeds.

  • Rahimo

    I guess they stopped it or removed it !! I can’t download it !! (404 file not found)

    Any help or suggestions PLZ!!

    • Rob Mincey

      Just downloaded v3 of the .IPA. Check the site again. (1048 CDT in the USA, 8-9-17)

      • Rahimo

        Thank you bro! 🙂

  • Strykker

    Another tweakjailbreak for and old iOS version. Yippee.. oh yeah I don’t have 9 whatever or an older phone.
    OK no more rants, up to date iOS jailbreaks are a thing of the past. I will just skip the jailbreak tweak articles.

  • Casi Cuarenton

    Not work, for me

    • Andre Owens

      What phone and ios version are you using ..

  • Casi Cuarenton

    Mmm version 3, still not working

    • Joaquim Barbosa

      Which device and iOS version? Where/how does it fail?

      • Waka Han

        Cydia crashes the min it loads !

      • Joaquim Barbosa

        Have you made sure it’s actually jailbroken in the jailbreak app? You might have to run it several times before it works.

  • Patrick Chaffin

    Tried it. Keeps asking for offsets. Does not seem to work.

    • Joaquim Barbosa

      Which device and iOS version? Have you tried ‘use provided offsets’?

  • Jose Gonzalez

    WORKS PERFECT JUST JAILBROKE TO IPAD MINI’S ON 9.3.5…..THANKS PHOENIX!!!

  • Dougy

    Finally! I can update my iPod 5 that’s been running iOS 7.1.2 jb to the latest iOS 9.3.5. thanks for a great job by the developers!!

  • Arjan Vlek

    What I wonder is, if you booted an older iOS through CoolBooter, do you still have to sideload the jailbreak app each 7 days? Or is that iOS jailbroken untethered?

    • Joaquim Barbosa

      The secondary OS will stay jailbroken, but as soon as the device dies, it will boot to primary OS again, and if it has been more than 7 days you will have to side load the app again anyway.

  • niome85

    Any idea why the cydia crashes once i tap on it?

    • Joaquim Barbosa

      You’re probably not jailbroken. The jailbreak app doesn’t work every time. You have to open the app and read if you are actually jailbroken or not. Keep pressing “Kickstart Jailbreak” until inside the app it says “You are jailbroken”.

      • niome85

        Its says the device is jailbroken but yet again when i tap cydia it crashes doesnt load at all

      • niome85

        Yayyy finally its stable

  • Strykker

    Yippee another old iOS jailbreak.

  • Tinu Singh

    not working i want to jailbreak my ipod touch 5th gen

  • Yingdong Zhang

    I followed the step and got to step 8 & 9:

    8) Open Settings on your device and navigate to General – Device Management.

    9) Select the profile named after the Apple ID you entered into Impactor. Press the Trust button to trust the jailbreak app on your device.

    For some reason I don’t see the “Device Management” option at all, the profile wasn’t installed, and I got no error.

    Any idea?

  • what exactly is a semi-tethered jailbreak? And how is it different from tethered jailbreak?