Ios 9.3.5 Untethered Jailbreak -

The release of iOS 9.3.5 marked a significant turning point in the history of iPhone customization. As the final software update for several iconic 32-bit devices, it became the "end of the road" for hardware like the iPhone 4s and iPad 2. For the jailbreak community, this version represented a final challenge to unlock these legacy devices permanently. The Search for the Untethered Holy Grail

In the world of iOS exploitation, an untethered jailbreak is the gold standard. It allows a device to remain in a jailbroken state even after a reboot, requiring no external computer or app re-activation. For iOS 9.3.5, the journey to achieving this was long and complex. Initially, users relied on semi-untethered tools like Phoenix, which required re-running an app every time the battery died. However, the community eventually saw the release of the Kok3shi9 and later the Daibutsu jailbreaks, which provided a more stable experience for 32-bit users. Technical Vulnerabilities and Exploits

The breakthrough for iOS 9.3.5 relied on a series of critical vulnerabilities, most notably the Trident exploits. These were a set of three zero-day vulnerabilities originally discovered being used in the wild for targeted surveillance. The exploits targeted the kernel and Safari's WebKit engine, allowing for arbitrary code execution. Developers repurposed these high-level security flaws to bypass Apple’s "Code Signing" and "Root" protections, giving users full control over the file system. The Impact on Legacy Hardware

The availability of a jailbreak for iOS 9.3.5 breathed new life into aging hardware. Because these devices were no longer receiving performance updates, they often felt sluggish. Jailbreaking allowed users to:

Downgrade Firmware: Using tools like OdysseusOTA or CoolBooter, users could revert to older, faster versions of iOS like 6.1.3.

Customization: Standard tweaks like WinterBoard and Cylinder allowed users to modernize the UI or embrace nostalgia.

Functional Longevity: Users could install "Fixes" for apps that no longer supported older iOS versions, extending the utility of the device as a dedicated music player or e-reader. The End of an Era ios 9.3.5 untethered jailbreak

iOS 9.3.5 was one of the last versions where 32-bit architecture was the primary focus of the jailbreak scene. As Apple transitioned fully to 64-bit chips and introduced more robust security measures like KPP (Kernel Patch Protection), the era of easy, untethered jailbreaks began to fade. Today, the iOS 9.3.5 jailbreak stands as a monument to the persistence of developers who refused to let perfectly good hardware be locked away by software limitations. Safety and Modern Considerations

While jailbreaking iOS 9.3.5 is now considered stable, it is not without risks. Users must be cautious of downloading tweaks from "pirate" repositories, which can contain malware. Furthermore, because the vulnerabilities used to jailbreak the device are the same ones used by malicious actors, a jailbroken device on such an old firmware is inherently less secure than a modern one. For enthusiasts, however, the trade-off for total digital freedom remains a price worth paying.

Let me know your hardware model and I can provide specific instructions.

While iOS 9.3.5 was historically limited to semi-untethered tools like Phœnix, a full untethered jailbreak is now available for 32-bit devices. An untethered jailbreak is highly preferred because it remains active after a device reboot, unlike semi-untethered versions that require you to "kickstart" the jailbreak through an app every time you restart. Current Jailbreak Landscape (April 2026)

4. Existing Options for 9.3.5

Scenario A: The "Untethered" Method (Kok3r9)

Compatible Devices: iPhone 4s, iPhone 4, iPad 2, iPad 3, iPad 4, iPad Mini 1 (specifically A5/A6 devices). Prerequisite: Your device must be running iOS 9.3.6. If you are on 9.3.5, you must use the "Degrade" tool to upgrade and patch the installation.

Why do this? This installs the Kok3r9 jailbreak, which is fully untethered. You can reboot your device, and the jailbreak will still be active. No computer needed after installation. The release of iOS 9

Why Is an Untethered 9.3.5 Jailbreak So Rare?

To understand the scarcity, look at the OS release date: August 25, 2016.

By this point, Apple had introduced:

  • KPP (Kernel Patch Protection): While less aggressive on 32-bit, it still complicated persistence.
  • AMFI (Apple Mobile File Integrity): Strict code-signing requirements.
  • The end of 32-bit focus: Developers moved their exploit research to iOS 10 and 11 (64-bit devices). The financial and community incentive to spend months finding an untether for a dying platform simply evaporated.

6. Final Verdict

| Feature | iOS 9.3.5 (public) | |---------|---------------------| | Untethered? | ❌ No | | Semi-untethered? | ✅ Yes (Phoenix / kok3shi9) | | Tethered? | ❌ No need | | Will an untethered ever appear? | Extremely unlikely (0.1% chance) |

Treat iOS 9.3.5 as a legacy sandbox, not a daily driver. The semi-untethered tools are stable, well-tested, and perfectly adequate for their purpose: running old 32/64-bit apps, tweaks for nostalgia, or device research.

If you find someone selling an "iOS 9.3.5 untethered jailbreak" – it is a scam. No exceptions.

Because iOS 9.3.5 is a 32-bit firmware, the jailbreak landscape is different from modern 64-bit devices. There is no full untethered jailbreak for iOS 9.3.5 on all devices. KPP (Kernel Patch Protection): While less aggressive on

However, depending on your specific device model, you have two options that closely mimic an untethered experience:

  1. iPad 2, iPhone 4s, and iPhone 4: You can upgrade to iOS 9.3.6 and use the "Degrade" tool to convert the installation into a Kok3r9 Untether. This is a true untether (jailbreak persists after reboot).
  2. iPhone 5, 5c, iPad 4, and iPad Mini 1: These devices must use the SockPuppet 2.0 (Phoenix) jailbreak, which is "semi-untethered" (requires re-signing via an app every 7 days).

Here is the complete guide for both scenarios.

The Verdict: What Should You Do Today?

If you are sitting on an iPhone 4s, 5, or 5c running iOS 9.3.5, here is your realistic path:

  1. Accept Semi-Untethered: Use Phoenix Jailbreak. It is stable, free, and open-source. The minor inconvenience of re-running an app after a reboot is trivial compared to the benefit of running classic Cydia tweaks.
  2. Downgrade (The Secret Loophole): Your device is 32-bit. Using tools like Beehind or Vieux, you can downgrade to iOS 6.1.3 (for the 4s) or iOS 8.4.1 (for the 5/5c). Once on 8.4.1, you can install EtasonJB—a true, untethered jailbreak. This is the closest you will get to the dream.
  3. Avoid Scams: Any website promising a "Direct download link for iOS 9.3.5 Untethered IPA" is either serving malware or old, broken code. The only legitimate jailbreaks are Phoenix and kok3shi.

B. The 32-bit Situation

For 32-bit devices (iPhone 4s, iPad 2), there is technically an untethered jailbreak for iOS 9.3.5 – but it's not public. The tihmstar team demonstrated a private untethered for 32-bit using a bootROM exploit (limera1n – patched in A5 devices but still present in early A5 revisions). However:

  • It requires Odysseus method (stitching custom bootchain).
  • It is device-specific and unstable.
  • Tihmstar decided not to release it because of the high brick risk and lack of demand.

Thus, the public 32-bit jailbreak (Phoenix) remains semi-untethered.