If the jailbreak is successful, Cydia will appear on your home screen. Method 2: Phoenix + Iocaste (Recommended for Stability)

In the world of iPhone modding, few phrases generate as much nostalgia and technical intrigue as "iOS 9.3.5 untethered jailbreak."

The iOS 9.3.5 untethered jailbreak offers users the freedom and customization that comes with jailbreaking their device. While there are risks and drawbacks to consider, the benefits of jailbreaking can be significant. If you're still running iOS 9.3.5 and want to experience the thrill of jailbreaking, follow our step-by-step guide to perform an untethered jailbreak using the H3lix tool.

Even in 2026, many classic Apple devices—the iPhone 4S, iPhone 5, iPhone 5C, iPad 2, iPad 3, iPad 4, iPad Mini 1, and iPod Touch 5—remain in use, often serving as dedicated music players, e-readers, or nostalgic tech pieces. While these devices are locked to iOS 9.3.5 (or 9.3.6), they can be transformed into incredibly functional, "new" devices through an .

iOS 9.3.5 holds a special place in Apple history. It is the final software update for several iconic 32-bit devices. These include the iPhone 4s, iPad 2, iPad 3, iPad mini 1, and iPod touch 5.

Use a file manager (like Filza) or a tool like to trick your device into downgrading to iOS 8.4.1. Once on iOS 8.4.1, use EtasonJB .

Classic themes (WinterBoard/Anemone) allow you to change the look of the OS in ways Apple still doesn't permit. A Note on Security

Do not let the clickbait videos fool you. If you want an untethered experience on that hardware, downgrade to iOS 8.4.1. If you must stay on 9.3.5 for app compatibility, embrace the Phoenix. It is stable, secure, and—given the age of the OS—the best you are going to get.

Phoenix itself is designed as a semi‑untethered jailbreak. However, you can add an untether layer by installing the iocaste package from LukeZGD’s repository within Cydia. After adding https://lukezgd.github.io/repo , you can install the untether to convert your Phoenix jailbreak into an untethered one.

Free Apple developer accounts only sign apps for . After one week, the Phoenix app will crash when opened.

Because iOS 9 is old, its secure web protocols are outdated. Cydia may fail to load repositories.

Siguza’s approach was a callback to earlier, more hardware-agnostic methods. He exploited a vulnerability in the way iOS handles resource properties (specifically in IOKit ), allowing for an arbitrary read/write primitive in the kernel. But to make it untethered, he bypassed KPP not by patching the kernel directly—which KPP would detect on the next reboot—but by patching the kernel’s data structures in memory only and then forcing a specific system daemon (which runs as root) to load a dynamic library. More importantly, the jailbreak embedded a bootstrap script into the filesystem that would be executed by launchd (the init process) early in the boot cycle. This script would then re-trigger the IOKit exploit before KPP had fully armed itself.