Yes, an untethered jailbreak for iOS 9.3 on the iPhone 6 does exist. It’s fragile, hard to install, and impractical for modern use. But for those of us who remember the excitement of rebooting into a perfectly jailbroken state without touching a computer – it’s a beautiful swan song for an era long gone.
Have you tried the Untether9 tool? Share your experience in the comments below.
Disclaimer: Jailbreaking voids warranties and can expose your device to security risks. This post is for educational and archival purposes only. Proceed at your own risk.
To summarize for the search engine crawlers and the desperate Reddit users landing on this page:
No. An untethered jailbreak for iOS 9.3.6 does not exist and will never be created.
What does exist is a rock-solid, semi-untethered jailbreak via Phoenix, which, combined with ReProvision Reborn, gives you 99% of the usability of an untethered jailbreak with 100% more safety.
If you want a truly untethered legacy experience on your iPhone 4s or iPad 2, do not stay on iOS 9.3.6. Instead, use the CoolBooter tweak from the Phoenix jailbreak to dual-boot iOS 6.1.3—the last truly great, untethered, 32-bit operating system.
iOS 9.3.6 is a graveyard. But a jailbroken graveyard is still a fun place to visit. Just don't expect to live there without re-running a jailbreak app every time your battery dies.
Update (Current Year): Apple has unsigned iOS 9.3.6 completely. If you are not already on that version, you cannot upgrade or downgrade to it. If you are on it, preserve your blobs immediately. Your device is a time capsule—cherish it, but don't hold your breath for an untether.
Have you found a workaround? Did a Chinese forum leak a tool? Share your experience in the r/LegacyJailbreak subreddit. But bring proof.
While a natively untethered jailbreak for iOS 9.3.6 does not exist as a single-click installer, users can achieve an untethered experience on 32-bit devices using specific advanced tools like EverPwnage. For most users, however, the standard jailbreak for iOS 9.3.6 is semi-untethered, meaning you must re-enable it using an app on your device after every reboot. Understanding iOS 9.3.6 Jailbreak Status
iOS 9.3.6 was released primarily to fix a GPS rollover issue on older 32-bit devices like the iPhone 4S and iPad mini 1. Because these devices are older, the jailbreak community has developed several tools to unlock them:
Semi-Untethered (Standard): Tools like Phoenix are the most common. They require an app to be "kickstarted" after each restart to reactivate Cydia and your tweaks.
Untethered (Advanced): EverPwnage provides a way to install an "untether" (such as iocaste) on 32-bit devices running iOS 9.3.6, allowing the jailbreak to persist even after a full reboot. Top Jailbreak Tools for iOS 9.3.6 EverPwnage - The Apple Wiki
EverPwnage is an untethered jailbreak for 32-bit devices running iOS 7.0-9.3. 6. The Apple Wiki Kok3shi9 - The Apple Wiki
kok3shi9 (also kok3shidoll) is a untethered jailbreak [note 1] for 64-bit devices running iOS 9.2 - 9.3. The Apple Wiki
I understand you're looking for an untethered jailbreak for iOS 9.3 on iPhone 6. However, I need to provide you with accurate, responsible information:
Current Status (as of 2025):
Why no untethered jailbreak for 9.3 on iPhone 6:
Important warnings:
Recommendation: If you need a jailbreak for legacy purposes, consider updating to a newer iOS version (if possible) or using a semi-untethered tool from a verified source like the official Pangu team's historical release — but be aware of security risks on outdated iOS.
If you're writing a historical or research report, I can help you document the known exploits and why an untethered jailbreak for 9.3 doesn't exist. Let me know how you'd like to proceed.
For iOS 9.3.6, a fully untethered jailbreak is primarily achieved using EverPwnage for 32-bit devices or kok3shi9 for 64-bit devices. Historically, most iOS 9.3.5–9.3.6 tools like Phoenix were semi-untethered, requiring you to re-run the app after every reboot. Recommended Untethered Tools
EverPwnage (32-bit devices): This tool supports all 32-bit devices on iOS 9.3.6 (e.g., iPhone 4S, iPad 2/3, iPad Mini 1).
It features an "Install Untether" toggle that installs the iocaste untether specifically for iOS 9.3.5–9.3.6. ios 9.3 6 jailbreak untethered
You can also migrate to this untether from other jailbreaks using the EverUntether Package.
kok3shi9 (64-bit devices): This is an untethered jailbreak for 64-bit devices running iOS 9.2–9.3.x. Common Semi-Untethered Tools
If you cannot use the above untethered options, these tools are reliable but require a "kickstart" after a reboot:
Phoenix: The most popular tool for 32-bit devices on 9.3.5–9.3.6. It is semi-untethered by default.
Polaris / Blizzard: Alternative semi-untethered tools for 32-bit devices. Installation Overview
While there are many "semi-untethered" methods for iOS 9.3.6, achieving a truly untethered
jailbreak—one that remains active after a reboot without needing to run an app—typically requires specific extra steps or older software versions. Current Jailbreak Status for iOS 9.3.6 Most primary tools for iOS 9.3.6 are semi-untethered
. This means you must re-run a "kickstart" app on the device every time it restarts.
: The most common tool for 32-bit devices (iPhone 4S, iPad 2/3, mini 1) on iOS 9.3.6. It is natively semi-untethered. p0laris / Kok3shi9
: Alternative tools that are also semi-untethered but noted for higher exploit reliability on some devices. How to Achieve an Untethered State
To get an untethered experience on iOS 9.3.6, you generally have two main options: Iocaste Untether Package : Recent community developments have introduced the
untether package, available through specialized repositories like lukezgd's repo . This "tweak" is designed to be installed
a semi-untethered jailbreak to make it permanent through reboots. Downgrading to iOS 8.4.1
: Because iOS 9.3.6 performance can be sluggish on older A5 devices, many users choose to downgrade to iOS 8.4.1
. iOS 8.4.1 has a fully untethered jailbreak available (EtasonJB), which is often more stable for legacy hardware. Essential Tools & Resources If you are starting the process, you will likely need:
The iOS 9.3.6 Jailbreak Untethered: A Comprehensive Overview
The iOS 9.3.6 jailbreak untethered was a significant achievement in the iOS community, marking a substantial milestone for developers and users alike. Released on July 22, 2016, iOS 9.3.6 was a minor update to the iOS 9 series, primarily focused on bug fixes and improvements. However, for the jailbreaking community, this version held special significance.
The Importance of an Untethered Jailbreak
An untethered jailbreak allows users to restart their device without losing the jailbreak, providing a more stable and user-friendly experience. This is in contrast to a tethered jailbreak, which requires the device to be connected to a computer and a specific software to be run every time the device is restarted.
The iOS 9.3.6 jailbreak untethered was particularly notable because it was one of the last untethered jailbreaks available for a relatively recent version of iOS. The achievement was a testament to the skills and dedication of the jailbreaking community.
The Tool Behind the Jailbreak: PP Jailbreak and H3lix
The iOS 9.3.6 jailbreak untethered was made possible primarily through the efforts of Chinese hackers, who released a tool known as PP Jailbreak, and later, a tool named H3lix. These tools exploited vulnerabilities in the iOS kernel and other system components to gain unauthorized access, effectively jailbreaking the device.
H3lix, specifically, was a significant development, as it provided a user-friendly, semi-untethered to untethered solution that didn't require users to have extensive technical knowledge. The tool effectively automated the process, making it more accessible to a broader audience.
Impact on the iOS Community
The availability of an iOS 9.3.6 jailbreak untethered had several implications:
The Shift Away from Jailbreaking
The significance of the iOS 9.3.6 jailbreak untethered also underscores a shift in the jailbreaking community. As Apple has continued to improve the security of its operating system and incorporate more user-requested features, the incentive for users to jailbreak their devices has decreased. Additionally, the legal and warranty implications of jailbreaking have always been a point of contention.
Conclusion
The iOS 9.3.6 jailbreak untethered represents a high point in the cat-and-mouse game between Apple and the jailbreaking community. It demonstrated the ongoing efforts to push the boundaries of what is possible on iOS devices and highlighted the evolving nature of mobile security. As the mobile ecosystem continues to evolve, the practice and significance of jailbreaking are likely to change as well.
While a "True Untethered" solution (one that survives reboots automatically without user interaction) is technically feasible for iOS 9.3.6 via kernel patching, the safer and currently maintained standard is the Semi-Untethered approach. This method leverages the "Home Depot" exploit chain to provide temporary kernel patching capabilities upon user demand.
For owners of legacy hardware (iPhone 4s, iPad 2/3), this remains the only method to unlock the full potential of their devices, allowing for customization, legacy app support, and system-level modifications that modern iOS restrictions prevent.
The Phœnix jailbreak, developed by Tihmstar and the 1-concern team, is the default tool for 9.3.6.
untethered jailbreak is now available via EverPwnage [10, 26]. Previously, most users relied on semi-untethered tools like Phoenix, which required re-running an app after every reboot [6, 12]. Prerequisites Compatible 32-bit Devices:
iPhone 4S, iPhone 5/5C, iPad 2/3/4, iPad mini 1st gen, or iPod touch 5th gen [10, 5]. Required for the initial installation (Windows or Mac). A reliable USB-A to Lightning or 30-pin cable [10]. Download the EverPwnage IPA Sideloadly Step-by-Step Installation Guide Prepare the Device Back up your data to iTunes or iCloud [11]. Find My iPhone in Settings [11]. Connect your device to your computer and select on the prompt [10]. Sideload the Jailbreak Tool Sideloadly on your computer. Drag and drop the EverPwnage IPA into the Sideloadly window [10]. Enter your (using a burner account is recommended for safety) [5.2].
. If prompted, enter your Apple ID password to sign the application [5.2, 10]. Trust the Developer Profile Once "Done" appears in Sideloadly, go to your iOS device. Navigate to Settings > General > Device Management (or Profiles & Device Management). Tap on your Apple ID and select Run the Exploit EverPwnage
(or related tool like Phoenix) app on your home screen [10]. Prepare for Jailbreak Install Jailbreak Accept the terms and click Begin Installation If prompted, select Use Provided Offsets The device will reboot. Once it finishes, should appear on your home screen [10]. Finalize in Cydia Open Cydia and allow it to organize files and reload data. If prompted for an "Essential Upgrade," select Complete Upgrade to ensure all system files are stable [5.2]. Important Notes Untethered vs. Semi-Untethered:
Unlike older methods, an untethered jailbreak like EverPwnage remains active after a reboot [27]. If you used a semi-untethered tool like Phoenix, you must open the app and tap "Kickstart Jailbreak" every time the device restarts [6, 12]. 7-Day Re-signing:
If you are not using a paid developer account, the sideloaded jailbreak app will expire every 7 days. However, because this is an untethered
exploit, you only need the app to re-jailbreak if the system becomes unstable; otherwise, the jailbreak persists on its own [6, 27]. essential legacy tweaks to make your iOS 9 device more usable today?
For iOS 9.3.6, there is no single "one-click" untethered jailbreak available directly upon installation. Most primary tools like Phœnix are semi-untethered, meaning you must re-run an app to enable the jailbreak after every reboot.
However, you can achieve a fully untethered state on 32-bit devices (like the iPhone 4s or iPad 2) by first installing a semi-untethered jailbreak and then applying an "untether" package. Recommended Path to Untethered Jailbreak To get an untethered setup, follow these general steps: Initial Jailbreak (Semi-Untethered): Use Phœnix or kok3shi9 to jailbreak your device first.
This usually involves sideloading the .ipa file using tools like Sideloadly or finding a web-based signing service at jailbreaks.app. Apply the Untether:
Once jailbroken and Cydia is installed, you can use specialized tools or tweaks to make it permanent.
EverPwnage / EverUntether: This is a modern solution for 32-bit devices on iOS 9.3.6. You can find the necessary packages on LukeZGD's repository.
p0laris: While originally a semi-untethered tool, an untethered version was developed but has seen mixed stability and status updates in the legacy community. Comparison of Popular Tools Supported Devices Reboot Behavior Phœnix Semi-Untethered 32-bit (A5/A6) Requires "Kickstart" in app kok3shi9 Semi-Untethered 64-bit & 32-bit Higher reliability on 64-bit EverPwnage Untethered 32-bit (A5/A6) Permanent after setup Important Warnings
32-bit vs. 64-bit: Untethered solutions for iOS 9.3.6 are almost exclusively for 32-bit devices (iPhone 4s, iPad 2, iPad 3, iPad mini 1, iPod touch 5). 64-bit devices (iPhone 5s and later) generally remain semi-untethered.
Stability: Untethered exploits on these later iOS 9 versions can sometimes be less stable than the original semi-untethered tools. Many users prefer the stability of "kickstarting" Phœnix rather than risking a bootloop with an experimental untether. AI responses may include mistakes. Learn more
[Release] iOS 9.3.5 Untethered* jailbreak. (p0laris) : r/LegacyJailbreak Yes, an untethered jailbreak for iOS 9
iOS 9.3.6 Jailbreak Untethered: A Comprehensive Guide
Introduction
The iOS 9.3.6 jailbreak untethered is a popular topic among iPhone and iPad users who want to gain more control over their devices. Jailbreaking allows users to remove software restrictions imposed by Apple, enabling them to install third-party apps, tweaks, and modifications that are not available on the App Store. In this article, we will discuss the iOS 9.3.6 jailbreak untethered, its benefits, and provide a step-by-step guide on how to jailbreak your device.
What is iOS 9.3.6 Jailbreak Untethered?
The iOS 9.3.6 jailbreak untethered is a type of jailbreak that allows users to jailbreak their devices running on iOS 9.3.6 without the need for a computer or a tethered connection. This means that once the jailbreak is installed, the device can be rebooted without the need for a computer to restore the jailbreak.
Benefits of iOS 9.3.6 Jailbreak Untethered
The iOS 9.3.6 jailbreak untethered offers several benefits, including:
How to Jailbreak iOS 9.3.6 Untethered
The iOS 9.3.6 jailbreak untethered can be installed using the following steps:
Method 1: Using H3lix Jailbreak
Method 2: Using Meridian Jailbreak
Risks and Precautions
Jailbreaking can void your device's warranty and may also introduce security risks if not done properly. Therefore, it is essential to take the following precautions:
Conclusion
The iOS 9.3.6 jailbreak untethered offers users more freedom and customization options for their devices. However, it is essential to take precautions and be aware of the risks involved. By following the steps outlined in this guide, users can successfully jailbreak their devices running on iOS 9.3.6.
While there is no native "one-click" untethered jailbreak for iOS 9.3.6, you can achieve an untethered state by first installing a semi-untethered jailbreak like and then applying a specific "untether" tweak from Cydia.
Historically, iOS 9.3.6 was restricted to semi-untethered tools, meaning the jailbreak would deactivate every time you restarted the device. Recent developments, such as the EverPwnage
tool or specific untethering scripts, have made it possible to keep the device jailbroken through reboots. Part 1: The Jailbreak Foundation (Semi-Untethered) Most methods start by installing EverPwnage to establish the initial jailbreak.
In the quiet corners of the internet, where legacy hardware refuses to die, a small group of developers has finally cracked the code for iOS 9.3.6. For years, users of the iPhone 4s and original iPad mini were stuck with "semi-untethered" solutions like Phœnix—tools that required a manual "kickstart" every time the battery died or the device rebooted.
But as of early 2026, the game has changed with the release of EverPwnage, bringing a fully untethered jailbreak to these aging 32-bit legends. The Quest for Freedom
The story begins with the iPhone 4s, a device that survived long past its prime only to be "bottlenecked" by Apple’s final update, iOS 9.3.6. While Phœnix was a reliable bridge, it was a constant reminder of the device's constraints—every reboot meant a trip back into the app to "Prepare for Jailbreak". The Breakthrough: EverPwnage The community's landscape shifted when developers like
and staturnz combined forces to release EverPwnage. Unlike its predecessors, this tool integrates the iocaste untether, a sophisticated exploit that allows the device to boot directly into a rooted state. Phœnix (Semi-Untethered) EverPwnage (Untethered) Persistence Re-run app after every reboot Permanent; survives reboots Installation IPA sideloading (requires 7-day refresh) Can be installed via jailbreaks.app/legacy.html Device Support All 32-bit devices on 9.3.5/6 32-bit devices (iPhone 4s, iPad 2, iPad mini 1) A New Lease on Life
Today, the 2026 jailbreak scene isn't just about breaking rules; it's about preservation. With a fully untethered iOS 9.3.6:
iOS 9.3.6 was not a full IPSW for most devices. It was an OTA (Over-The-Air) patch specifically for GPS and cellular radios. Because the update was small, it didn't fix the underlying tfp0 (task for port zero) exploits that Phoenix uses. However, it did break older untether attempts. No developer wasted time building an untether for a version that less than 0.1% of the iOS user base would ever install. To summarize for the search engine crawlers and
This paper examines the technical intricacies of achieving an untethered jailbreak on iOS 9.3.6. As the final firmware release for legacy 32-bit devices (iPhone 4s, iPad 2, iPad 3, iPad mini 1, iPod Touch 5G), iOS 9.3.6 holds significant historical and functional value. While the original "Home Depot" jailbreak (posixninja) was released as a tethered solution, subsequent community developments have evolved into untethered or semi-untethered solutions. This document analyzes the kernel vulnerabilities utilized, the transition from tethered to untethered states, and the installation mechanisms required for end-of-life hardware.