For a device like an iPhone 4S or iPad 2 that you might still use daily, an jailbreak is infinitely more practical than having to re‑apply the exploit every time the battery dies or you perform an update.
Drag the Phœnix IPA file into the software interface.
True untethered functionality for iOS 9.3.5 arrived later through advanced exploitation of the 32-bit architecture. Developers leveraged secondary exploits to patch the kernel during the initial boot phase. By combining older semi-untethered tools with untether packages available on Cydia (such as the "UntetherHomeDepot" packages or specialized Kok3shi scripts depending on the exact device build), users can upgrade their semi-untethered setup into a permanent, fully untethered machine. Supported 32-Bit Devices
Most modern tools for this version (like Phœnix) require you to run an app on the device after every reboot to re-enable the jailbreak.
Open the EverPwnage app from your home screen. The tool automatically detects your device model and iOS version. ios 9.3.5 untethered jailbreak
If your device runs out of battery or you restart it:
Requires a computer to boot the device into a jailbroken state every time it restarts.
If you want a permanent untethered jailbreak, many in the community recommend using Legacy iOS Kit downgrade to iOS 8.4.1
Use a tool like Sideloadly or AltStore (if compatible) to install the IPA onto your iPhone or iPad using your Apple ID. For a device like an iPhone 4S or
For a long time, the primary tool was Phoenix . It required sideloading an IPA file using a computer or third-party app stores. Because these apps were signed with free developer certificates, they often expired every seven days, requiring users to re-sign and re-install the tool if the device rebooted after that window.
For many users, jailbreaking is the only way to breathe new life into hardware that would otherwise be e‑waste.
Before diving into the methods, it is crucial to understand the two primary jailbreak states:
Several developers worked to crack iOS 9.3.5 over the years. Two primary tools define this ecosystem: Phœnix and Kok3shi9. 1. Phœnix (Semi-Untethered) Developers leveraged secondary exploits to patch the kernel
The magic behind this breakthrough is a component called , created by developer staturnz. iocaste is an untether payload specifically designed for iOS 9.3.5 and 9.3.6. When integrated into EverPwnage, it allows the jailbreak to survive reboots without any user intervention.
If you are looking for an , here is the definitive guide on what is possible today and how to do it. The Reality of Untethered vs. Semi-Untethered
While a true "untethered" jailbreak (where the device stays jailbroken even after a full reboot) is hard to find for this version, the offers a reliable semi-untethered solution that is the closest, most stable experience available in 2026. What is the Phoenix Jailbreak (iOS 9.3.5/9.3.6)?