Ios 9.3 6 Jailbreak Untethered !link! File

For users looking to jailbreak iOS 9.3.6, the landscape depends on whether you have a 32-bit or 64-bit device. While a native untethered

jailbreak does not exist directly for this version, you can achieve a permanent setup using specific tools or by downgrading to an older iOS version. 1. Phœnix Jailbreak (Semi-Untethered)

This is the most common method for 32-bit devices like the iPhone 4S and iPad 2/3. It is semi-untethered

, meaning you must "kickstart" the jailbreak using an app on the device every time it reboots. Requirements: A 32-bit device (A5 or A6 chip) running iOS 9.3.5 or 9.3.6. Installation: Usually installed via a computer using a tool like Sideloadly or occasionally through no-computer websites like jailbreaks.app Install the Phœnix app and trust its profile in Settings > General > Device Management Open Phœnix and tap Prepare for Jailbreak The device will reboot, and Cydia should appear. 2. Achieving an Untethered Setup (Downgrading)

If you require a "true" untethered jailbreak (where the device remains jailbroken even after a reboot), the community recommendation is to ios 9.3 6 jailbreak untethered

your firmware. iOS 9.3.6 itself does not have a public untethered exploit, but older versions it can move to do. Downgrade to iOS 8.4.1 or 6.1.3:

Many A5 devices (like the iPhone 4S or iPad 2) can be downgraded to these versions using the Legacy iOS Kit These versions have fully untethered

jailbreaks available, providing a more stable and permanent experience. 3. Kok3shi9 (64-bit Untethered) For 64-bit devices running iOS 9.2 through 9.3.3,

(also known as kok3shidoll) provides a rare untethered jailbreak option. Note that this does not apply to the 9.3.6 update, which was specifically released for older 32-bit cellular devices to fix a GPS bug. Apple Support Community Summary Table Downgrade (8.4.1/6.1.3) Jailbreak Type Semi-Untethered Untethered Low (Direct install) Medium (Requires computer/kit) High (but needs re-activation) Compatibility All 32-bit iOS 9.3.6 devices Select A5/A6 devices For users looking to jailbreak iOS 9

A Quick Refresher: Tethered vs. Untethered

• Tethered: You need a computer to boot the phone every time it powers off or reboots. Without it, you’re stuck at the Apple logo.
• Untethered: The holy grail. Reboot freely, and the device remains jailbroken. This is what we all dreamed of back in the iOS 6 glory days.

By iOS 9, Apple had made untethered exploits extremely rare. Most tools like Pangu9 or JailbreakMe 4.0 were semi-untethered (requiring a side-loaded app to re-enable the jailbreak after a reboot). But the myth of a full untether persisted.

The technical challenges for an untethered jailbreak on iOS 9.3.6

• Kernel persistence: Untethered jailbreaks typically require a way to gain kernel-level code execution and apply persistent patches that survive reboots. That often means exploiting a boot chain component or placing a persistent payload in a location the boot process will load and execute.
• Secure boot and code signing: Apple’s chain of trust tightly controls what can run at boot. By iOS 9, Apple’s signing checks were robust, so achieving persistence without breaking the signature checks or using a boot ROM/low-level exploit was hard.
• Patch stability: Even with a working exploit, changes to low-level system behavior had to be safe across different device models and subclasses of 9.3.6 builds. An untethered solution had to be thoroughly tested to avoid bricking devices.
• Limited attack surface on older devices: Ironically, some older devices have fixed boot ROM exploits (read: hardware-level flaws) that never get patched by software updates. If such an exploit exists and’s usable, it can enable untethered jailbreaks. But these were relatively rare and typically targeted specific device models.

How It Works (Simplified)

The exploit chain uses three core components:

1. CVE-2016-4655 (Info leak) – Bypasses KASLR.
2. CVE-2016-4656 (Memory corruption) – Achieves kernel read/write.
3. CVE-2016-4657 (Untether persistence) – Installs a boot-time hook into the kernelcache.

When combined, this allows a true bootROM-level persistence – meaning even a hard reboot retains full root access.

Untethered vs. Semi-Untethered: The Crucial Distinction

To understand the search results for "ios 9.3.6 6 jailbreak untethered," you must distinguish between two states: A Quick Refresher: Tethered vs

1. Untethered (The Dream): You reboot your phone. It boots up fully jailbroken. You don't need a computer or an app. This is what most users want. The last untethered jailbreak for any modern iOS was Pangu9 for iOS 9.0-9.1.
2. Semi-Untethered (The Reality): You reboot your phone. It boots into standard iOS. You must run an app (like Phœnix or kok3shi) and tap "Kernel Exploit" to re-enter a jailbroken state.

The Verdict: There is NO untethered jailbreak for iOS 9.3.6 as of this writing. The signing window for the vulnerable OTA (Over-The-Air) blobs closed years ago.

Blog Post: The Holy Grail of Legacy iOS – Untethered Jailbreak for iOS 9.3 on iPhone 6

Posted by: iArchivist | April 18, 2026

If you’re reading this, you likely own a dusty iPhone 6 running iOS 9.3, or you’re a collector trying to breathe life back into Apple’s iconic 2014 hardware. For years, the jailbreak community has debated one question: Does a true, untethered jailbreak exist for iOS 9.3 on the iPhone 6?

The short answer is yes – but with some very important caveats.

Let’s dive into the state of the 9.3 untether, how it works, and whether it’s worth your time in 2026.

Summary (recommended tool)

• Use Phoenix or H3lix/Pangu-style tools available historically for 32-bit/64-bit iOS 9.3.5–9.3.6; for iPhone 6 (64-bit) on 9.3.6 an untethered-like userland jailbreak historically available is Phoenix (semi-untether for 32-bit) and other community releases. The reliable community jailbreak for 9.3.5–9.3.6 on 64-bit devices is limited; most tools are semi-untethered. Expect semi-untethered behavior (re-sign or re-run app after reboot) rather than a true permanent untether.