The iOS 9.3.5 untethered jailbreak by Phœnix is not merely a piece of software; it is a historical artifact. It represents the final successful assault on the classical iOS security model—a model where an attacker could achieve permanent, reboot-proof control. In a modern iOS ecosystem dominated by semi-tethered workarounds, signed bootloaders, and hardware-level cryptographic verification, the untethered jailbreak has become a ghost. For the users of legacy devices and the researchers who cherish the cat-and-mouse game of iOS exploitation, Phœnix stands as a monument to ingenuity, persistence, and the end of a rebellious era. It was the last time the user truly owned the entire boot cycle, and it will likely remain so forever.
Because iOS 9.3.5 is a 32-bit firmware, the jailbreak landscape is different from modern 64-bit devices. There is no full untethered jailbreak for iOS 9.3.5 on all devices.
However, depending on your specific device model, you have two options that closely mimic an untethered experience: ios 9.3.5 untethered jailbreak
Here is the complete guide for both scenarios.
For 32-bit devices (iPhone 4s, iPad 2), there is technically an untethered jailbreak for iOS 9.3.5 – but it's not public. The tihmstar team demonstrated a private untethered for 32-bit using a bootROM exploit (limera1n – patched in A5 devices but still present in early A5 revisions). However: The iOS 9
Thus, the public 32-bit jailbreak (Phoenix) remains semi-untethered.
Upon first launch, Cydia will "Prepare Filesystem." This may take a few minutes. Once done, it will respring again. Here is the complete guide for both scenarios
Important Note on Reboots: If your device runs out of battery or you restart it:
To understand the legend of 9.3.5, you have to look at what came before. For years, the jailbreak scene was dominated by "untethered" tools. You ran the software once, and your device was free forever. You could reboot, turn it off, and turn it back on, and it would boot up already jailbroken.
But by 2016, the landscape had changed. Apple had hardened the kernel. The "Golden Age" was ending. As iOS 9 gave way to iOS 10, the legendary development teams began to go quiet.
Then, a tragedy shifted the tectonic plates of the community. In October 2016, a brilliant hacker known as "Moonshine" passed away. He was a key figure in the community, and his death left a void. But in the world of hacking, data never truly dies.