The device requires a physical connection to a computer running a software utility every single time it boots up. Without the computer, the device will not boot at all. The Reality of iOS 9.3.6
The existence of a jailbreak for iOS 9.3.6 highlights the security risks associated with using End-of-Life (EOL) hardware.
Using "Cydia Impactor" to sign apps with a free Apple ID limits the certificate to . After 7 days, the jailbreak app will stop working (crash on launch). ios 9.3 6 jailbreak untethered
I can provide the exact configuration files or troubleshooting steps for your specific hardware. Share public link
Developed by secondary developers in the legacy scene, Kok3shi9 is an alternative semi-untethered jailbreak for iOS 9.3.5 and 9.3.6. Excellent success rate on older iPad models. The device requires a physical connection to a
: The device boots normally after a restart, but the jailbreak environment (including Cydia and all tweaks) is disabled. Users must manually re‑run a jailbreak app on the device to restore the jailbroken state. Most modern jailbreaks (e.g., Phoenix, kok3shi, Carbon without the extra step) fall into this category.
If prompted, install the necessary certificates to increase success rates. Using "Cydia Impactor" to sign apps with a
This guide provides the latest methods available as of May 2026 to achieve a true untethered experience. What Does "Untethered" Mean for iOS 9.3.6? An untethered jailbreak is the holy grail of jailbreaking.
Note: While Phœnix is technically semi-untethered (meaning you need to re-run the app after a reboot), iOS 9.3.5/6 is often widely considered the final "pwned4life" state for these specific 32-bit devices due to the limera1n/limera1n-esque bootrom exploits available for some models, making it very stable.
Sideloaded apps using free Apple Developer accounts expire every 7 days.
For 64‑bit devices, the upcoming dora2ios untether uses a similar approach but targets the 64‑bit kernel’s unique structures and the jsc (JavaScriptCore) exploit chain.