Ios 9.3 6 Jailbreak Untethered ((top)) [SAFE »]

Blog Post: The Holy Grail of Legacy iOS – Untethered Jailbreak for iOS 9.3 on iPhone 6

Posted by: iArchivist | April 18, 2026

If you’re reading this, you likely own a dusty iPhone 6 running iOS 9.3, or you’re a collector trying to breathe life back into Apple’s iconic 2014 hardware. For years, the jailbreak community has debated one question: Does a true, untethered jailbreak exist for iOS 9.3 on the iPhone 6?

The short answer is yes – but with some very important caveats.

Let’s dive into the state of the 9.3 untether, how it works, and whether it’s worth your time in 2026. ios 9.3 6 jailbreak untethered

4.3 Cydia Substrate on 9.3.6

Once the kernel is patched, the device gains access to Cydia. However, users on 9.3.6 often face compatibility issues with tweaks designed for iOS 7/8 or iOS 10+. It is critical to ensure that installed tweaks support the ARMv7 architecture and iOS 9 APIs.


The "iOS 9.3.6 6" Typo – What Are Users Actually Searching?

The keyword contains a curious "6" – "ios 9.3.6 6 jailbreak untethered." This likely refers to two possibilities:

  1. iPhone 6: A typo. (Note: iPhone 6 runs iOS 12, not 9.3.6. iOS 9.3.6 is 32-bit; iPhone 6 is 64-bit. No overlap.)
  2. iOS 9.3.6 specifically for iPhone 6: Impossible due to hardware incompatibility.
  3. The year 2016: Users looking for an old iOS 9.3.3/9.3.4 jailbreak.

Clarification for SEO: If you own an iPhone 6, you cannot run iOS 9.3.6. You should search for "unc0ver iOS 12" or "Chimera." If you own an iPhone 4s, 9.3.6 is your final OS. Blog Post: The Holy Grail of Legacy iOS

Debunking the YouTube Fakes

Search "iOS 9.3.6 jailbreak untethered" on YouTube today. You will see thousands of videos with a Download link in the description, a fake Cydia logo in the thumbnail, and a robotic voice claiming "100% working."

These are scams.

Do not download custom profiles from unknown URLs. Do not install "Jailbreak 2024" apps from random signing services. Here is how to spot the fakes: The "iOS 9

  • The Text: They use "Untethered" incorrectly. They usually mean "Unsupported."
  • The File Size: A real iOS 9 jailbreak tool is roughly 10–20 MB. Many fakes are 200 KB HTML files.
  • The Verdict: If the video asks you to watch an ad before unlocking the download, close the tab.

4. The 32-bit Exception (iPhone 4s on 9.3.6)

If your confusion stems from seeing “9.3.6 jailbreak” online: the iPhone 4s can run 9.3.6. Its jailbreak status:

  • EtasonJB (by tihmstar, 2018): Untethered for iOS 8.4.1 only.
  • For 9.3.6 on 32-bit: The only public jailbreak is Semi-untethered (Phoenix or Home Depot). No untethered exists for 9.3.6 even on 32-bit because 9.3.x patched the untether offset used by EtasonJB.

The technical challenges for an untethered jailbreak on iOS 9.3.6

  • Kernel persistence: Untethered jailbreaks typically require a way to gain kernel-level code execution and apply persistent patches that survive reboots. That often means exploiting a boot chain component or placing a persistent payload in a location the boot process will load and execute.
  • Secure boot and code signing: Apple’s chain of trust tightly controls what can run at boot. By iOS 9, Apple’s signing checks were robust, so achieving persistence without breaking the signature checks or using a boot ROM/low-level exploit was hard.
  • Patch stability: Even with a working exploit, changes to low-level system behavior had to be safe across different device models and subclasses of 9.3.6 builds. An untethered solution had to be thoroughly tested to avoid bricking devices.
  • Limited attack surface on older devices: Ironically, some older devices have fixed boot ROM exploits (read: hardware-level flaws) that never get patched by software updates. If such an exploit exists and’s usable, it can enable untethered jailbreaks. But these were relatively rare and typically targeted specific device models.

2. Vulnerability Analysis

The exploit chain for iOS 9.3.6 primarily relies on vulnerabilities present in the iOS 9.x kernel. The most prominent tools utilize the "Home Depot" exploit chain.