Jailbreak iOS 4.1 on iPhone 3GS with PwnageTool [Tutorial]

Well, I was not interested to write this post because there is no official release of PwnageTool available to jailbreak iOS 4.1. However, an unofficial release is floating around the web that is said to be working on  iPhone 3GS (of course only old bootrom).

This method/version doesn’t support the hacktivation, so either you will have to use the official supported SIM or follow the instructions posted here to use the phonebook SIM method to activate.

It is to inform you that a new jailbreak GreenPoison is also coming soon to jailbreak all devices on iOS 4.1, but if you ar impatient, you can try this method on iPhone 3GS.


All the download links are at the bottom of this post.

Step 1: Download the latest version of PwnageTool.

Step 2: Make sure iTunes is up to date. If not, update iTunes and reboot your computer.

Step 3: Sync and backup your iPhone in iTunes.

Step 4: Download the latest iOS 4 firmware for your specific device and place it on desktop.

Step 5: Launch PwnageTool and select your iPhone.

Step 6: PwnageTool will automatically detect your firmware. Click on the blue arrow to continue.

Step 7: PwnageTool will now ask if you have an iPhone contract that you would normally activate with iTunes. Choose YES if you have a contract with an official carrier (ie. AT&T in the US) and you don’t care about unlocking your device. Click NO if you don’t have a contract with an official carrier and want to unlock your iPhone.

Step 8: PwnageTool will now create the custom IPSW.

While creating the custom firmware, PwnageTool will ask you to authenticate your account on Mac, ignore this prompt for now and install iOS4.1Jailbreaker installer package which is included in the .zip file you downloaded in Step 3 above. Once this has package has been installed, go back to the PwnageTool password prompt which you previously ignored and enter your password so that PwnageTool completes the custom firmware building process.

Step 9: When done, you will see the “iHaz success” message.

Step 10: Now that you have your custom cooked firmware, you need to install this firmware on your iPhone. To do so, plug your iPhone in iTunes. Once iTunes has recognized your iPhone, hold the “Alt/Option” key on Mac and “Shift” key on Windows  and click “Restore” at the same time. DO NOT click “Restore” without holding the “Alt/Option” key! A dialog box will pop up and you’ll be able to choose the custom IPSW file you created.

Step 11: PwnageTool will now install your cooked iOS 4 firmware on your iPhone. This process might take a few minutes so be patient. When done, your iPhone will reboot.

You’re done!

If iTunes throws 1004 or 1015 error at you. This is normal, just ignore this error as the firmware has already been successfully installed on the device. But your iPhone at this point will be stuck in Recovery Mode, showing that “Connect to iTunes” screen.

Step 12: To exit your device from Recovery Mode, download the program called TinyUmbrella. Run it and the click on “Kick Device Out of Recovery” button. Your device will now restart normally.

In case the Cydia icon on the homescreen is in white with no repositories added, simply addhttp://apt.saurik.com/cydia-3.7 repo in Cydia to get going! If Safari crashes, addhttp://repo.woowiz.net repository and install Safarifix.

Disclaimer: This guide is unofficial and we won’t recommend you to use it if you don’t know what you are going to do. This guide is for testing and educational purpose only. Follow it at your own risk.


  • Download iTunes 10 latest version
  • Download PwnageTool for iOS 4.1 (unofficial)
  • Download TinyUmbrella here if your phone is stuck at recovery mode.

Download iOS 4.1:

Enter email to get Updates in your inbox:

Updated 12 years agoCategorized as Tutorials

By A. Usman

Loves new tech, especially from Apple and Google.

View all of A. Usman's posts.

3 Replies

  1. Simer_Jsays:

    Scroll down to the heading “Download iOS 4.1:” and download the version of your iphone

  2. Marcsays:

    How to do step 4?

Leave a reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.