Anyone who has or is currently using an iPhone 4s running iOS 9 will tell you that it runs painfully slow compared to all over iPhone models. Even the iPhone 4 is faster on iOS 7.1.2 (latest compatible version) than the iPhone 4s is on iOS 9.3. Most people would agree that iOS 9 should never have been released for the iPhone 4s in the first place, as once you update there wouldn’t normally be a way to downgrade. This tutorial aims to help those who have that slow iPhone 4s’ stuck on iOS 9, but allowing you to downgrade it back to iOS 6.1.3!
While this tutorial doesn’t require you to have SHSH blobs saved for iOS 6.1.3, it will require you to have an iPhone 4s that is running iOS 9.3 – 9.3.4. This will unfortunately not work for those who are running iOS 9.3.5, as the Trident jailbreak exploit that is used for this tutorial is patched in that version. The reason this downgrade works at all without SHSH blobs is because iOS 6.1.3 is still being signed as an OTA update.
Requirements & Notes:
- This will only work on the iPhone 4s (there is a different version that may also work on the iPad 2 but I have not tested this).
- Your device needs to be running iOS 9.3 – 9.3.4.
- This will NOT work if your iPhone 4s is running iOS 9.3.5.
- You will need a Windows computer to use this method.
- Using this method may result in baseband issues, meaning you may not be able to use cellular service on the device after downgrading. This should only be done on spare devices that are not used anymore.
- This method will restore and erase all data on the iPhone, so make sure there is nothing important on the device before attempting this.
- Once you have done this make sure not to restore and update your phone again, as once your device is back on iOS 9.3.5 you will not be able to do this again (unless a root access exploit is released for that version).
- iOS 6.1.3 IPSW for iPhone 4s
- Beehind v0.5 Beta
- Cydia Impactor (Windows)
- Trident Root Access Jailbreak IPA
- libimobiledevice MinGW Build
- Download all of the files above and save them anywhere you want them, then extract all of the .zip files.
- Open the Beehind.exe file by right clicking on it and clicking Run as Administrator. It is important to run it as an administrator as it will not run properly without doing so. If you accidentally open the file normally, make sure to close it completely using Task Manager. If when you open it as an administrator you get any errors or warnings, just click OK.
- Once Beehind is open, click the Choose button located on the left in the Browse for the IPSW section. When the selector window opens, select the iOS 6.1.3 IPSW file you downloaded before.
- A pop-up should appear asking you if you want to use SHSH blobs. Click the Yes button to indicate that you want to continue without using SHSH blobs. Another pop-up should appear asking you to enter the ECID of your iPhone 4s (you may not see this if you already have the device plugged in). To continue, simply plug your iPhone 4s into your computer and a blue button should appear saying New Apple device found! Click here to get its ECID. Click the blue button and then click Yes.
- You can now choose if you would like to jailbreak the downgraded operating system by ticking the Jailbreak checkbox. You can do this if you want, however I would recommend not doing this now as it can be down using p0sixspwn at a later date. Once you have chosen, click the Build IPSW! button in the bottom right. This will create a brand new IPSW file in a folder on your desktop. You can now close Beehind.
- Make sure that your iPhone 4s is plugged into your computer. Open the Cydia Impactor tool normally (don’t open as an administrator). Once open you should see your device in the first drop down menu. Make sure it is selected. Find the Trident-kloder IPA file you downloaded earlier and drag it on top of Cydia Impactor. You will be prompted to enter your Apple ID and password. You can use any Apple ID for this (don’t worry, this goes straight to Apple’s servers and isn’t saved). Once you have entered the data correctly and clicked OK, the Trident jailbreak app should begin to install.
- Once installed you will not be able to open the Trident app straight away, as you will get an Untrusted Enterprise Developer error. To fix this simply open the Settings app on your device and navigate to General>Profiles>Your Apple ID (Profiles could also be Device Management instead). In here click Trust twice and you should be able to open the app.
- Open the Trident app and click the Start button. After a few seconds the text should change (don’t worry if the screen flickers). At this point you need to put the device into DFU mode with libimobiledevice.
- Open the libimobiledevice folder you extracted earlier and click File in the top left corner. Click the Open command prompt option and command prompt should open in the libimobiledevice directory.
- To put the device into DFU mode, make sure the iPhone 4s is the only iOS device plugged into the computer and type this command:
This should make the screen go black and put the device into sleep mode. Hold the power button on the device until it is detected by your computer. At this point the device should be in DFU mode.
- Open the new folder on your desktop and move the IPSW file within into the libimobiledevice folder. Rename the new IPSW file to downgrade.ipsw so it is easier to refer to in the next step.
- Now we are going to restore the iPhone 4s to iOS 6.1.3 using the newly created IPSW file. To do this, using the same command prompt window, type the command below (make sure to replace downgrade.ipsw with whatever it is called if you didn’t rename it):
idevicerestore -e downgrade.ipsw
- At this point, provided everything was done correctly, your device should now begin to restore to the custom IPSW file. Make sure not to close command prompt or unplug the device while this process is happening. If there are any errors that appear during the command prompt you can just ignore them, as they shouldn’t have an effect on the restore. Don’t worry if command prompt appears to be stuck at any point. Just allow it to run and it should eventually finish. This process can take anywhere between 5 and 15 minutes depending on the speed of your computer.
- When the restore is complete your device should now be running iOS 6!