By now, you should know that iPhone Dev Team has released the updated version of PwnageTool to cater for iOS 4 jailbreak. To walk you through the jailbreak process, I have updated the jailbreak guide for iOS 4 using PwnageTool for both iPhone 3G/3GS.
Okay, let’s go straight to the jailbreak procedures.
Before you read on and take action to jailbreak your iPhone, please note that:
- This jailbreak guide is for PwnageTool, which is for Mac Only. For Windows user, please use sn0wbreeze or redsn0w instead.
- This guide is for jailbreaking only. If you are looking for unlock solution, check out this article and use ultrasn0w to unlock baseband 05.12.01 or 05.13.04.
- You can use this guide to jailbreak iPhone 3G. Both jailbroken and out-of-the-box iPhone 3G are supported. If you are using jailbroken iPhone 3G running OS 3.1.3, you can also use PwnageTool to create the custom firmware to upgrade and jailbreak iOS 4.
- You can use this guide to jailbreak iPhone 3GS. But it only works on previously jailbroken 3GS devices with the old bootrom. If you are using newer version of bootrom or you haven’t jailbroken your iPhone 3GS before, the tool is not for you. To determine the bootrom version, you can further check out this how-to article.
- As usual, jailbreaking may void your warranty and this guide is just for reference only. For any reason, it may not work for your iPhone. So, use it at your own risk.
Ready? Let’s get started.
Preparation for the jailbreak
1. First, make sure you have upgraded to iTunes version 9.2 and backup your iPhone data by synchronizing it with iTunes.
Tip: If you’re upgrading the iPhone from older version of firmware, make sure you sync the iPhone with iTunes. This ensures all your SMS, contacts and applications can be restored after the firmware upgrade.
2. Download all the files including PwnageTool 4.01 (or download from here) and iOS 4 (3G / 3GS)
Tip: Please use Firefox to download the iOS 4 file. Do not use Safari as by default it’ll unzip the IPSW file
3. Launch PwnageTool_4.01.dmg and copy PwnageTool to your desired folder.

Note: If you’re jailbreaking iPhone 3G, the IPSW file should be iPhone1,2_4.0_8A293_Restore.ipsw.
4. Copy the iOS 4 firmware file to “~/Library/iTunes/iPhone Software Updates”. If the folder does not exist, create it by yourself. However, in case the folder contains other firmware files, please delete them. (This step is optional. Normally PwnageTool can search the firmware file even it’s saved in other folders. But this may speed up the search.)
5. Finally, connect your iPhone to the dock/USB cable. Please keep connected for the whole process and close iTunes if it has been launched.
Running PwnageTool 4.01
6. Let’s start the core part. Go to the folder you save PwnageTool. Click “PwnageTool” to launch it.

7. Click “Expert mode” and select iPhone. Then click the arrow to continue.

8. Next, Pwnage tool searches for the iOS 4 firmware file. It may take some time to locate the file. Once completed, select the firmware file and click the blue arrow to proceed. Please note the below screenshot is for iPhone 3GS. For iPhone 3G, the firmware file is “iPhone1,2_4.0_8A293_Restore.ipsw”.

9. In PwnageTool main menu, select “General” and click the blue arrow.

In general settings, please set the root partition size to 831MB. This value works fine for me. But if you have any problem with your jailbreak, you can try to set the partition size to larger value (say, 900MB).Once you’ve configured the size, click the blue arrow to continue.
Note: If you are using a legitimate iPhone from official carrier (for instance, iPhone with AT&T), you need to uncheck the “Activate the iPhone” option.

10. Next, you will be go through several configuration screens. Keep all the default settings and proceed as shown.



Tip: If you want to keep the original logos, uncheck both “Boot logo” and “Recovery logo” checkboxes.
11. After complete all the settings, you will go back to the main screen. Select “Build” and click the arrow to start building the custom firmware.

12. Accept the default filename for the custom firmware. (Of course, you can choose a better name)

13. Next, Pwnage will start creating a custom firmware file that will be used later to recover the iPhone. During the process, you will be prompted to enter your logon password.

If you’re using iPhone 3G, please go to step 16 and put your iPhone into DFU mode. For 3GS user, please put your iPhone into recovery mode.
Put your iPhone 3GS into Recovery Mode
14. When complete, PwnageTool will ask you to put your iPhone into recovery mode.

15. To put your iPhone into recovery mode, first disconnect your iPhone from USB cable and power off your iPhone. Then hold the “Home” button and connect USB cable again. Keep holding the “Home” button until you see a dock cable pointing to the iTunes icon (or yellow triangle for older version of iPhone). Now you are in recovery mode.

After you have successfully put your iPhone into recovery mode, go to step 20 to restore the IPSW file using iTunes.
Put your iPhone 3G into DFU Mode
16. When complete, PwnageTool will ask you whether your iPhone has been pwned before. Answer “No”.

17. Now, the game starts. Pwnage shows you some instructions to follow. You should follow exactly the instructions to put your iPhone in DFU mode. Remember timing is important!




18. By following exactly the instruction, your iPhone can enter DFU mode. In case you fail, don’t panic! It won’t brick your iPhone. I did the procedures twice when I first jailbreak my iPhone. To retry, you can just disconnect your iPhone from USB, turn on your iPhone and connect it again.


19. Ok, your iPhone should appear as if it’s turned off. Don’t touch it. Quit Pwnage and go to the final procedures.
Install the Custom Firmware
What you have completed with Pwnage is you have created a custom iOS 4 for your iPhone. The remaining procedures are to use iTunes and install that custom firmware onto the iPhone.
20. Start iTunes and it automatically detects your iPhone is in recovery mode.

21. Confirm “OK”. Hold down “Option” button and click “Restore”. You will be prompted to select the firmware file. Remember to select the custom firmware file.
Note: For iPhone 3G, the filename is “iPhone1,2_4.0_8A293_Custom_Restore.ipsw”
22. Now, iTunes will start loading the firmware onto iPhone. Don’t touch anything, keep your iPhone connected. It may take several minutes to complete the process. Once complete, iTune will prompt you that it has recovered your iPhone to the default factory settings.
23. Okay, I believe everything is smooth. You should see your iPhone come back with iOS 4.
24. Finally, you can sync back all your data using iTunes.

Note: As said before, PwnageTool does not handle the unlock for you. To unlock your iPhone, you have to launch Cydia and install ultrasn0w.













I have a Iphone 3G which was previously unlocked and jailbroken, but lately i upgraded the firmware to 3.1.3 and after the upgradation my phone is stuch to “Connect to Itunes” and the next screen says”Emergency Calls” when i insert my Vodafone Simcard it says invalid Sim Card and when i remove the Sim it says “Insert a Valid Sim card with no Pin lock to activate the Phone”, My Baseband is 05.12.01 and the bootloader is 6.4. Should i try using a turbo sim? or is there any other way to get the phone working again?I stay in India..please help
Hi.. nice to see this article, and I am still waiting on JB tools for 3GS + new bootrom (and fresh JB) on 4.0.. not sure how long more it would take
…
Hi Simon,
Gooooood job you did regarding the iOS 4 jailbreak process. We do ‘preciate your efforts and that of The Dev Team & other developers out there.
I’ve read that iOS4 makes the iphone 3G really slow. Is that true? Any body intimated you regarding this?
Steve
21. Confirm “OK”. Hold down “Option” button and click “Restore”. You will be prompted to select the firmware file. Remember to select the custom firmware file.
I did everything and when I got to this step I confirmed with OK. Where is the option button. When I clicked restore I just restored the phone from I tunes without being able to use Iphone2,1_4.0_8A203_Custom_restore.ipsw.
thanks in advance for any help
Exactly the same problem happened to me, so, what i did was copying the custom IOS4 image created by pwnage to a PC with Microsoft Windows OS, and i did the same thing that the guide said, but when i clicked the restore button in iTunes i simultaneously press the shift key from the keyboard, so it let me choose a file from the computer instead of connect to apple site. oh, other thing, i disconected my PC from internet before the whole process.
Sorry, i’ve found a better solution
… Just do everything as this guide say, and in the moment that you have to click the restore button on Mac iTunes, click it but with the ALT key from the keyboard pressed simultaneously, this will let you choose the custom IOS4 image created before by pwnage tool.
Sorry, i’ve found a better solution
… Just do everything as this guide say, and in the moment that you have to click the restore button on Mac iTunes, click it but with the ALT key from the keyboard pressed simultaneously, this will let you choose the custom IOS4 image created before by pwnage tool.
I get to the step where my I’m building the custom ipsw file and I get the message, Sry, I haz fail. What’s up? I have a jailbroken 3G and am wanting to upgrade to 4.0 from 3.1.2 and my modem firmware is 04.26.08. Thanks for any help/suggestions.
@John,
Did you download the correct file? Make sure you are using the firmware file for iPhone 3G instead of 3GS.
Hi Simon, I followed your guide, and everything went smooth, but iTunes will not restore the file, it did not go pass the “preparing iphone for restore“ phase, then it showed me an error message (1604). I tried restoring it on another Mac, but the same error was shown.
What can I do?
Thanks,
Hi Simon,
I am not able to sync my cydia apps (like Navigon, Tom tom etc) with Itune. I am have Iphone 3g gb and running new verios IOS4. I am trying to sync everything from my other iphone to this iphone, but it is not showing cydia apps. DO you know any solution for this problem or anybody else here is experiencing same problem?
Thanks,
Hi Simon,
I am not able to sync my cydia apps (like Navigon, Tom tom etc) with Itune. I am have Iphone 3g gb and running new verios IOS4. I am trying to sync everything from my other iphone to this iphone, but it is not showing cydia apps. DO you know any solution for this problem or anybody else here is experiencing same problem?
Thanks,
@Ansari,
iTunes won’t sync the cydia apps. You’ll need to backup the cydia apps manually or via Pkgbackup.
hey simon…I still have the 2G iphone….(unlocked and jailbreak firmware 3 )
can I use this to jailbreak the newest version???
@Ashley,
Apple has ended the support of iPhone 2G for iOS4. So you are able to upgrade to the latest version of iOS.
Simon,
I currently use a 2G phone. I understand I can’t upgrade it to iOS4. Next week I will get a 3GS and will jailbreak and unlock it and use iOS4 on it. Will I be able to sync two iPhones on my iTunes account if one is a 2G using iOS3 and the other is a 3GS using iOS4? I’d really appreciate and knowledge/advice you have regarding that. Thanks a lot.
Jeffrey
i have same problem sonia minino, it shown error message 1601.i have 3gs 3.1.3 baseband 05.12.01 jailbroken before,please help me