How To Jailbreak Your iPhone 4, iPhone 3GS Using PwnageTool For iOS 4.3.3 (Mac)

Jailbreak iOS 4 on iPhone 3GS

iPhone Dev Team has just released PwnageTool for Mac, which allows users who want to jailbreak and also unlock their iPhone to update their iPhone with a pre-jailbroken iOS 4.3.3 while preserving the baseband from getting upgraded so that it can be unlocked using Ultrasn0w.

This guide will provide iPhone 4 and iPhone 3GS users with step-by-step instructions to update and jailbreak their iPhone with iOS 4.3.3.

Some important points before the step-by-step instructions:

  • Please note that jailbreaking your iPhone may void its warranty so proceed with caution.
  • Don’t forget to backup your iPhone before you proceed. You can refer to this post for instructions on how to backup your iPhone.
  • If you’ve jailbroken your iPhone then you can use jailbreak apps such as AptBackup, PkgBackup or xBackup from Cydia to take a backup of all the jailbreak apps and tweaks so you can reinstall them easily after successfully jailbreaking your iPhone rather then installing them individually.
  • Please ensure that your iPhone has enough charge.
  • This guide is only for iPhone 4 and iPhone 3GS users.
  • iPad, iPod Touch and iPhone users who don’t care about unlocking or preserve their iPhone’s baseband can use Redsn0w to jailbreak their iOS device on iOS 4.3.3 as it is a lot easier.
  • PwnageTool works only on Mac OS X. Windows users should use Sn0wbreeze, which unofficial version of PwnageTool for Windows. Checkout this step-by-step guide.
  • Users who want to unlock their iPhone:
    • PwnageTool does not unlock your iPhone.
    • You can use Ultrasn0w to unlock your iPhone after you have successfully updated and jailbroken your iPhone  with iOS 4.3.3.
    • But there is a catch. Ultrasn0w 1.2.3 can only unlock the following basebands (you can check the baseband by going to Settings –> General –> About –> Modem Firmware):
      • iPhone 4 baseband – 01.59.00
      • iPhone 3GS basebands – 04.26.08, 05.11.07, 05.12.01, 05.13.04 and 06.15.00.
    • So if your iPhone is currently on baseband mentioned above then PwnageTool 4.3.3 will allow you to create a custom pre-jailbroken iOS 4.3.3 and preserve the baseband so that you can unlock your iPhone using Ultrasn0w 1.2.3.
    • If you accidentally upgraded your iPhone 4 with iOS 4.3.3/iOS 4.3.2/4.3.1/iOS 4.3/ iOS 4.2.1/ iOS 4.1 then its baseband would have got upgraded to 02.10.04/ 03.10.01/ 04.10.01. Unfortunately, 02.10.04, 03.10.01, 04.10.01 basebands for iPhone 4 cannot be unlocked nor can it be downgraded currently.
    • Similarly, if you accidentally upgraded your iPhone 3GS with iOS 4.3.3/iOS 4.3.2/4.3.1/iOS 4.3/ iOS 4.2.1/ iOS 4.1 then its baseband would have got upgraded to 05.14.02/ 05.15.04/ 05.16.01/ 05.16.02. Unfortunately, 05.14.02, 05.15.04, 05.16.01, 05.16.02 basebands for iPhone 3GS cannot be unlocked nor can it be downgraded currently.
  • After the jailbreaking process is complete, do not forget to checkout our article on tips to keep your iPhone secure. Also, remember to change the password of your jailbroken iPhone.
  • Please read the instructions carefully especially the ones highlighted in bold.

If you meet the requirements mentioned above then you can proceed with the step-by-step instructions to jailbreak your iPhone using PwnageTool.

Step 1: Download PwnageTool from here and save it in a folder named “Pwnage” on your Mac desktop.

Step 2: You also need to download the iOS 4.3.3 firmware file (use Firefox or Chrome to download the firmware file instead of using Internet Explorer or Safari):

iOS 4.3.3 firmware file for iPhone 4 users (iPhone3,1_4.3.3_8J2_Restore.ipsw)

iOS 4.3.3 firmware file for iPhone 3GS users (iPhone2,1_4.3.3_8J2_Restore.ipsw)

Step 3: Double click and launch the PwnageTool. This will create a PwnageTool icon that you can click and drag into the Pwnage folder.

Jailbreak iPhone - PwnageTool

Step 4: Double click on the PwnageTool icon to launch the application. You will be presented with a warning. Click ‘OK’ to proceed.

Step 5: The PwnageTool window will now open. On the top menu bar, click on the Einstein icon to select “Expert mode“.

Jailbreak iPhone

Step 6: You will also need to select your device from the next screen. Click on the iPhone 3G, 3GS, 4 picture to select the model. Click the blue arrow button at the bottom-right side of the window to continue.

Jailbreak iPhone

Step 7: The application will now ask you to “Browse for IPSW“. If the application does not automatically pick the appropriate IPSW, you may click on the ‘Browse for IPSW‘ link and select the IPSW file (iPhone 4 users: iPhone3,1_4.3.3_8J2_Restore.ipsw and iPhone 3GS users: iPhone2,1_4.3.3_8J2_Restore.ipsw) that you have saved on your desktop Pwnage folder. Click on the blue arrow button to proceed.

Step 8: You will now be shown the Firmware bundle customization page. Click on ‘General‘ and press the blue arrow button to continue.

Jailbreak iOS 4 on iPhone 3GS

Step 9: In ‘General Settings‘, you will find an option that reads ‘Activate the phone‘. Check this option if you are NOT using an official iPhone carrier. Deselect the option if you are with an official network carrier. Press the blue arrow to proceed.

Jailbreak iOS 4 on iPhone 3GS

Step 10: In the ‘Cydia Settings‘ window, click on the ‘Download packages‘ tab and press ‘Refresh‘. This will display all the available packages. Select the ones you want (OpenSSH and OpenSSL) and then click on the blue arrow button.

Jailbreak iOS 4 on iPhone 3GS

Step 11: Now click on the ‘Select Packages‘ tab. You will see the selected packages displayed here. Press ‘Select All‘ and click on the blue arrow button to continue.

Jailbreak iOS 4 on iPhone 3GS

Step 12: The ‘Custom Packages Settings‘ window will list package settings for your custom .ipsw. Click on the blue arrow button to move to the next step.

Jailbreak iOS 4 on iPhone 3GS

Step 13: Here you have the option to change logos for Boot and Recovery. You can choose the default images or click on browse to provide your own logos. Do note that the images need to be in grayscale/RGB with a maximum dimension of 320×480. Once selected, press the blue arrow button to continue.

Jailbreak iOS 4 on iPhone 3GS

Step 14: You are now ready to start the Pwnage process. Click on the Build button to select it and then click on the blue arrow to start the Pwnage process.

Jailbreak iOS 4 on iPhone 3GS

Step 15: The application will now prompt you to save your custom .ipsw file. Save the file in the Pwnage folder on your desktop. Save the file with a suffix Custom_Restore so that you can easily identify it. The IPSW file will take close to ten minutes to be completely built.

Jailbreak iOS 4 on iPhone 3GS

Step 16: You will be prompted to enter your administrator credentials. Enter the details and click ‘OK’.

Step 17: You will then be prompted if your iPhone has been Pwned before, click on “No”.

Jailbreak iOS 4 on iPhone 3GS

Step 18: After the custom ipsw has been built you will be asked to connect your iPhone to the computer. Once it detects your device PwnageTool will guide your through the steps to putting your iPhone into DFU mode.

Jailbreak iOS 4 on iPhone 3GS

Press and hold the power and home buttons for 10 seconds.

Jailbreak iOS 4 on iPhone 3GS

Then release the power button and continue holding the home button for 10 seconds.

Jailbreak iOS 4 on iPhone 3GS

Once your iPhone is successfully in DFU mode, PwnageTool will prompt you to launch iTunes.

Jailbreak iOS 4 on iPhone 3GS

Step 19: iTunes will now prompt you with a message that reads “iTunes has detected an iPhone in recovery mode“. Press OK. Your iPhone is now in recovery mode.

Jailbreak iOS 4 on iPhone 3GS

Step 20 : While on the iTunes window, hold the Alt/Option key and click on the ‘Restore‘ button. (This is a VERY IMPORTANT STEP as just pressing the “Restore” button will result in restoring your iPhone with the latest firmware, which is iOS 4.3.3 firmware currently, by holding down Alt/Option button, allows you choose the custom iPhone firmware file).

Jailbreak iOS 4 on iPhone 3GS

Step 21: Navigate to the Pwnage folder on your desktop and select the custom IPSW file (REMEMBER the custom firmware file with Custome_Restore suffix) that was just built (and NOT the original firmware file). Click on the ‘Choose‘ button to proceed.

Step 22: iTunes will now restore the custom firmware on your iPhone. You will be asked to setup your iPhone either from a previous backup or setup as a new iPhone, select the backup you want for your device (ideally should be the most recent one). Wait for iTunes to finish, it should take 10 minutes or more. Once it is completed, your iPhone will reboot and should be updated with iOS 4.3.3. It should also be successfully jailbroken and you should find Cydia jailbreak app on your iPhone’s home screen.

If you’re new to the jailbreaking world and wondering what to do after jailbreaking your iPhone, checkout our jailbreak apps category page to find out the apps you can install on your iPhone using the Cydia app.


The PwnageTool download link have been updated with PwnageTool 4.3.31 that Dev Team released to fix a bug.

We hope you found this tutorial useful. Please let us know how it goes in the comments below.

Like this post? Share it!

  • OZ

    Quick Q. I am currently on 4.0.1 with a 05.13.04 baseband, jailbroken and unlocked with ultrasnow 1.2. I’ve been scared to update the firmware. Am I understanding this…If I download 4.3.3 and modify it with Pwnage Tool and custom upgrade will it preserve everything so I can stay unlocked? I’m on TMobile, thanks!

  • Brett

    I’ve got a 3gs that is on 4.3.1 and i tried to back up the SHSH files but no luck. I need to update my baseband to 6.15.00 and i need to update my firmware to 4.3.3. any help?

  • Lee

    Hello anyone pls help!!
    When iTune is trying to restore the custome IPSW
    It said ur device can not be restore with this built.
    Does anyone have this error message?

    • Deep

      i have the same problem !!!

      • Regina

        tinyumbrella solves it

        • Lee

          Hello pls tell me how to use Tinyumbrella to fix the problem thanks!

  • Lee

    @deep how did u fix the problem pls can u instruction me pls

  • Lee

    @ Regina how do u use Tinyumbrella to fix it? Can u tell me step by stem pls

  • anzeiger

    I tried Tiny umbrella but it doesn’t obtain SHSH 4.3.3. It says “This device isn’t eligible for the requested build. CYDIA DOES NOT HAVE YOUR SHSH FOR iPhone4 4.3.3 (8J2) THERE IS NO WAY FOR YOU TO GET THEM. SORRY. YOU ARE JUST TOO LATE
    Strange, given that IOS 4.3.3 has just come out. It saved SHSH fpr IOS 4.3.1, 4.3.2 and some older ones.

    Someone has a solution?

    • daicacon

      I have the same problem. Anyone able to solve this? my iphone isn’t eligible for the requested build either. Weird!!!

  • aaron

    keeps saying wrong bundle…PLEASE HELP!!!

  • anskotan27

    plss help.,.i jailbreak my 3gs on redsnow.,4.3.3.,but cydia is not working?what should i do.,??

  • anzeiger

    I don’t know why, but now itunes lets me restore 4.3.3 and also tiny umbrella can download and save the corresponding SHSH. So, try again! Maybe it was a problem at apple.
    Though it seems there is a new bug: the battery is drained in a few hours.

  • Augie

    Will this jailbreak work for the Verizon iPhone with 4.2.8 software? If not, how can I jailbreak my iPhone using my mac?

  • Dutch

    Can someone pls tell me how to use Tinyumbrella to fix the problem thanks! i have 4.2.8

  • willsdragon

    hi ive just jail breaked my phone 4,3,3, and now i cant make calls

    • QueenOfHearts

      I’ve lost signal too. Did you find a fix?

  • BenWah

    Ever since i upgraded from iPhone 3Gs from jailbroken 4.3.2 to 4.3.3 i have lost GPS!!!!! will there ever be a fix for this as i know many people have the same issue??! help help here would be appreciated as I’m kinda desperate without tom-tom working!

  • Yara

    Hello ever one. I am Yara from Colombia. I recently move to Shanghai, but can’t get my iPhone 4 to work. I own an iPhone 4, iOS 4.3.3 and baseband 4.10.1 can anyone tell me if there I a wy to jailbreak it, and later unlock it? Thank you