How to Jailbreak iOS 6.1.6 Using Redsn0w and P0sixspwn


If you’re an iPhone 3GS or iPod touch 4G user and have upgraded to iOS 6.1.6, which was released recently to fix a critical SSL bug then the good news is that it is still possible to perform an untethered jailbreak on your iOS device using a combination of Redsn0w and p0sixspwn.

In this article we show you how to jailbreak iOS 6.1.6 first using Redsn0w, and then converting it into an untethered jailbreak using p0sixspwn Cydia package.

Update (June 17): Please note a new version of p0sixspwn has been released which adds support for iOS 6.1.1, so you can use p0sixspwn directly to perform the untethered jailbreak on your device running iOS 6.1.6, instead of using this workaround. You can check out our step-by-step guide on how to jailbreak iOS 6.1.6 using p0sixspwn. If you’ve any problem with that method then you can use this workaround.

Here are some important points to note before you proceed.

  • This guide is meant for iPhone 3GS and iPod touch 4G users as iOS 6.1.6 is compatible with only these devices. If you’re looking for a jailbreak for iOS 7 or higher then checkout our jailbreak page for links to the latest tutorials.
  • Warning: If you depend on Ultrasn0w to unlock your iPhone, then DO NOT update to iOS 6.1.6.
  • Please note that jailbreaking your iOS device may void your warranty and hence proceed with caution and at your own risk.
  • Please do not forget to backup your iOS device before you proceed. You can refer to this post for instructions on how to backup your iOS device using iCloud or this one to backup your iOS device using iTunes.
  • Please ensure you are running latest version of iTunes.
  • This method uses an iOS 6.0 jailbreak with the iOS 6.1.6 filesystem, so it could cause some unknown issues.

You can follow these step-by-step instructions to jailbreak your iPhone 3GS and iPod touch 4G on iOS 6.1.6:

Step 1: Download Redsn0w 0.9.15b3 (Redsn0w 0.9.15 beta 3) from this link and save the application in a folder named “Redsn0w” on your desktop.

Step 2: Download iOS 6.0 firmware file (yes, the trick is to point Redsn0w to the iOS 6.0 firmware file and NOT iOS 6.1.6 firmware file) for your iOS device from the links mentioned below:

  • iPhone Note: Please ensure you download the correct iOS 6.0 firmware file for your iPhone model. Check this link if you need any help in identifying which iOS firmware file to download for your iPhone model.
  • iPod touch

Step 2: Connect your device to the computer and double click the Redsn0w zip file and extract the application. Navigate to the Redsn0w folder and launch the Redsn0w application.

Windows 7 users should run the exe in Windows XP compatibility mode (right-click on the Redsn0w exe and select Properties, then select the Compatibility tab and select Run this program in compatibility mode for Windows XP). Windows XP and Windows 7 users should run Redsn0w as ‘Administrator’ (right-click on the Redsn0w exe and select ‘Run as an Administrator’).

Step 3: Click on Extras button.

Step 4: Then click on the Select IPSW button. Navigate and select the firmware file download in Step 2. It should successfully identify it and inform you that it will be used in the rest of the session.

Step 5: Go back to Redsn0w’s main page and click on the Jailbreak button.

Step 6: Redsn0w will now start preparing the jailbreak data.

Step 7: You will now be prompted to select the jailbreak options. Make sure Cydia is selected and click on the Next button to continue. You can also select Enable battery percentage option.

Step 8: You will now be prompted to put your iOS device into the DFU mode. Turn off your device, however keep it plugged in to the computer.

Step 9: Click on the Next button. Redsn0w will take you through the necessary steps:

(a) Hold the Power button on your iOS device down for 3 seconds:

(b) Now simultaneously hold the Home button and keep the two buttons pressed for 10 seconds:

(c) Now release the Power button while keeping the Home button pressed until Redsn0w detects the device:

Note: Check this tutorial if you’re having trouble putting your device in DFU mode.

Step 10: Your iOS device should reboot now. Please remember to release the Home button.

Step 11: Your iOS device will reboot again and Redsn0w will now begin uploading the new RAM disk and kernel.

Step 12: You will be notified once the jailbreaking process is complete. Click on the Quit button to exit the application.

Step 13: The rest of the process will take place on your iOS device, wait for it to complete. Your iOS device will reboot once again (which could take approximately 5 minutes). You will now see the Home screen on your iOS device, but Cydia would still be missing, that’s because you still need to tether boot your iOS device using Redsn0w. So follow the steps mentioned below.

Boot tethered:

Step 14: Launch Redsn0w again.

Step 15: Click on Extras button.

Step 16: Then click on the Select IPSW button. Navigate and select the firmware file downloaded in Step 2.

Step 17: Then click on the Just Boot button.

Step 18: You will now be prompted to plug your iOS device to the computer and switch it OFF again. Follow the instructions and click on the Next button to move to the next screen:

Step 19: You will now need to put your iOS device into the DFU mode. Redsn0w will take you through the necessary steps:

(a) Hold the Power button on your iOS device down for 3 seconds:

(b) Now simultaneously hold the Home button and keep the two buttons pressed for 10 seconds:

(c) Now release the Power button while keeping the Home button pressed until Redsn0w detects the device:

Step 20: Redsn0w will recognize the iOS device in DFU mode and apply the limerain exploit (remember to release the Home button). Your iOS device will reboot and a pineapple logo will appear, indicating a tethered boot.

Step 21: Wait for the process to complete, once it is complete, you should see the Lock screen on your iOS device.

Your iPhone or iPod touch has now been successfully jailbroken and you should see Cydia on the Home screen. If you don’t find it on the Home screen, please don’t panic, search for it using Spotlight. The jailbreak is currently a “tethered” jailbreak,

Convert Tethered Jailbreak to Untethered Jailbreak using P0sixspwn:

Step 22: Launch Cydia. Since you’re launching Cydia for the first time, you may be prompted to do an essential upgrade. Please go ahead and do it, and then relaunch Cydia again.

Step 23: Tap on the Search tab, and search for p0sixspwn.

Step 24:  Tap on p0sixspwn from the search results, tap on Install, followed by the Confirm button.


Step 25: Tap on Return to Cydia when prompted.

That’s it, your iOS device has now been successfully (untethered) jailbroken.

Troubleshooting Tips:

1. Can’t find Cydia: 

If you can’t find Cydia on the home screen then double check you have tethered boot your device. Please ensure you’ve followed steps 14 to 21.

2. Unsupported IPSW:

If you get an error message informing you that the IPSW is not supported by this version of Redsn0w, then it means you’ve downloaded iOS 6.1.3 firmware file in step 2 instead of iOS 6.0 firmware file. Please download iOS 6.0 firmware file to jailbreak your iOS device running on iOS 6.1.3.

3. Cydia closes immediately:

If Cydia closes immediately when you try to launch it, it means that you haven’t installed p0sixspwn package from Cydia. Follow steps 22-24 mentioned above to solve this issue.

Related topics:

Please don’t forget to checkout our article on tips to keep your iOS device secure.

If you’re new to the jailbreaking world and wondering what to do after jailbreaking your iOS device, checkout our jailbreak apps category page to find out the apps you can install on your iOS device using the Cydia app.

Hope this helped. Please don’t forget to let us know how it goes in the comments and if you hit any issues start a thread in our forums for help.

Like this post? Share it!

Categories: Hacks, How To, iOS 6.1, iPhone 3GS, iPod touch 4G, Jailbreak iOS 6.1, Jailbreak iPhone, Jailbreak iPod touch, P0sixspwn, Redsn0w

  • Hokie36

    well, I jailbroke my 3GS following this article back in July. And today I was thinking to restore it to Apple’s original iOS. So I plugged the 3GS to my mac, used iTunes to restore the phone to 6.1.6. After the firmware was downloaded and extracted, my phone boot to recovery mode (the cable -> itunes logo) and got stuck there.

    Error message: “The (iPhone/iPod/iPad) “XXXXXX” cannot be restored at this time because the iPhone software update server could not be contacted or is temporarily unavailable.”

    Which direction should I look for solutions? I’m still kinda new to iOS. As a matter of fact, this 3GS was my only iOS device. And I got it in Dec 2013.

    Thanks for all comments and help

    • Hokie36

      BTW, I tried iTunes manual restore 6.1.3 and 6.1.0. Same error message. Using redsn0w 0.9.15b3 seems not possible as I can’t put the phone to DFU mode…

      • hokie36

        strange… after wrestling with DFU modes again and again, I booted the phone to OS!… I’ll see if I can restore it to factory settings

  • Kaleem Ullah

    hello every one i had an issue and problem in my i phone 3gs i installe 6.1.6 verision in it and jail break it using redsnow theaterd but when iturned it into unthetard using p0sixpawn package it restart and restarting again and again i install cydia with ipad base band because my carrier is not working with simple unthetared devise wht should i do

  • Giuseppe Curiale

    Siete i migliori !!!
    non hoi mai visto una guida fatta così bene e dettagliata!!

  • EBM9000

    This worked perfectly thank you so much! the P0ison client for windows kept crashing so I had to leg the 6.0 ipsw onto my 6.1.6 4th gen touch. htis worked PERFECTLY! Booting Tethered is too hard for me 😐 thanks!

  • Zahrin Afina

    why it says “that IPSW is not supported by this version of Redsn0w”
    (i downloaded 0.9.15 b3 and ipod 4 ios 6.0.0)

    help please

  • Rodolfo


  • gavin

    cydia isn’t showing up on my ipod but iv’e done steps 14-21 like 4 times now and it’s still not there

  • vp

    I have a problem When i trying to select a firmware it showing unsupported IPSW

  • Nick

    Same problem, how did you find Cydia?

  • Agustin .

    Hi, all processes are ok, but iphone cannot recognize any sim card, any suggestions?

  • Plz Help ma

    Do u have to download step 2? or can u just go straight from clicking jail break device?

  • ??? questionair

    the recommended firmware doesn’t work, use the one updated for the redsn0w version.

  • harrison

    help my phone frozen up and i can only turn on dfu mode

  • harry

    guys my phones stuck in recovery mode please give me reasons and solutions

  • MrsEmo Radke

    soooo, how long does redsn0w take when “moving applications”? just wondering because well lol i just wondered how long it should take. thnx

  • MrsEmo Radke

    ok, i did the second half, cydia wasnt there, i checked spotlight, still wasnt there, so i redid it, and im kinda worried about what its doing..

  • jcfom

    igot everything ok till openig cydua just close on me and safari looks blank unable to type any i deas? i got no erros on jailbreak or anything

  • devan

    i got atuck at step 9 it says it doesn’t detect a device in dfu mode and my ipod is plugged in and everything :(

  • luke

    mine gets stuck at when it says “waiting for bootup” I am on an ipod 4g 6.1.6

    • luke

      i mean waiting for reboot

  • Louis

    What’s wrong with this?

  • rajesh

    its not working… can i get the reasones

    select the details for the main source ofjail breaking

  • Justin Horton

    two step 2’s which one do i do
    lol jk


    I keep getting “exploit failed”

  • Frank

    i jailbroke my ipod 4 with ios 6.1.6 correctly and for some reason i cant get wifi because the wifi bar is dull or greyed out so i cant swipe wifi to on

  • momo

    i have a big probleme is unsupported ipsw and i dowloand 6.0 for iphone 3gs and i run in mode windows xp and Administrator !!! please help me

  • Rick Hebert

    Where do I get the firmware file at?