Downgrading

Downgrading

Jailbreak Staff — Contact us


Welcome! This post will be occasionally updated with information regarding downgrading. Last update: 2018-07-09

You can identify your device on this page.

Index

Click to jump!

———— Saving SHSH Blobs

———— Validating SHSH Blobs


Downgrade information

Click here to read about the current status. Scroll down to view downgrading options.

You can always downgrade to an iOS version that Apple is still signing if you have a computer with iTunes (e.g. in the library). Click here to read more. Find out which iOS versions are signed for your device via our bot's !shsh command or this post.

What You Need

  1. Valid SHSH blobs for the target iOS version you wish to downgrade to
  2. A jailbreak or tool that enables downgrading (patches or gets around tfp0) that is compatible with your current iOS version
  3. A signed and compatible SEP for your target iOS version if your device is 64-bit

If you have not saved SHSH blobs for the version you wish to go to for your devices and Apple is not signing that iOS version anymore, then it's game over. If you saved blobs, then all you need is a tool that allows you to use it or the patience to wait for someone to create this tool. In case of 64-bit iDevices, you also need to mind the SEP.

Saving SHSH Blobs

An "SHSH blob" is piece of data, generally stored as one file, that is unique to a specific iOS version and a specified device. It plays a role in validating the matching iOS version that the user wants to install. Since it's a valid signature, it is essential for installing firmware that is no longer signed by Apple. Once someone creates a method to downgrade, you can utilize these blobs to restore to a supported iOS version. 

You should always save and backup your blobs. You never know if you'll need them, you don't need to be on that version to save it and you can only save versions Apple still signs. You can view currently signed versions by using our bot's !shsh or !ipsw commands or viewing this wiki page. You can use the following tools to save your blob:

  • Our bot's !shsh command on Telegram on any device
  • 1Conan's TSS Saver website in any browser
  • Our System Info tweak on your jailbroken iDevice
  • Nullpixel's TSS Saver app on your jailbroken iDevice
  • Encounter's tsschecker fork on your computer, the tool that makes this all possible
  • Npupyshev's Ticketbox macOS app [Mirror | M2]
  • If you are jailbroken on a 32-bit iDevice, you can use Odysseus to obtain your on-device blobs (the SHSH blobs for the version you are currently on)
  • Notcom's TinyUmbrella, one of the first blob saving tools

To save your blobs, some devices need further specification. Our bot will guide you through the entire process. Tip: check here for a quick device overview or use !device.

Validating SHSH Blobs

You can validate your blobs by:



Downgrading

For downgrading you need a computer. It is highly advisable that you follow linked tutorials below or find another recent tutorial.


Tutorial: Downgrading with futurerestore. The below information may be outdated.


64-bit

Jumping is only possible to versions with a compatible SEP. The 10.3.3 SEP for A7 devices is compatible with the 10.2 SEP, the iOS 11.4 SEP is only compatible with 11.3 and up!

Futurerestore (encounter): [download latest] [Linux dependencies] [Mirror | M2 | M3]

NonceReboot1131UI [Mirror | M2] sets an SHSH blob's nonce generator (iOS 11 - 11.3.1)

Supports the following tools as they use tfp0: 5.1.1 (Absinthe 2), 6.0 - 6.1.2 (evasi0n), 6.1.3 - 6.1.6 (p0sixspwn), 7.1 - 7.1.2 (Pangu7), 8.1.3 - 8.4 (TaiG), 9.0 - 9.0.2 (cl0ver), 9.1 (Pangu9), 9.2 - 9.3.3 (jbme), 9.3.4 - 9.3.5 (PhoenixNonce), 10.0 - 10.2 (extra_recipe or yalu102), 10.0.1 - 10.3.3 (Meridian), 10.3 - 10.3.3 (g0blin) and 10.0 - 11.1.2 (nvnonce)

You need SHSH blobs with a generator for this method. Your device must be jailbroken with tfp0 patched. If you're jailbroken on a different version than above, use cl0ver to enable the patch.

Tutorials for jumping from: iOS 10 and iOS 11. Set the nonce generator for your blob. Use futurerestore to jump your A7 device to 10.2+ or any newer device to 11.0+.

The long original tutorial for jumping from 9.3.3 to 10.2 with futurerestore.


32-bit

If you are jailbroken, you can use Odysseus to obtain your on-device blobs (the SHSH blobs for the version you are currently on). If you have tips for this section, contact us!

Futurerestore v151 (tihmstar): [Manual install with dependencies] [Mirror | M2]

You need SHSH blobs for this method. You also need firmware keys for the target iOS version which might not be available for your device. If you have an iPhone 3GS / 4, iPod Touch 3 / 4, iPad, Apple TV 2 you can use limera1n for step 1. Newer devices must be jailbroken for this method. Alternative tutorial.

You can also use Beehind on Windows instead of Odysseus. [Mirror | M2]

A jailbreak is required if you saved SHSH blobs with a specified nonce. It is possible without jailbreak if you saved SHSH blobs without nonce for iOS 9. Enter DFU mode if you're not already on iOS 9.

Read more on the subreddit wiki.
Alternatively, you can opt to dualboot your iDevice.