iOS jailbreaking is the use of a kernel and/or userland exploit to remove software restrictions imposed by Apple on devices running iOS and iOS-based operating systems.
While legacy jailbreaks modified the system partition, modern 'rootless' jailbreaks (iOS 15+) work around the Sealed System Volume (SSV) to grant root access (UID 0) and sandbox escapes without modifying the read-only root filesystem. This allows for the installation of software and tweaks unavailable through the App Store by localizing them within a writable directory named /private/preboot/$boot-manifest-hash$/procursus, accessed through the /var/jb symlink for quick accessibility.
A jailbroken device typically permits root access within the operating system and provides the right to install software unavailable through the App Store. Different devices and versions are exploited with modern tools like Dopamine or palera1n. Apple views jailbreaking as a violation of the end-user license agreement and strongly cautions device owners not to try to achieve root access through the exploitation of vulnerabilities.
While sometimes compared to rooting an Android device, jailbreaking bypasses several types of Apple prohibitions for the end-user. Since it includes modifying the operating system (enforced by a "locked bootloader"), installing non-officially approved (not available on the App Store) applications via sideloading, and granting the user elevated administration-level privileges (rooting), the concepts of iOS jailbreaking are therefore technically different from Android device rooting.
Motivation Expanding the feature set that Apple and its App Store have restricted is one of the motivations for jailbreaking. Apple checks apps for compliance with its iOS Developer Program License Agreement before accepting them for distribution in the App Store. However, the reasons for Apple to ban apps are not limited to safety and security and may be regarded as arbitrary and capricious. In one case, Apple mistakenly banned an app by a Pulitzer-Winning cartoonist because it violated its developer license agreement, which specifically bans apps that "contain content that ridicules public figures." To access banned apps, users rely on jailbreaking to circumvent Apple's censorship of content and features. Jailbreaking permits the downloading of programs not approved by Apple, such as user interface customization and tweaks.
Device customization Software programs that are available through APT or Installer.app (legacy) are not required to adhere to App Store guidelines. Most of them are not typical self-contained apps, but instead are extensions and customizations for iOS or other apps (commonly called tweaks). Users can install these programs for purposes including personalization and customization of the interface using tweaks developed by developers and designers, adding desired features such as access to the root file system and fixing annoyances, and making development work on the device easier by providing access to the file system and command-line tools. Many Chinese iOS device owners also jailbreak their phones to install third-party Chinese character input systems because they are said to be easier to use than Apple's.
In some cases, features introduced by Apple resemble features earlier introduced as jailbreak features for iOS and iPadOS, though implementations often differ. +Features introduced by Apple that resemble jailbreak tweaksApple featureJailbreak tweakiOS versionDescriptionTitleDeveloperOriginally released for5.0Emoji supportVmojiVintendo/ManChild TechnologiesiOS 4Keyboard shortcutsXpandrNicholas HaunoldDelete individual callsCall DeleteIArrays7.0Control CenterSBSettingsBigBossiPhone OS 2NCSettingsJamieD360iOS 5Translucent Notification CenterBlurredNCBackgroundPhillippe8.0Interactive NotificationsLockInfoDavid AshmaniOS 4biteSMSbiteSMS TeamiOS 5Third-Party KeyboardsFleksy EnablerSea CometiOS 6Predictive TextPredictiveKeyboardMatthias Sauppe9.0Cursor ControlSwipeSelectionKyle HowellsiOS 4Lowercase Keys in KeyboardShowCaseLance Fetters10.0Drawing on MessagesGraffitiIanPiOS 5Floating Notification CenterFloaterSkylerk99iOS 8Bubble NotificationsWatchNotificationsThomas FinchClear All Notifications3D Touch to Clear NotificationsMohammadAGOneTapClearRaveStickers in MessagesStickerMeAlexander LaurusSeparate Control Center PagesAuxoA3TweaksiOS 911.0Cellular Data ControlSBSettingsBigBossiPhone OS 2CCSettingsplipalaiOS 8Customizable Control CenterCChide/CCSettingsplipalaOnizukaMaximehipColored ControlsCreamCP Digital DarkroomOne-Handed Keyboard (iPhone)OneHandWizardTheAfricanNerd, sharedRoutineLow Power Mode in Control CenterCCLowPowerCole CabraliOS 10Notification design tweaksCleanNotification10Ayden Panhuyzen13.0Dark ModeEclipseGuillermo MorániOS 7NoctisLaughingQuollDownload manager in SafariSafari PlusBigBossiOS 8Redesigned volume HUDMeliorSparkDeviOS 7UltrasoundAyden PanhuyzeniOS 11Wi-Fi/Bluetooth settings in Control CenterWeatherVaneATWiiksUnlimited app download limit on Mobile DataAppstore UnrestrictiJulioverneThird-party Controller SupportnControlKevin BradleyiOS 1214.0Hide apps from Home screenPoofBigBossiOS 5, possibly olderCompact Call InterfaceCallBarElias LimneosiOS 7ScorpionEsquilliiOS 13App LibraryVestaSparkDevChanging CarPlay backgroundCanvasLeftyfl1pHome Screen WidgetsHSWidgetsdgh0stSmaller SiriSmallSiriMuirey0315.0Inset table design in settings appiKSettingsiKarwaniOS 11Separation AlertsProximitusLaughingQuollLow Power Mode (iPad)LPMPadiCrazeiOS 13FocusPureFocusDave Van WijkNotification PriorityContacyXCXiaoRedesigned NotificationsQuartLaughingQuollVelvetNoisyFlakeHiMyNameIsUbik16.0Taptic KeyboardTapticKeysSparkDeviOS 10Redesigned Now Playing InterfaceColorflowDavid GoldmaniOS 7ChromaflowRyan NairiOS 14Enhanced Lock Screen customizationComplicationsBen GiannisiOS 1217.0Camera App Composition FeaturesCameraTweakSamballiOS 6Crossfade in the Music AppCrossfadeH6nryImproved Auto-correctManualCorrect ProAaron Lindsay (aerialx)iOS 7Live VoicemailSuper VoicemailhAcxiOS 8Informative App Store DownloadsApp PercentpxcexiOS 10Change Haptic Menu SpeedBetter3DMenusdpkg_iOS 11Safari Private Browsing PrivacyBioProtect XSElias LimneosiOS 12Additional AirPods gesturesSiliqua ProLaughingQuollUsing Non-System AppsEvilSchemeLorenzoiOS 13Interactive WidgetsPowerWidgetGinsuiOS 14Additional CarPlay WallpapersAirawDcsyhiContact PostersPhoenixSouthernGirlWhoCode of titand3vVerification code auto-deletingNoMoreShortCodesArcasNotes App FormattingTextyle 3Ryan NairiOS 15StandBy ModePhotoncemckiOS 13.0Change Lock Screen Time WeightSimpleTimep2kdeviOS 12.018.0App icon customizationWinterboardJay Freeman (saurik)iPhone OS 2, possibly olderHide app labelsRemote-control mobile device from computerVeencyApp lockingLockdownipodtouchmaster05iPhone OS 3, possibly olderBioProtectXSElias LimneosiOS 12Unrestricted placement of app icons on gridGridlockchpwn, p0sixninjaiOS 5Text message schedulingKairosCP Digital DarkroomiOS 8Text input for SiriSpotlightSiriMohammadAGThird-party control center togglesSiloiOS CreatixiOS 11CCSupportLars Fröder (opa344)T9 dialerEasyDialerTweakiOSLock Screen quick-action replacementQuickActionsCameron KatriiOS 13Floating tabsFloatyTabiOSthememOdResizing and rearranging control center modulesBetterCCmiguellamouriOS 14LLM Siri integrationSiriPlusuckermark26.0Animated album art on Lock Screen backgroundFullscreen Album ArtbusheiOS 6CanvasLitesugiutaiOS 13Modifiable alarm snooze timesSleeperjoshuaseltzeriOS 8Charging ETAChargeTimeSticktroniOS 10CarPlay video playbackCarBridgeleftyfl1pDynamically hide home barAutoHideHomebarXAsterixiOS 11Windowed multitasking on iPad OSMilkyWayakusioiOS 12, possibly olderMessage app backgroundsChatUICreatureCodingiOS 13AirPods low battery notificationAirPods Case Low BatteryScenicJaguar101
Carrier unlocking Jailbreaking also opens the possibility for using software to unofficially unlock carrier-locked iPhones so they can be used with other carriers. Software-based unlocks have been available since September 2007, with each tool applying to a specific iPhone model and baseband version (or multiple models and versions). This includes the iPhone 4S, iPhone 4, iPhone 3GS, and iPhone 3G models. An example of unlocking an iPhone through a Jailbreak utility would be Redsn0w. Through this software, iPhone users will be able to create a custom IPSW and unlock their device. Moreover, during the unlocking process, there are options to install the iPad baseband to the iPhone.
Installation of malware Cybercriminals may jailbreak an iPhone to install malware or target jailbroken iPhones on which malware can be installed more easily. The Italian cybersecurity company Hacking Team, which used to sell hacking software to law enforcement agencies, advised police to jailbreak iPhones to allow tracking software to be installed on them.
Software piracy On iOS devices, the installation of consumer software is generally restricted to installation through the App Store. Jailbreaking, therefore, allows the installation of pirated applications. It has been suggested that a major motivation for Apple to prevent jailbreaking is to protect the income of its App Store, including third-party developers and allow the buildup of a sustainable market for third-party software. However, the installation of pirated applications is also possible without jailbreaking, taking advantage of enterprise certificates to facilitate the distribution of modified or pirated releases of popular applications.
Package managers
A package manager or package-management system is a collection of software tools that automates the process of installing, upgrading, configuring, and removing computer programs. For jailbreaks, this is essential for the installation of third-party content. There are a few package managers specifically for jailbroken iOS devices, of which the most popular are Cydia, Sileo, Zebra, Installer 5, and the now modern package manager Saily.
Security of the device Depending on the type of the jailbreak (i.e. 'rootless' or 'rootful'), different security structures may be compromised to various degrees. As jailbreaking grants freedom over running software that isn't confined to a sandbox typical to that of an App Store application, as well as modifications to system files, it ultimately allows for the threat of malware.
Users of a jailbroken device are also often forced to stay on an older iOS version that is no longer supported by Apple, commonly due to the unavailability of jailbreak on the newer versions. While using older versions of iOS is considered safe in most circumstances, the device may be vulnerable to publicly known security flaws.
In June 2021, ESET Research confirmed that malware did exist on one of the piracy repositories in the jailbreak community. The malware actively targeted iSecureOS to try to bypass the detection, but updates to the security app were quickly released and have mitigated the malware.
Comparison to Android rooting Jailbreaking of iOS devices has sometimes been compared to "rooting" of Android devices. Although both concepts involve privilege escalation, they do differ in scope.
Where Android rooting and jailbreaking are similar is that both are used to grant the owner of the device superuser system-level privileges, which may be transferred to one or more apps. However, unlike iOS phones and tablets, nearly all Android devices already offer an option to allow the user to sideload 3rd-party apps onto the device without having to install from an official source such as the Google Play store, although this is expected to change in September 2026 for Brazil, Indonesia, Singapore, and Thailand; and in 2027 worldwide. Many Android devices also provide owners the capability to modify or even replace the full operating system after unlocking the bootloader, although doing this requires a factory reset.