This guide and tutorial will show you step by step how to jailbreak and unlock your iPhone 2G using PwnageTool for Mac. At the time I am writing this, only PwnageTool for Mac is available to jailbreak or unlock iPhone 2G 3.1. Tools for PCs should be available soon. For the latest information about jailbreaking methods (including iPhone 3G and 3GS), I suggest you read our jailbreak page.

UPDATE: This tutorial also works for iPhone OS 3.1.2. Instead of using the 3.1 firmware, simply use a 3.1.2 firmware.

Please make sure you read and understand everything before starting the process. If you’re new to jailbreaking, please take the time to follow the tutorial step by step. Problems often come when people want to go to fast or skip a step, so again, please take your time to read and understand every step.

1. First, make sure you have the latest version of iTunes installed on your computer. If not, update to the latest iTunes available.

2. On your desktop, create a folder called “jailbreak”. In this folder download and save the following files available from our downloads page:

  • PwnageTool 3.1
  • 3.1 IPSW firmware for iPhone 2G (iPhone1,1_3.1_7C144_Restore.ipsw), or
  • 3.1 firmware for iPhone 2G (iPhone1,1_3.1.2_7D11_Restore.ipsw) if you want to jailbreak 3.1.2
  • BL 3.9
  • BL 4.6

When downloading the 3.1 firmware, make sure you use FireFox and not Safari as Safari often brings up unwanted issues. To download PwnageTool, you will need a torrent downloader such as uTorrent.

3. Launch PwnageTool. Click OK to the warning message. Then choose “Expert Mode“.

4. Choose your device. It should be the one on the very left. A green check mark should appear when you click on it. Click the blue arrow to continue.

5. You will now be able to “Browse for IPSW“. Click on it and look for the 3.1 firmware you downloaded in step 2. Select the IPSW file and click the blue arrow to continue.

6. You should now be taken to the general menu where you have 7 different options. Choose “General“.

7. In the “General settings“, make sure that “activate the phone” and “enable baseband update” are checked. This is important. Again, make sure these 2 options are checked. Change the root partition size to about 600 MB and click the blue arrow to continue.

8. In the “Bootneuter settings“, check “Neuter bootloader“, “Unlock baseband“, and “Auto-delete“, then click the blue arrow to continue.

9. You should now be in the “Cydia settings“. This allows you to install packages so you don’t have to do it later via Cydia. I like to install my packages manually but feel free to select a few if you want to. I will skip this step. Click the blue arrow to continue.

10. In “Custom packages settings“, I recommend only checking Cydia. Icy is quite unstable so I don’t recommend installing it. Do as you want but make sure at least Cydia is checked. Click the blue arrow to continue.

11. You are now taken to the “Custom logos settings“. You can choose pre-selected logos or upload your own. I don’t recommend installing any. I suggest unchecking the 2 custom logos that are pre-selected, then click the blue arrow to continue.

12. You should now be back to the general menu. It is time to start building your custom firmware. Click “Build“, then click the blue arrow to continue.

13. If you haven’t pwned your iPhone before, you will have to upload the bootlader files you downloaded in step 2. Follow the instructions on the screen to upload BL 3.9 and BL 4.6.

14. PwnageTool will then ask you if “you have an iPhone contract that would activate normally with iTunes”. If you’re using an official phone carrier (ie AT&T in the US, 02 in UK, etc…), and don’t want to unlock your iPhone, click YES. Your iPhone will just be jailbroken. Click NO if you want to unlock your iPhone to use with other carriers.

15. You will now have to save your custom IPSW. Save it to your “jailbreak” folder on your desktop. PwnageTool will now create your custom IPSW which may take up to 15 minutes.

16. If asked for it, enter you admin username and password.

17. PwnageTool will ask you if your iPhone has been pwned before. Just say No.

18. This is a very important step. PwnageTool will ask you to turn off your device, the put it into DFU mode. After turning off your iPhone, follow the on-screen instructions to put your iPhone into DFU mode. Hold the power and home buttons for 10 seconds. Let go of the power button but keep holding the home button until you enter DFU mode. If you fail, PwnageTool will give you an error message and you will have the opportunity to start over this process until completed successfully.

19. Once your in DFU mode, launch iTunes if it hasn’t already launched automatically. It will tell you that iTunes has detected an iPhone in recovery mode. Click OK.

20. We will now restore your iPhone using the custom firmware you created. In iTunes, hold the Alt/Option key while clicking “Restore”. This is extremely important that you hold the Alt/Option key while clicking. A window will pop up and will let you browse for the custom firmware you created (which should now be saved in your “jailbreak” folder). Select it.

21. The restore will start, which may take up to 15-20 minutes. Once done, your iPhone will reboot.

Congratulations! You just jailbroke and unlocked your iPhone. If you have any question or comment, please leave a comment below.

  • Daniel

    i have download iPhone1,1_3.1.2_7D11_Restore.ipsw, then when the program ask to browse and then i got this “Wrong firmware bundle selected” …………

  • Olivier

    Works great thanks !

  • acarena


    MKLOVN you are a genius. for two days I’ve been trying with blacra1n and bootneuter. Everything would be fine , I would see the t-mobile connection on top but every time the emergency call page would take over and tell me that I have a different sim card. Until I downloaded the app you specified, installed it (on the iphone) followed its instructions, then download the diskaid (trial)went in the root (at the base of page that opens choose the root) and followed this your instructions. rebooted with my t-mobile sim and it works. Thank you again.

    Here are his Instructions: “this work for 11/13/09 iphone 2g 3.1.2 jailbroken with blackra1n. after bootneuter i had to install afc2add from cydia so i could ssh into iphone, and diskaid for my computer
    to access the root menu through usb. next i went root>private>var>root>library and made a copy of the lockdown folder to my desktop(just for safety reasons). next i removed the lockdown folder from device(some web sites
    keeped saying to replace it with another which you could download but that wasnt working for me so i just had to remove the lockdown folder from device and close disk aid). rebooted iphone and it work with my t-mobile sim. hope it helps. “

  • I had previously used redsn0w to unlock and jailbreak my iphone 2G with 3.0.1, which worked flawlessly.

    I followed the above instructions and was able to update to 3.1.2 without any issues.

    My additions to the above. Make sure you do a backup and sync before doing this as your entire iPhone will be wiped out and you will need to restore from a backup after the custom 3.1.2 update is applied.

    Also, take note of what Cydia apps you have and use so you can go back to Cydia and re-install them.

    I am a pre-paid AT&T user and this is the only way to use an iPhone on pre-paid. I’ve been very happy with this phone and both times I’ve done the jailbreak and unlock and followed the instructions, it’s worked and allows me to use my iPhone as a pre-paid phone.

  • joseph bondoc

    just download blackra1n and your headache will gone for sure

    so easy within 2 minutes and you will be very happy just follow this link


  • Zainab


  • loni

    when will this be availbale for windows?

  • loni

    When will this be avalibale for windows??

  • Claude

    Hi, I wanted to upgrade firmware on my 2G iphone, which I did I think! then had to re jailbreak it. All seem to go well, but at the end my phone is now in some sort of emergengy mode.
    It will make and receive call but I have no icons, so cant use txt, ipod or anything else.

    Any suggestions?


  • Julie Ajinkya

    #1) I was never prompted by Step # 14’s question about phone carriers, but everything else went fine–does this mean that the default is just jailbreaking the phone or that my phone was unlocked AND jailbroken?

    #2) After everything works, and ITunes asks to set up the phone as a new Iphone or restore with backup settings, what do I choose? If I want to choose the latter and save myself the hassle of entering all my information again manually, does this mean that it will restore it to pre-jailbroken/pre-unlocked status?


  • Claude


    I’m in New Zealand and have a 2G which I’ve been using on Vodafone network, it was jailbroken and unlocked.
    I’ve now upgraded firmware and it wont recognise my Vodafone sim card, if I stick the ATNT card back in, it recognise the phone and ask to be reactivated, which I cant do as I’m in NZ and ATNT dont operate here. So I put my Vodafone sim in and it wont recognise it or let me do anything.

    So! how do I re activate my iphone after it have been upgraded, unlocked and jailbroken
    with another sim than the original?

    Any and all suggestions welcomed.


  • Nj


    I had to use pwnage tool 3.14 dmg (not 3.1 as said in instructions, step 2) to upgrade to iphone 3.1.2.

    It also seems that step 13 is not needed for this upgrade as well.

    THANK 😀

  • sanjeev

    I have accidentally upgraded iphone 2G 3.1.2. Now I am not able to make calls due to “No Service”.

    However, my phone is unlock and jailbrack. Everything is working fine except call service.

    Guys, please help?

  • Claude

    Hey Sanjeev, Try re unlocking and jailbreaking it with Blackrain. worked for me.

  • Sanjeev

    Thanks for your response Claude

    I tried several time but still no hope…..

    any other suggestion????

  • Claude

    Hey Sanjeev,

    I had tried various others and it was Blackrain that worked for me.

    Try them all till you find one that works for you.

    Good Luck

  • Sanjeev

    Thanks you guys for response.

    I manage to get the solution of my problem “No Service”. I found that my SIM has some problem. I tried to used other SIM and its working.

    If any one of your are facing same problem please try to replace your SIM card.


  • worked fine. Thank you very much

  • Hi Pierre,

    How you manged to get the solution for your problem?

    Buy Flowers N Cakes

  • bolig

    i have the same question as Julie Ajinkya. the whole point of this was to unlock my phone in addition to jailbreaking it. is it unlocked by default now?

  • greg


  • andy

    Thanks for the instructions! I jailbroke my iPhone 2G (US / AT&T) — like for some people above, the process was slightly different than in the instructions, but it worked — put in the new sim (simyo, Germany), calls work fine.

    But no data service.

    Ran blackra1n: still no data service.

    Any advice?

    (Provider says I have data service; haven’t tried the SIM in a German data-enabled phone yet.)

  • Monica

    Same thing happened to me, I called my provider and they told me how to fix it from the settings.

  • david

    Thank you for the nice tutorial. My first gen iphone is jailbroken and unlocked now.

    – No 13 – it never asked for boot loaders
    – until iphone was updated to last firmware from apple, itunes gave me an error 1064 and would not restore.

  • Bryan

    I did it all untill the last step, it seemed like it was working then it gave me the 1600 error

  • Tessa

    Thank you SOOOOO much!!! I almost gave up, but now I have a phone that works!!!

  • Lena

    Thank you sooo much for fixing my phone! You’re awesome!