last update: 02 July 2024
- i am saddened to announce that this guide won't be updated anytime soon. i tried to do my best in order to update it and give you support for more than 2 years. but as of now, i'm focusing on bigger projects and i don't have time to follow this anymore.
this is a little repo that contains everything you need to dual boot your 64 bit iPhone, iPad or iPod Touch with unsigned iOS versions (only vulnerable to checkm8 devices can be dual booted for now) without blobs shsh2. this tutorial is valid only for macOS users.
note that this method doesn't work on iOS 15+. despite that, you still have some chances to dualboot your device with other iOS versions:
- if you're on iOS 15.x you can dualboot with tools like dualra1n or seprmvr64
- you must have a compatible chip
- if you're on iOS 16+, there are no methods for that right now. i'll try to update this giude whenever there will be a new method.
- if you have a device with an unsupported chip (compatible chips here), you have some options:
- if it's A6(X) or older, you can use tools such as CoolBooter
- if it's A12(X) or newer, there are no methods for that right now. i'll try to update this giude whenever there will be a new method.
you can find out if your device is compatible with this procedure based on its chip. you can simply search on internet what is the chip of your device and check if your chip is into this list.
- A7(X)
- A8(X)
- A9(X)
- A10(X)
- A11
- basically every checkm8 exploitable chip
The device must be on iOS 14.x or lower.
before starting, you also need to verify if the SEP of your iOS version (installed right now) is compatible with the version of iOS you want to dual boot. you can do this checking this file. finally, the last thing you have to verify is if you’re in a jailbreakable version of iOS 14 or older.
done all this, you’re ready to start! the first thing you have to do is…
for this step, you need to install checkra1n on your mac, and you have to jailbreak your device. you can find checkra1n here.
Divisé is a powerful iOS tweak made by MatthewPierson. it allows you to easily prepare your checkm8 vulnerable device to boot the second OS.
- download the tweak from the Dynastic Repo
- open the new Divisé app appeared on your home screen
- select the Dual boot option
- after the explain, click on Download IPSW
- you must select an iOS version compatible with your SEP (i know, it’s a big limitation)
- attend the finish of the process (it may take some time)
- at the end, click Back on the popup and after click on Dual boot device
- give all the needed confirms
- when the process is done, you can finally proceed to boot the second OS! do not click reboot on the popup, but read directly the next step of the process.
you have to put your device into a special DFU mode called PWNDFU mode. the process for this step is different for each chip. you can download a cool tool that automates this process for you by clicking here.
- download the ZIP file
- extract it and read the content of the "Tutorial Open Tool.txt" file to understand how can you open it
- connect your device (already put into DFU mode) to your mac
- start the process of entering pwndfu mode keeping the "Auto" option selected (unless you already know how to do it with the other options, that will let you save a bit of tries)
- If the process fail, just repeat it again. It's not a very reliable process and it's common to fail at the first tries. you can also try to unplug and then re-enter DFU mode before repeating the process. Years ago, there was a very simple (and i'd say better) guide linked here, but it seems that it's no longer online.
you must download on your mac the iPSW file for the iOS version you chose on Divisé.
- on this page, select your device model and download the right file.
Ramiel is another tool made by MatthewPierson that you can download here
- install it on your mac
- open it
- download all the necessary components
- click on Advanced
- select Boot Dualbooted OS
- click on it and write the number of the disk that appeared on the Divisé popup before entering in PWNDFU mode
- click now yes on each popup
- close the settings
- click on Boot Device
- click on Run checkm8 and attend
- this step is very critic for the process. in most cases, it will fail. if it happen, try again until it goes
- Select now the iPSW file previously downloaded and wait for the process to finish.
if all went well, your device should have booted into the dual boot partition. have fun with your 2nd OS!
remember to not set a passcode at the 2nd OS!! it will break the booting of the partition
remember also to not erase the content of the 2nd OS from the settings.