How to Jailbreak iPhone 3GS, 3G OS 3.1.2 with PwnageTool 3.1.4 (Mac)

jailbreak-iphone-3gs-3g-os-312-pwnagetool1In this iPhone guide you will learn how to jailbreak iPhone 3GS, 3G running OS 3.2.1 using PwnageTool 3.1.4 on Mac OS X. This guide is for Mac users only because PwnageTool is available for Mac only and there’s no Windows version out there.

This Guide is for both iPhone 3GS and iPhone 3G. All steps for both models are same. The only difference is that for 3GS you need IPSW file for 3GS and in case of 3G you need IPSW for 3G to create Custom IPSW from it. Both files are linked in the guide.


If you’re still on OS 3.0 or updated to OS 3.1 using PwnageTool which means you’ve preserved you Baseband which means, along with jailbreak, you can Unlock your iPhone using UltraSn0w. On the other hand;

If you bought an iPhone with 3.1.x preinstalled or you have updated your iPhone to OS 3.1.2, you will be able to Jailbreak your iPhone only.

Jailbreak iPhone 3GS, 3G 3.1.2

Update your iTunes to latest version and Backup your iPhone.

Create a folder on your desktop and name it: Pwnage. Then download the following files and put them into Pwnage folder:

(Download through Firefox because Safari often auto extracts ipsw file) The iPhone OS 3.1.2 file is also available in All iPhone Firmwares post.


Jailbreak iPhone 3GS OS 3.1

Step 1
Double click PwnageTool_3.1.3 dmg file to mount it.


Click and drag the PwnageTool icon to Pwnage Folder you created and then open it from there.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-1-500x344Warning Box will Popup. Just hit the OK button.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-3-500x258Step 2
Make sure you select Expert Mode from Top menu


Step 3
Select your device. A big Green check mark will appear on the selected device.
Now hit the big Blue Arrow button at bottom right to proceed.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-5-500x413Step 4
On the next page, PwnageTool will automatically find the IPSW file. If not found then click “Browse for IPSW” button and select the downloaded IPSW file from the Pwnage folder. A check mark will appear next to it.


Then hit Blue Arrow Button to proceed.

Step 5
On the next page you will have 6 choices. Select the General and hit Blue Arrow Button to proceed.


Step 6
This is the most important step. Please read carefully about selecting activate the phone option. You will know you didn’t choose the right option if you don’t have signal after jailbreaking.

On the next Page you can decide your Root Partition Size where OS resides. Click activate the phone (only if you’re on unofficial carrier).

***Deselect Activate the phone option if you are on official carrier. For the 3.1.2 firmware you may have to increase the size of your root partition slightly for the IPSW build to be successful. may be 700MB.***

jailbreak-iphone-3gs-3g-os-312-pwnagetool-7-500x445The Bootneuter settings are greyed out for the iPhone 3GS and 3G. Click the blue arrow button.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-8-500x445The next screen will show the Cydia settings menu. It allows you to create custom packages so you do not have to manually install them later.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-9-500x451Go to Download packages tab.and hit the Refresh button to display all the available packages. Double click your desired package, it will be downloaded and will be available under the Select Packages tab.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-10-500x451When you have downloaded your desired packages, go back to Select Packages tab and check mark the ones you want.


then hit the Blue Arrow Button to proceed.

Custom Packages Settings will displays listed package settings for your custom IPSW. Leave these settings as is for now. Just click the Blue Arrow Button to proceed.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-12-500x445On the next Custom Logos Settings menu, you’ll be able to add your own images as boot logos. Click the Browse button to select your Boot logo and Recovery logo. I just use defaults so deselected all options.


Click the blue arrow button to continue.

Step 7
Now you are  ready to build your custom firmware. Click the build button to select it, then click the blue arrow button to proceed.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-14-500x445Step 8
You will be asked to Save your custom .ipsw file. Save it to the same Pwnage folder.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-15-500x400Step 9
PwnageTool will start building your custom firmware. Wait until it’s done.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-16-500x445If prompted enter your Administrator password and click the OK button.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-17-500x318Step 10
When prompted if your iPhone has been Pwned before, Click No. It allows for a more thorough restore.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-18Step 11
You will be asked to turn OFF the device. Make sure it is connected to the USB port.


Step 12
NOTE: If you’re already jailbroken (by whatever means), you don’t need to mess around with DFU mode at all.  Just create (or get from a friend) your custom IPSW and Option-Restore (Shift-Restore on Windows) to it via iTunes.  Don’t enter DFU mode at all.  Please make sure you are restoring to the custom IPSW, not the stock one from Apple!  For best results, use the latest iTunes (9.0.1) — which includes a nice new application organizer.

If it’s the first time you’re jailbreaking your iPhone, Be ready to follow directions now to get into DFU Mode.

  • You will be asked to hold the home button and the power button for 10 seconds.
  • Then, you will have to release the power button and hold the home button for 10 seconds to enter DFU.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-20-500x446jailbreak-iphone-3gs-3g-os-312-pwnagetool-21-500x446If you failed to follow the instruction, it will show you a message asking if you want to retry?. Click Yes.
Unplug the iPhone from the USB. Turn it OFF, then turn it back ON. Reconnect it to USB and turn OFF the iPhone when prompted.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-22When followed correctly, PwnageTool will display a message telling your that it successfully entered DFU mode. iTunes will also pop-up.

jailbreak-iphone-3gs-3g-os-312-pwnagetool-23jailbreak-iphone-3gs-3g-os-312-pwnagetool-24-499x211Step 13
In iTunes, hold the Alt/Option key and hit Restore.


Step 14
from the popup window, browse to the Pwnage Folder and select you custom .ipsw file that you just created and click Open Button.

Step 15
iTunes will now restore the firmware on your iPhone. This can also take up to 10 minutes.


When done. You have successfully Jailbreak iPhone 3GS/3G running iPhone OS 3.1.2.

Now in Order to Unlock your iPhone 3GS/3G OS 3.1.2 follow this old Guide which also works for OS 3.1.2 if you jailbreak iPhone using PwnageTool:

Unlock iPhone 3GS/3G with UltraSn0w

ATTENTION!!! iPhone 3GS and iPod Touch 3G users:

From Cydia and make sure you accept the option to store your ECID SHSH on Saurik’s server. It will put you on the safe side for future jailbreak. By doing this you’ll be able to downgrade to the firmware for which you saved your ECID SHSH on Saurik’s srver.

You can check for which firmware you have saved your ECID SHSH by looking at the top of the Cydia Home screen:


Have fun with iPhone OS 3.1.2 and don’t forget to Follow Us On Twitter.