Ipad 2 9.3.5 Icloud Bypass Untethered //free\\ ⭐ Full HD
Bypassing the iCloud Activation Lock on an iPad 2 running iOS 9.3.5
is a common task for legacy device enthusiasts. Because the iPad 2 uses the
, it requires specific hardware exploits that differ from newer devices. Primary Untethered Method: Arduino & Sliver
The most reliable, permanent (untethered) method for the iPad 2 involves using an Arduino Uno USB Host Shield . This hardware combination is used to send the
exploit to the A5 chip, putting the device into a "Pwned DFU" mode that allows for deep system modifications. Required Hardware Arduino Uno USB Host Shield by AppleTech752 is the standard tool for this process. Process Overview Load the A5 exploit onto the Arduino using the Arduino IDE
Connect the iPad 2 to the Arduino via the USB Host Shield and put it into DFU mode.
Once the Arduino's LED indicates the exploit is successful, connect the iPad to a Mac running Sliver. Select the section and follow the prompts to "Delete Setup.app." : This method is untethered
, meaning the device will remain bypassed even after a reboot or a complete power drain. Alternate Method: Software-Only (Ramdisk)
Some community tools claim to offer a software-only bypass by booting a custom ramdisk to delete the file without an Arduino. : No extra hardware costs.
: These methods are often less stable on A5 devices and may require multiple attempts or specific macOS versions (like High Sierra or Mojave) to run successfully. Key Considerations & Limitations Functionality
: Bypassing Activation Lock typically results in a device that functions like an iPod. You can use apps and Wi-Fi, but iMessage, FaceTime, and iCloud sync
often remain disabled unless you use a "Premium" bypass service. iOS Version : This write-up applies specifically to iOS 9.3.5/9.3.6
. If you downgrade to older versions like iOS 6.1.3, the activation lock may re-trigger depending on the bypass method used. : Always download tools like
from official or highly-vetted community sources to avoid malware.
For step-by-step visual guides, many users refer to tutorials from AppleTech752 or community discussions on the
Bypassing the iCloud Activation Lock on an iPad 2
running iOS 9.3.5 is possible, but it requires a specific hardware-software combination to achieve a truly untethered state—where the device stays unlocked even after a reboot. The Core Challenge: A5 Chip Security The
uses the A5 chip, which is immune to the popular checkra1n exploit (which only supports A7–A11 chips). To bypass this device, you must use a hardware exploit known as checkm8-a5. Primary Method: Arduino + USB Host Shield
This is currently the most reliable method for an untethered bypass. It involves using an Arduino Uno
and a USB Host Shield to send a "pwned DFU" signal to the iPad, allowing you to delete the Setup.app file responsible for the activation lock. Required Hardware Official Arduino Uno
: It is highly recommended to use an original Arduino or a high-quality clone to ensure the exploit runs correctly. USB Host Shield: This attaches to the to allow it to communicate with the iPad.
DCSD Serial Cable (Optional but Recommended): If you want a "forever" solution that allows you to sign into a new iCloud account and use iMessage/FaceTime, you will need this cable to change the device's Serial Number (SN). Software Tools
An untethered iCloud bypass for the iPad 2 on iOS 9.3.5 is technically complex because the device uses the
, which lacks the easier "bootrom" exploits found in newer pre-A12 devices. While software-only tools like iRemove Tools exist, they typically provide a bypass, meaning the device will re-lock upon reboot. To achieve a truly untethered
(permanent) solution, you generally need specialized hardware or a specific downgrade path. 1. Hardware Method (Untethered)
The most reliable way to permanently bypass the activation lock on an iPad 2 is by using an Arduino Uno combined with a USB Host Shield
: This hardware is used to put the iPad into "pwned DFU" mode, allowing you to bypass the Reliability
: Once bypassed via this method, the device remains unlocked even after a reboot. 2. Software-Only Options If you do not have hardware, your options are more limited: Tethered Bypass : Tools like Sliver (by AppleTech752)
can skip the activation screen, but the device may lock again if it loses power or restarts. DNS Bypass
: This is a temporary "simulated" bypass. By changing your Wi-Fi DNS settings (e.g., to 104.154.51.7
for North America), you can access a web portal with apps and games, but it does not unlock the full iPad OS. MDM Bypass
: If your device is locked by a company (Mobile Device Management) rather than a personal iCloud account, certain "MDM Bypass" tools on Windows can provide an untethered fix for older iOS versions. 3. Downgrading for Better Stability
Once you have achieved an initial bypass (even tethered), users often downgrade to using tools like the Legacy iOS Kit
The iPad 2 on iOS 9.3.5 is a legacy Apple device released in 2011. Because it contains a 32-bit A5 processor, the methods required to bypass the iCloud Activation Lock are vastly different and more complex than those used for newer devices. 🛠️ The Core Problem: The A5 Chip
Modern iCloud bypasses rely heavily on software exploits like checkm8, which are triggered via a simple USB cable. However, the iPad 2 uses the A5 chip, which does not support standard USB DFU (Device Firmware Update) exploits without special hardware intervention.
To achieve an untethered bypass (where the device remains unlocked even after restarting it), you cannot simply run a standard software tool on Windows or Mac without jumping through physical hardware hoops. 🔓 Primary Methods for iPad 2 iCloud Bypass
If you are attempting to bypass the iCloud lock on an iPad 2 running iOS 9.3.5, the community relies on three distinct paths: 1. The Hardware Method (Arduino Host Shield)
This is the most reliable and historically documented method for achieving a true, permanent, and untethered setup.app removal on A5 devices.
The Concept: You use an Arduino Uno paired with a USB Host Shield.
The Process: The Arduino is programmed to send a specific exploit payload to the iPad 2 over a custom physical connection while the tablet is in DFU mode. This forces the device into a "Pwned DFU" state.
The Result: Once pwned, you use a computer to mount the iPad's file system, gain root access, and delete Setup.app. This yields a fully untethered bypass where the device skips the setup screen on boot. 2. The WiFi-Only Hardware Modification Ipad 2 9.3.5 Icloud Bypass Untethered
If your iPad 2 is a Cellular (GSM/CDMA) model, there is a physical hardware bypass available.
The Concept: Disconnecting or bridging specific resistors on the iPad's logic board.
The Process: By removing a specific resistor (often referred to as the "rdis" or board ID resistor), you effectively trick the logic board into believing it is a "WiFi-only" model.
The Result: When restored via iTunes, the Apple servers read the modified board ID, apply the WiFi-only firmware, and allow the tablet to activate without checking for the cellular IMEI's tied iCloud lock. 3. Software Bypass Scripts & Ramdisks
Developers have periodically released software packages claiming to put the iPad 2 into a ramdisk state via normal cables on macOS or Windows.
The Reality: These methods are notoriously unstable on the iPad 2 due to the finicky nature of the A5 connection.
The Tethered Risk: Many software-only bypasses for this specific generation result in a "tethered" state, meaning if the battery dies or you reboot the iPad, it will return to the locked activation screen. ⚠️ Massive Limitations Post-Bypass
Even if you successfully achieve an untethered bypass on an iPad 2 running iOS 9.3.5, you will face severe usability hurdles:
📉 App Store Incompatibility: iOS 9.3.5 is extremely old. Almost all modern applications require at least iOS 12 or 13. You will not be able to download standard apps directly from the App Store without utilizing secondary workarounds (like downloading older app versions tied to a purchased history).
🔒 No Services: Bypassing the setup app means the iPad will generally not communicate properly with official Apple iCloud services. iMessage, FaceTime, and iCloud Sync will likely fail to work.
🛑 Factory Resets: If you navigate to Settings and tap "Erase All Content and Settings" on a bypassed device, it will wipe the local exploit and lock you straight back to the original Activation Lock screen. 🛑 Avoid Scams and Malware
The legacy iOS bypass community is heavily saturated with fraudulent websites.
Never Pay for Software: True iCloud bypass methods for an iOS 9.3.5 iPad 2 are open-source and free, distributed by community developers on platforms like GitHub.
Avoid "One-Click" Paid Tools: Any website asking you to pay $30 to $50 for a software download to unlock an iPad 2 is almost certainly a scam or is charging you for freely available exploit scripts.
To proceed safely with the Arduino route, search communities such as the r/setupapp Reddit Forum to find active tutorials and verified payload files. iPad 2 iOS 9.3.5 untethered success (setup app removed).
Ultimate Guide: iPad 2 iOS 9.3.5 iCloud Bypass (Untethered Methods)
The iPad 2 remains a classic piece of hardware, but many users find themselves stuck on the Activation Lock screen with iOS 9.3.5 or 9.3.6. An "untethered" bypass is the holy grail because it allows you to reboot your device without needing a computer to reactivate the bypass every time. 1. The Arduino + USB Host Shield Method (Most Reliable)
For the A5 chip in the iPad 2, the most successful and permanent untethered bypass involves using hardware to exploit the "checkm8" vulnerability at a deep level.
The Hardware Requirement: You will need an Arduino Uno and a USB Host Shield.
The Concept: These tools put the iPad into a specialized state called pwnDFU mode.
The Benefit: Once in this mode, software like Sliver can be used to delete Setup.app. Because the file is physically removed from the system, the iPad will never ask for iCloud activation again, even after a reboot. 2. Software-Based Bypass (Windows/Mac Tools)
If you don't have access to an Arduino, several software tools claim to offer one-click solutions.
LPro Max & Sliver: These are popular in the community for "hacking" the activation process.
iRemove Tools: Often used for a "tethered" bypass, though newer versions aim for untethered stability on legacy devices.
Common Limitation: These often require the device to be jailbroken first. For iOS 9.3.5, you may need to use tools like Phœnix to achieve the initial jailbreak before running the bypass script. 3. DNS Bypass (Temporary/No Computer)
This is not a "true" untethered bypass but is useful if you just want to browse the web or watch videos without full system access.
How it works: You change the DNS settings in your Wi-Fi configuration to point to a custom server (e.g., 104.154.51.7 for North America).
The Catch: You are restricted to a web-based interface and cannot use the iPad's native apps like Settings or the App Store. 4. Official Apple Support Path
If you are the original owner or have a valid proof of purchase (receipt/invoice with the Serial Number), Apple can remove the lock for you for free.
Portal: You can submit a request through the Apple Activation Lock Support portal.
Success Rate: High, provided your documentation is legitimate. This is the only way to get a "clean" unlock that allows for full iCloud sync and future updates. Summary of Bypassing Methods Difficulty Permanence Arduino + Sliver Untethered High (Hardware required) Permanent Software Tools Untethered/Tethered Varies by tool DNS Bypass Server-based Apple Support Medium (Paperwork) Permanent/Official Preventing Future Locks
Once you successfully bypass the device, avoid clicking "Erase All Content and Settings" in the menu. On bypassed devices, this can sometimes trigger a relock or even "brick" the software, requiring a fresh restore via iTunes. Do you have an Arduino available, or
Bypassing the iCloud Activation Lock on an Go to product viewer dialog for this item.
(running iOS 9.3.5) involves either official Apple procedures or advanced third-party software tools that modify the device's filesystem. Method 1: Official Unlock (Permanent & Legal)
The only 100% untethered and permanent method that restores full iCloud and App Store functionality is through Apple.
Previous Owner: Ask the seller to log in to iCloud Find Devices and select Remove This Device.
Apple Support: If you have original proof of purchase (e.g., a receipt with the serial number), you can request an Activation Lock bypass code from Apple. Method 2: "Setup.app" Removal (Semi-Permanent/Untethered)
This method involves deleting the setup application file from the iPad's system. While "untethered" (meaning it survives a reboot), it is not a full unlock; you may face issues logging into iCloud or using some system services.
Hardware Requirements: Some versions of this bypass for A5 devices (like iPad 2) require an Arduino Uno Go to product viewer dialog for this item. and a USB Host Shield to put the device into "pwnDFU" mode.
Software Tools: Use specialized tools like Sliver (developed by AppleTech752) or Lockra1n. Procedure: Connect the iPad to a computer and enter DFU mode. Bypassing the iCloud Activation Lock on an iPad
Use the software to "pwn" the device and gain filesystem access. Select the option to Delete Setup.app.
The iPad will skip the "Hello" screen and boot directly to the Home screen. Method 3: DNS Bypass (Temporary & Feature-Limited)
This is a quick way to access the internet and basic apps without modifying the hardware or software, but it does not unlock the device.
On the Activate iPhone/iPad screen, press the Home button and select Wi-Fi Settings.
Tap the "i" next to your Wi-Fi network and change the DNS to one of these server IPs based on your location: USA/North America: 104.154.51.7 Europe: 104.155.28.90 Asia: 104.155.220.58
Tap Back, then Done, and select Activation Help. You will be connected to a custom portal where you can browse the web and watch videos. Critical Considerations
Limited App Support: The iPad 2 uses 32-bit architecture, which is largely obsolete. Many modern apps from the App Store will not work even if you bypass the lock.
Re-Lock Risk: In many bypass scenarios, performing a factory reset or updating the iOS version will cause the device to re-lock.
Security Risks: Third-party tools often require disabling security features or jailbreaking, which can make your device vulnerable.
Remove a device from Find Devices on iCloud.com - Apple Support
In the summer of 2026, the world had moved on. The iPad Pro M9 could project holograms, and the iPhone 18 had a neural implant interface. But Leo, a 17-year-old with a thrift-store wardrobe and a soldering iron for a heart, only cared about relics.
He found it at a garage sale, buried under mildewed romance novels: an iPad 2. The screen was scratched, the home button sticky, and the back casing dented like a hockey puck. Price: two dollars.
Leo saw past the grime. He saw iOS 9.3.5.
That night, in his attic bedroom plastered with discarded circuit boards, he powered it on. The Apple logo glowed—a ghost in the machine. Then, the wall: an "Activation Lock" email address he didn’t recognize. [email protected].
Most people would have recycled it. Leo smiled.
An "untethered, permanent iCloud bypass" for an iPad 2 on iOS 9.3.5 was the holy grail of legacy jailbreaking. Tethered bypasses existed—plug it into a computer every reboot, or it turned into a silver brick. But untethered? That meant freedom. That meant the device lived again, forever, without permission.
The forums told him it was impossible. "The exploits are patched," said a post from 2023. "The signing servers are dead," echoed another from 2024. "Give up," wrote the last active member in 2025.
Leo printed the old research anyway. He pored over checkm8, a bootrom exploit from a decade ago—but that required an A5 chip on specific versions. His iPad 2 had an A5. And 9.3.5? The last, most locked-down version. No one had bothered to untether it because the effort wasn’t worth the tiny user base.
That’s exactly why Leo wanted it.
His method was insane: chain three ancient exploits. First, Phœnix (for the kernel), then a custom heap-spray to bypass the iCloud daemon, and finally a persistent launch daemon that would trick the activation ticker into thinking Apple had blessed the device forever. Every reboot, the fake ticket would reload before the real iCloud check ran.
He coded for six days straight, surviving on instant ramen and the flicker of a desk lamp. On day seven, he pressed the button labeled "Deploy Untether."
The iPad 2 rebooted.
White screen. Apple logo. Then—
The setup wizard appeared. Not the iCloud lock screen. The actual home screen setup.
Leo’s hands trembled as he swiped. "Hello" in multiple languages. Then the familiar grid of icons: Notes, Calendar, Camera.
He opened Settings. iCloud: Signed Out. Activation Lock: Disabled.
He rebooted again. And again. Ten times. Every time—straight to the home screen.
Untethered.
He named the exploit "Icarus" because it flew too close to the sun and survived. That night, he documented everything—every line of code, every memory address, every prayer to dead servers—and posted it to a forgotten corner of GitHub.
Three weeks later, Leo’s inbox exploded. Not with hacker fame, but with emails from teachers in rural Appalachia, a children’s hospital in the Philippines, an elderly home in Nebraska. They all said the same thing: Thank you. These old iPads were paperweights. Now they play music for dementia patients. Now they help kids learn to read.
Leo looked at his dented, scratched, two-dollar iPad 2. It was displaying a grainy YouTube video of a 2014 cat—and it had never been happier.
Sometimes the best things aren’t new. They’re just waiting for someone who refuses to let them die.
Guide: iPad 2 (iOS 9.3.5) – Untethered iCloud Bypass
1. The Ultimate Bedside Radio (Spotify & Podcasts)
Modern Spotify doesn't work, but the Web-based legacy client does. Use Safari to navigate to open.spotify.com. It functions as a web app. Pin it to your home screen. You now have an untethered music streamer.
- Pro Tip: Download the TuneIn Radio legacy app (if you have an old Apple ID) or use the web player. Perfect for morning news or sleep sounds.
Conclusion
An iPad 2 on iOS 9.3.5 can indeed be bypassed untethered using the checkm8 bootROM exploit via tools like Sliver (free) or iBoy (paid). The result is a usable Wi-Fi tablet with most local apps working, but without iCloud services, cellular, or the ability to restore.
If you own the device legitimately and simply lost your Apple ID password, try Apple’s account recovery first – it’s safer and fully functional. Only use bypass methods as a last resort for a device you own but cannot otherwise unlock.
The Ultimate Guide to iPad 2 9.3.5 iCloud Bypass Untethered
Are you stuck with an iPad 2 running on iOS 9.3.5, and it's locked to someone else's iCloud account? Have you tried various methods to bypass the iCloud activation lock, but none of them seem to work? You're not alone. Many users have been struggling with this issue, and it's frustrating to say the least. In this article, we'll explore the concept of iCloud bypass, specifically for iPad 2 devices running on iOS 9.3.5, and provide a step-by-step guide on how to achieve an untethered iCloud bypass.
What is iCloud Activation Lock?
The iCloud activation lock, also known as the iCloud lock or Find My iPad lock, is a security feature introduced by Apple to protect iOS devices, including iPads, iPhones, and iPod touches. When you enable Find My iPad, your device is linked to your iCloud account, and if someone tries to erase or restore your device, it will require your Apple ID and password to activate it.
Why is iCloud Bypass Needed?
There are several scenarios where iCloud bypass is necessary:
- Second-hand devices: You've purchased an iPad 2 from someone, but it's still linked to the previous owner's iCloud account.
- Forgot Apple ID or password: You've forgotten your Apple ID or password, and you can't access your iCloud account.
- Device stuck on iCloud activation screen: Your iPad 2 is stuck on the iCloud activation screen, and you can't proceed.
Understanding iPad 2 9.3.5 iCloud Bypass Untethered
Before we dive into the bypass process, it's essential to understand the terms:
- Untethered: An untethered iCloud bypass means that you don't need to connect your device to a computer or use any third-party software to bypass the iCloud activation lock. The bypass is permanent, and your device will work normally.
- iOS 9.3.5: This is the firmware version running on your iPad 2.
Methods for iPad 2 9.3.5 iCloud Bypass Untethered
Several methods claim to offer an untethered iCloud bypass for iPad 2 devices running on iOS 9.3.5. Here are a few:
- DNS Bypass: This method involves changing the DNS settings on your device to bypass the iCloud activation lock. However, this method is not always reliable and may not work for everyone.
- Checkra1n: Checkra1n is a popular tool for jailbreaking and bypassing iCloud activation locks. However, it requires a computer and a USB connection.
- Odyssey: Odyssey is another tool that claims to offer an untethered iCloud bypass. However, it's still in the experimental phase and may not work for everyone.
Step-by-Step Guide to iPad 2 9.3.5 iCloud Bypass Untethered using DNS Bypass
While we can't guarantee the success of any method, we'll provide a step-by-step guide on how to perform a DNS bypass:
Warning: This method may not work for everyone, and there's a risk of bricking your device. Proceed with caution.
- Restart your iPad 2: Make sure your device is turned off.
- Connect to Wi-Fi: Turn on your iPad 2 and connect to a Wi-Fi network.
- Access iCloud activation screen: On the iCloud activation screen, tap on "i" or the "Info" icon.
- Configure DNS: Tap on "Configure DNS" and then select "Manual."
- Enter DNS server: Enter the DNS server address:
78.109.17.60(or other DNS servers you find online). - Save and activate: Tap on "Back" and then "Activate."
- Bypass iCloud activation: If everything goes well, you should now bypass the iCloud activation lock.
Limitations and Risks
Keep in mind that:
- No permanent fix: The DNS bypass method may not provide a permanent fix, and you might need to repeat the process if your device restarts or if Apple patches the exploit.
- Security risks: Using third-party tools or DNS bypass methods may expose your device to security risks.
Conclusion
The iPad 2 9.3.5 iCloud bypass untethered is a challenging task, but it's not impossible. While we've provided a step-by-step guide on how to perform a DNS bypass, we want to emphasize that there are risks involved, and there's no guarantee of success.
If you're not comfortable with the risks or if you're not tech-savvy, it's recommended to:
- Contact Apple support: Reach out to Apple support or visit an Apple Store for assistance.
- Seek professional help: Consult with a professional iOS device repair service.
Final Tips
Before attempting any iCloud bypass method:
- Backup your data: Make sure to backup any important data on your device.
- Use a reliable tool: Research and choose a reputable tool or method to avoid any potential risks.
By following this guide and taking the necessary precautions, you may be able to successfully bypass the iCloud activation lock on your iPad 2 running on iOS 9.3.5. However, we cannot guarantee any results, and you're proceeding at your own risk.
I can’t help with bypassing iCloud activation locks, removing device locks, or any instructions that enable unauthorized access to a device. That includes step‑by‑step guides, tools, or methods—tethered or untethered—for bypassing iCloud on an iPad 2 (iOS 9.3.5) or any other device.
I can, however, help with safe and legal alternatives:
- Explain how iCloud Activation Lock works and why it’s important for theft protection.
- Steps to recover access legally (proof of purchase, contacting the original owner, Apple Support procedures).
- How to check an iPad’s activation lock status before buying used devices.
- Options for legitimate repair, refurbishment, or disposal of locked devices.
- A high-level, non-actionable historical overview of bypass attempts and their legal/ethical issues.
Which of those would you like?
The saga of the iPad 2 (iOS 9.3.5) iCloud bypass is a long-standing tale in the enthusiast community, evolving from simple software glitches to complex hardware exploits. Because the iPad 2 uses the A5 chip, it lacks the newer "checkm8" exploit used for modern bypasses, making a true untethered solution a rare and technical feat. 1. The Early Glitches (2015–2017)
In the early days of iOS 9, users discovered "activation bugs" that allowed a fleeting look at the home screen. By rapidly switching languages or using VoiceOver while rebooting, some managed to slip past the lock for a few seconds. These were never permanent; they were merely windows used by researchers to find deeper holes in the system. 2. The Rise of "Setup.app" Deletion (2020–2022)
The most famous "untethered" method involves literally deleting the setup application from the iPad's internal files.
The Method: By putting the device into pwnDFU mode (often requiring an Arduino Uno and a USB Host Shield ), users could gain enough access to delete Setup.app.
The Result: Without the setup app, the iPad boots directly to the home screen. This is "untethered" because it survives a reboot. However, it often disables core services like iCloud sync, FaceTime, and iMessage because the device was never officially "activated" by Apple's servers. 3. The "Legacy" Downgrade Path
Because iOS 9.3.5 is the end-of-the-road for the iPad 2, many chose a different path: downgrading. Tools like iOS-OTA-Downgrader allow users to move the device back to iOS 6.1.3 or 8.4.1. At these lower versions, bypasses were often more stable, and the device ran significantly faster on its limited 512MB of RAM. 4. Modern Tools and Hardware Solutions Today, the community uses specialized toolkits:
Sliver & Arduino: Using an Arduino to trigger the exploit remains the "gold standard" for A5 devices like the iPad 2.
Hardware Modification: For cellular models, a "hardware bypass" involves removing a specific resistor on the logic board to turn the device into a Wi-Fi-only model, which sometimes cleared the activation lock during a subsequent restore.
Official Removal: Apple now offers an Activation Lock Support Request for owners who can prove they bought the device legally, often making these complex hacks unnecessary for original owners.
While these bypasses can bring a "bricked" device back to life, they often result in a "neutered" iPad—great for basic web browsing or reading, but disconnected from the full Apple ecosystem. Activation Lock - Support
You can turn off Activation Lock by signing in to iCloud or resetting your Apple Account password.
iPad 2 iOS 9.3.5 Hello screen Activation Lock. How remove it??
It's permanent. You can restart and even reset your ipad and it will never lock again until you update it or recover it in itunes. Reddit·r/setupapp
Title: Breathing New Life into the iPad 2 (iOS 9.3.5): The Untethered iCloud Bypass for Lifestyle & Entertainment
Published: April 20, 2026
Tags: iPad 2, iOS 9.3.5, iCloud Bypass, Untethered, Retro Tech, Entertainment Hub
The Current Landscape: Is an Untethered Bypass Real?
Yes. But with caveats.
For years (2018–2022), bypasses for the iPad 2 on 9.3.5 were largely tethered. You had to use a tool like Sliver 6.1 or Checkra1n every boot.
However, as of late 2023 and 2024, developers have released untethered solutions utilizing Checkm8 (a permanent bootrom exploit) combined with custom ramdisks that rewrite the com.apple.springboard.plist and activation files.
The best-known untethered method for iPad 2 9.3.5 currently involves:
- Jailbreaking with Phoenix or Checkra1n (depending on access to a Mac/Linux).
- Using a tool like iBoy Ramdisk or FRPFile to inject a "locked" sim killer or DNS relay that survives reboot.