App of
the Day |
Editor‘s
Choice
MacStories: 2025 App of the Year | 2022 Lifetime Achievement |
Reader's Choice
“Easily one of the best iOS apps I’ve ever used.” – Merlin Mann
Best iOS App Upgradie Award
TIME Magazine: The Best iPhone
and
Android Apps
Macworld:
Eddy Award Winner
In the quiet town of Bakersfield, an old iPhone 4S sat in a drawer, its screen dark and its past forgotten. It was a relic of iOS 9.3.5, locked away by the invisible chains of an activation lock. For years, it remained a digital paperweight, its owners long since having lost the key to its iCloud heart.
One rainy afternoon, a curious teenager named Leo found the device. Determined to breathe life back into it, he ventured into the digital underground, searching for the "exclusive" secret to bypassing its lock. He had heard whispers of tools like Lockra1n and TunesKit iPhone Unlocker, which promised to break through the defenses of even the most stubborn legacy devices.
His journey led him through forum threads where experts debated the merits of using Arduino or Raspberry Pi Pico to exploit the A5 chip's vulnerabilities. Others suggested simpler, software-based paths like iRemove for older Windows versions or the A5_Bypass_OSS tool found on GitHub.
Leo meticulously followed a guide that involved jailbreaking the phone and even tricking the system by temporarily downgrading the iOS version in its system files to reach the home screen. It was a delicate dance of code and timing, but finally, the activation screen flickered and vanished. The iPhone 4S was awake, a testament to the persistent community that refuses to let old technology die.
While official Apple Support remained the only "legitimate" route, requiring a long-lost proof of purchase, Leo had found his own exclusive way to turn a forgotten brick back into a functioning piece of history. How to remove Activation Lock - Apple Support
The fluorescent lights of "Mobile Medic" buzzed overhead, a sound that had long since faded into the background of Elias’s life. He sat hunched over a workbench cluttered with micro-screws, prying tools, and the skeletal frames of smartphones past.
In his hand, he held a relic: an iPhone 4S.
It was pristine—the glass back unshattered, the steel band gleaming. It had come in via a box of "for parts" devices from an estate clearance. To the average customer, it was e-waste. To Elias, it was a puzzle.
He pressed the power button. The silver Apple logo bloomed on the screen, followed by the familiar setup screen. But when he reached the activation step, the roadblock appeared.
Activation Lock. This iPhone is currently linked to an Apple ID.
Elias sighed. Usually, this was the end of the line. Without the original owner's password, the phone was a paperweight. But the iOS version number in the corner caught his eye: iOS 9.3.5.
He sat up straighter.
Most activation locks were ironclad. But iOS 9.3.5 on a 32-bit device like the 4S was a strange, specific cracks in the armor. The security protocols were old, predating the modern, server-side dominance of Apple's current ecosystem. There was an exploit—a glitch—buried deep in the setup wizard that only existed on this specific firmware.
Elias had heard rumors on the dark forums of mobile repair. The "Doulci" magic, the server bypasses. Most were patched. But for 9.3.5? There was a window that hadn't been shut.
"Let's see if you work," he muttered.
He connected the phone to his battered MacBook. He didn't use official software. Instead, he opened a terminal window, his fingers flying over the keys to launch a custom script he’d archived years ago. It wasn’t a hack that removed the lock from Apple’s servers; it was a "bypass." A trick of the light. It fooled the Setup Assistant into thinking it had verified with Apple when it actually hadn't.
The progress bar on the phone screen stalled. Then, it flickered.
Connection Error.
"Come on," Elias whispered. He tapped the screen, navigating to the Wi-Fi settings. He selected his shop network, then quickly tapped the 'i' icon next to the network name. He scrolled to the DNS section.
Here was the magic. He cleared the existing numbers and typed in a specific sequence of IP addresses—legacy servers that had once acted as interceptors for the activation protocol.
He hit "Back."
The spinning wheel appeared. The phone reached out to Apple, was redirected, and hit the custom DNS.
Activation Error, the screen read.
Elias didn't stop. He tapped "Back" again, then "Next," rapidly cycling through the screens. It was a rhythm, a digital dance. The software was confused. It didn't know if it was locked or unlocked.
Suddenly, the "Activation Error" message vanished. The screen flashed white.
A new interface appeared. Not the "Enter Password" screen, but the "Set Up Your iPhone" screen.
Elias let out a breath he didn't know he was holding. He skipped the Apple ID sign-in. He skipped the Touch ID (useless on a 4S). He skipped Siri.
And then, the miracle happened.
The home screen materialized. The vintage, comforting blue gradient of iOS 9 wallpaper greeted him. The icons for Calendar, Photos, and the old Maps app were arranged in their perfect grid.
It wasn't a permanent fix—he knew that. If the user ever reset the phone, the lock would return with a vengeance. And iCloud features like FaceTime or iMessage would likely never work. But the device itself? The camera, the music player, the apps? They were alive.
He opened the Music app. Empty, but functional. He tapped the screen. Responsive.
He put the phone down, the adrenaline fading. He hadn't stolen data; he hadn't broken the law for profit. He had simply pulled a piece of hardware back from the grave. In a world where everything was locked, encrypted, and tethered to the cloud, he had found a single, fleeting moment of freedom.
Elias reached for a SIM card tray tool. He popped the old SIM, blew the dust off the contacts, and slid it in. One bar appeared in the corner.
"Welcome back," he whispered to the machine.
The iPhone 4S, forgotten by its owner and discarded by the world, was ready to make a call once more. iphone 4s activation lock bypass ios 935 exclusive
Review Title: A Mixed Bag of Tricks—Useful for Repurposing, but Not a Full Unlock
Rating: ★★★☆☆ (3/5)
I recently dug an old iPhone 4s out of a drawer, intending to give it to my kid as a music player. Unfortunately, it was stuck on the "Hello" screen with an Activation Lock, and it was running the maximum supported software for that device, iOS 9.3.5. I stumbled upon a tool claiming to be an "exclusive" solution for this specific scenario. Here is my experience:
The Process: The setup was a bit technical. It required putting the phone into DFU mode and using a modified version of a bypass tool (often leveraging the "merruk" or "doulCi" exploits from back in the day). It wasn't a simple "one-click" solution; I had to follow specific terminal commands and edit some host files on my PC to redirect the activation server.
The Result: To my surprise, the phone actually booted up past the activation screen. I got to the home screen, which felt like a major victory. I could use the camera, play music, and even connect to Wi-Fi.
The Limitations (The Catch): However, this is far from a perfect unlock, which is why I can't give it 5 stars.
The Verdict: If you have an old iPhone 4s running iOS 9.3.5 that is essentially electronic waste, this "exclusive" bypass method is a decent way to recycle it into a dedicated iPod Touch or GPS device. It breathes new life into the hardware.
However, if you are looking to use this as a daily driver phone or need full iCloud functionality, this will not work for you. It is a "semi-bypass" at best—great for repurposing hardware, but definitely not a security exploit for thieves.
Pros:
Cons:
For an iPhone 4s running iOS 9.3.5, "exclusive" bypass methods generally refer to hardware-based exploits or server-side DNS redirections that capitalize on the device's older A5 chip architecture. Hardware-Based Method (Arduino)
The most reliable "exclusive" method for the iPhone 4s involves using hardware to enter a pwned DFU state. Requirements: An Arduino Uno and a USB Host Shield.
The Exploit: This uses the checkm8-a5 exploit to bypass the initial boot sequence.
Software Tools: You will typically use software like Sliver on a Mac to delete the Setup.app once the device is in the correct state.
Outcome: This is often "tethered," meaning you may need to repeat steps if the device restarts, and cellular signal may not work. Software-Based Methods
If hardware is unavailable, these methods offer varying levels of limited access:
DNS Bypass: This is the simplest method and does not require a computer. Go to Wi-Fi settings and tap the "i" next to your network. Change the DNS to one of these regional servers: USA: 104.154.51.7 Europe: 104.155.28.90 Asia: 104.155.220.58 In the quiet town of Bakersfield, an old
Tap Back, then Activation Help. This redirects the phone to a custom server interface for web browsing and limited apps.
Third-Party Tools: Modern tools like Lockra1n or iRemove claim support for older iOS versions via automated scripts on macOS or Windows. Official Removal
Apple provides legitimate ways to remove Activation Lock if you are the rightful owner:
Bypassing the Activation Lock (or 9.3.6) is technically challenging because it is a 32-bit device. Traditional software-only tools that work on newer 64-bit iPhones (A11 and later) generally do not apply to this model. Reliable Methods for iPhone 4s Official Removal : The most secure way is to sign in with the original
and password. If you have proof of purchase, you can contact Apple Support to request an activation-lock bypass code. Hardware-Assisted Bypass (Arduino)
: Currently, the most common working community method for the iPhone 4s involves using an Arduino board
with a USB Host Shield. This hardware setup is used to trigger a "Checkm8" A5 exploit, allowing you to delete the file via tools like DNS Bypass (Limited Access)
: You can gain temporary access to basic apps (like browser and maps) by changing your Wi-Fi DNS settings to specific addresses (e.g., 104.154.51.7 ). This does
fully unlock the phone for calls or iCloud services but lets you use it as a basic media player. Important Considerations
Disclaimer: This information is provided for educational and legacy device recovery purposes only. Bypassing Activation Lock on a device you do not legally own may violate laws and Apple’s terms of service. Always ensure you are the legitimate owner.
Before we discuss the bypass, you need to understand why the iPhone 4s is easier than modern iPhones (iPhone 5s and newer).
Because of these two factors, an exclusive bypass exists that does not work on iOS 10, 11, or 12. It is exclusive to A5 devices (4s, iPad 2, iPad mini 1) running iOS 9.x.
Before the checkm8 exploit, there was a simpler, albeit buggy, method exclusive to iOS 9.3.5. This works because Apple’s activation servers on legacy iOS sometimes accept malformed requests.
This method is wildly inconsistent on iOS 9.3.5. Apple patched the Siri loop in later versions, but the 4s never got the patch. However, the "exclusive" nature of this trick is that it only works on iOS 9.x, not on 8.x or 6.x.
Some vendors claim an exclusive method because iOS 9.3.5 is less common than newer versions. In reality, the 4s cannot run anything higher, so any working bypass must target 9.3.5 specifically. There is no hidden backdoor for this version alone.
The most reliable, community-verified method for an iPhone 4s activation lock bypass iOS 9.3.5 exclusive comes from the jailbreak developer M1sta (LukeZGD) and tools like Sliver (from the checkm8.info team).
Here is the step-by-step breakdown.
Apple’s Activation Lock server-side validation means that without the original Apple ID password, you cannot fully remove the lock. No public, free, or paid tool exists that can permanently and completely remove the lock from a 4s on 9.3.5 without either:
Drafts gives you a new approach to using your iPhone, iPad, Mac, or Apple Watch, letting you write first and think about what to do with it later. Try it in your dock for a week, you’ll find you can’t live without it.
Drafts opens lightning fast and with support for capture via Siri, widgets, share extension, file import, and dictation - Drafts is like post-its updated for the smartphone era.
Actions make Drafts a Swiss Army knife for text. Integrate with a bewildering array of apps and services.
Check out our Drafts Directory for ready-to-use actions for third party apps and services and other extensions. Join the Drafts Community to get help, find integration guides and a regular flow of tips & tricks.