Restoring with blobs using FutureRestore

For support in English, ask for help on the r/Jailbreak Discord Server.

Notes

If you are on iOS 15.2 or newer on an A11- device, you should follow thisOpen in new window guide instead. Note that if you are on iOS 15.2 or newer and are on an A12+ device, you will not be able to downgrade, as there is currently no jailbreak or exploits which can be used to set nonce on A12+ devices running iOS 15.2 or newer.

Requirements

  • Blobs saved for the version you want to restore to
    • These blobs must be for your device only; you cannot use other people's blobs
  • A jailbroken device or an A10+ device on 15.0-15.1.1

DANGER

You must make sure that the latest SEP/BB is compatible to the version you are attempting to restore to in order to prevent bootloops! To do so, please consult the SEP/BB ChartOpen in new window. If a cell says "Compatible" then you are free to restore to that version.

Downloads

Getting Started (Jailbroken)

  1. Open your package manager on your jailbroken iDevice
  2. Add repo.1conan.comOpen in new window to your sources
  3. Download and install dimentio
  4. Download and install NewTerm2
  5. Proceed to Finding the generator

Getting Started (Non-Jailbroken)

  1. Navigate to the TrollStoreOpen in new window GitHub page and follow the installation instructions for your device
    • If "None" is listed and you cannot jailbreak or you do not have an A11- device, you will be unable to proceed further
  2. Once trollstore is installed, install the TrollNonceOpen in new window app through TrollStore
  3. Proceed to the next section

Finding the generator

DANGER

Make sure you do not edit the blob file! Doing so will make it invalid and unusable with futurerestore.

  1. Open your blob in a text editor and search for generatorGeneratorExample

  2. Note down the value inside the <string> field

    • This should be a 0x followed 16 characters which will be a combination of letters and numbers. This is your generator.

NOTE: If there is no generator value, try to remember which jailbreak you were using at the time of saving blobs. If you were using unc0ver, your generator is most likely 0x1111111111111111, and if you were using Chimera/Odyssey/Taurine, your generator is most likely 0xbd34a880be0b53f3

Setting the nonce (Jailbroken)

DANGER

If you're using unc0ver on iOS 14.6-14.8, you cannot use dimentio as libkrw isn't functioning. You should set your generator from unc0ver's settings instead.

  1. Open NewTerm 2 on your iDevice and type the following command, where [generator] is the value you just grabbed: su root -c 'dimentio [generator]'

  2. When asked for a password, enter your root password

    • By default, this is set to alpine, not your phone's password.
  3. Once the command executes, a lot of text should appear

  4. Near the end of the text, you should see the line Set nonce to [generator]

Setting the nonce (Unjailbroken)

WARNING

This method will not work for A9 devices. If you cannot jailbreak, you must follow thisOpen in new window guide.

  1. Open the TrollNonce app
  2. Select the Set Nonce option, then input the generator value you found in your blob into the box. Tap Set

On Computer

  1. Connect your iDevice to your computer

  2. Make sure that your computer is trusted by your device

    • Optionally, you can create a full backup of your device through iTunes or Finder
  3. Open FutureRestoreGUI on your computer

    • If prompted by Windows Defender, Windows Smartscreen or other anti-virus software, allow the program to run - it’s safe
  4. When opening FutureRestoreGUI, you should be greeted by this menu: image

  5. Click the Settings button and enable Futurerestore Beta, then click the Download FutureRestore button. This option is only available for macOS and Linux

  • Windows users must download the beta from hereOpen in new window. Once that is done, press Select FutureRestore Binary/Executable and navigate to where you have downloaded the beta. Select the file and click Open
  1. Click the Select Blob File... button and select your blob .shsh2 file
  2. Click the Select Target iPSW File... and select your .ipsw file
  3. Then click the Next button to navigate to the Options menu, make sure Extra Logs is enabled
  4. If you are not downgrading, then it is safe to enable Preserve Data in the options menu in order to keep data. However using it while downgrading may be dangerous
  5. Do not enable AP Nonce Collision on any modern devices
  6. Enable Custom Latest and input 15.7 into the box
  7. Enable No RSEP
  8. Click Next to navigate to the controls menu
  9. Click Start Futurerestore

If you experience any issues during the Process, look in the FutureRestore help page, if you still can't find a solution, ask in the #genius-bar forum on the r/jailbreak Discord ServerOpen in new window.