top of page

How To Jailbreak Amazon Firestick

How To Jailbreak Amazon Fire Stick | Black Hat HQ

Unlocking / Jailbreaking Amazon Fire Stick (Guide)


Same ground truth as the Fire tablet: there's no iOS-style jailbreak for Fire OS. What you're actually going for falls into two tiers depending on your model and goals: Custom Launcher + Debloat, System-Level ADB Exploit, & True Root / Bootloader Unlock.


Tier 1: Custom Launcher + System-Level Debloat (All Firesticks)


This is what most people mean by "jailbreaking a Firestick." It doesn't require root and works on virtually every Firestick in circulation as of 2026.


What You Achieve


  • Replace Amazon's ad-infested home screen with a clean custom launcher (Wolf Launcher, ATV Launcher, etc.)

  • Block all Amazon OTA updates permanently

  • Disable Amazon's app blacklist — install any APK

  • Remove/disable Amazon bloatware (Silk browser, Freevee, Amazon Music, etc.)

  • Install third-party app stores (Aptoide, F-Droid)

  • Full Kodi, Stremio, SmartTube, and sideloading capability


Step-by-Step


Phase 1: Preparation


1. Enable Developer Options


  • Settings → My Fire TV → About

  • Tap Fire TV Stick (the device name) 7 times rapidly

  • You'll see "You are now a developer"


2. Enable ADB Debugging + Unknown Sources


  • Settings → My Fire TV → Developer Options

  • Turn ON ADB Debugging

  • Turn ON Apps from Unknown Sources


3. Install Downloader App


  • From the Firestick home screen, search for Downloader (by AFTVnews)

  • Install it. This is your sideloading gateway.


4. Note your Firestick's IP address


  • Settings → My Fire TV → About → Network

  • Write down the IP (e.g., 192.168.1.100)


Phase 2: Install Launcher Manager Mini


Option A: Via Downloader Code (Easiest)


  1. Open Downloader app

  2. In the URL field, enter: 730116 (this is the TroyPoint shortcode)

  3. Scroll down to Utility Apps → select Launcher Manager Mini

  4. Install it. Delete the APK file after install to save space.


Option B: Via ADB (from PC)


bash

# Connect to your Firestick over WiFi
adb connect 192.168.1.100:5555

# Confirm connection
adb devices

# Push and install the APK
adb install LauncherManagerMini.apk

Phase 3: Grant System Permissions (The Actual "Exploit")


Launcher Manager Mini needs elevated permissions to intercept the home button and replace the launcher. You grant these via ADB.


Method A: Using atvTools on Your Phone (No PC Needed)


  1. Install atvTools from the Play Store or App Store on your phone

  2. Open atvTools. Connect to your Firestick's IP (must be on same WiFi)

  3. Accept the ADB debugging prompt on the Firestick

  4. Tap the Shell tab at the bottom

  5. Enter this command:


bash

adb shell pm grant com.wolf.minilm android.permission.WRITE_SECURE_SETTINGS

  1. Or, enter all three permission commands at once:


bash

pm grant com.wolf.minilm android.permission.SYSTEM_ALERT_WINDOW && pm grant com.wolf.minilm android.permission.READ_LOGS && dumpsys deviceidle whitelist +com.wolf.minilm

Method B: Using ADB from PC/Mac


bash

# Connect
adb connect FIRESTICK_IP:5555

# Grant permissions
adb shell pm grant com.wolf.minilm android.permission.WRITE_SECURE_SETTINGS
adb shell pm grant com.wolf.minilm android.permission.SYSTEM_ALERT_WINDOW
adb shell pm grant com.wolf.minilm android.permission.READ_LOGS
adb shell dumpsys deviceidle whitelist +com.wolf.minilm

Phase 4: Install a Custom Launcher


  1. In Downloader, search for "Wolf Launcher APK" or enter code 79015

  2. Install Wolf Launcher, ATV Launcher, or FLauncher — any of these work

  3. Open Launcher Manager Mini on the Firestick

  4. Under Custom Launcher, select your installed launcher

  5. In Launcher Manager settings, disable:

    • OTA App (com.amazon.tv.forcedotaupdater.v2)

    • ADEP App

    • Arcus App

    • Turn ON Factory Reset Protection to block Amazon's recovery

  6. Reboot the Firestick


When it boots up, you'll see your custom launcher instead of Amazon's interface.


Phase 5: Block OTA Updates (Critical)


Amazon actively patches these exploits. If your Firestick updates, you lose everything.


In Launcher Manager Mini:


  • Already done if you disabled OTA App in Phase 4


Additional hardening via ADB:


bash

adb shell pm disable-user --user 0 com.amazon.device.software.ota
adb shell pm disable-user --user 0 com.amazon.tv.forcedotaupdater.v2
adb shell pm disable-user --user 0 com.amazon.device.software.ota.override

Router-level block (most robust): Block these domains on your router or Pi-hole:


amzdigital-a.akamaihd.net
amzdigitaldownloads.edgesuite.net
softwareupdates.amazon.com
updates.amazon.com
firs-ta-g7g.amazon.com

What to Install Next


App

Purpose

How to Get

SmartTube

YouTube without ads, SponsorBlock, background play

Downloader code: 28544

Kodi

Full media center

Downloader: kodi.tv/download

Stremio + Torrentio

Streaming aggregator

Downloader + addon config

Aptoide TV

Alternative app store

Downloader: aptoide.com

Button Mapper

Remap remote buttons

Downloader or sideload APK

Mouse Toggle

Mouse cursor for apps that need touch

Downloader

VLC / Nova Player

Local media playback

Downloader


Tier 2: True Root + Bootloader Unlock (Specific Models Only)


For actual root access — TWRP recovery, Magisk, LineageOS — you need a supported model and a hardware exploit.


Supported Models


Model

Codename

Method

Status

Firestick 4K (2018)

mantis

kamakiri BootROM exploit

✅ Fully unlockable

Firestick 4K Max (2021)

kara

kamakiri variant

✅ Working

Firestick 3 (2020)

sheldon

BootROM exploit

✅ Working

Firestick Lite (2020)

sheldonp

BootROM exploit

✅ Working

Firestick 2 (2016)

tank

amonet exploit

✅ Working

Firestick 4K Max (2023) 2nd gen

❌ Not currently unlockable

Firestick 2022+ / newer

❌ Locked bootloader, no public exploit


Root Process (Example: Firestick 3 "sheldon")


Prerequisites:


  • A Linux machine (or live USB)

  • A USB-A to Micro-USB cable (data-capable)

  • Python 3, PySerial, PyUSB, ADB, fastboot installed


Setup:


bash

sudo apt update
sudo apt install python3 python3-serial python3-usb adb fastboot dos2unix
sudo systemctl stop ModemManager  # Critical — ModemManager interferes

The exploit:


  1. Download the exploit package from the XDA thread for your model

  2. Short the test point on the Firestick PCB (varies by model — documented with photos on XDA)

  3. Run the BootROM exploit:


bash

sudo ./bootrom-step.sh
# Script waits for device...
# Plug in the Firestick (powered off) with the test point shorted
# Script runs, unlocks the bootloader

  1. Flash TWRP:


bash

sudo ./fastboot-step.sh
# Device reboots into unlocked fastboot mode
# TWRP is flashed

  1. In TWRP:


bash

# Push LineageOS and GApps
adb push lineage-18.1-*-sheldon.zip /sdcard/
adb push gapps-arm-*.zip /sdcard/

# Flash via TWRP
adb shell twrp install /sdcard/lineageos.zip
adb shell twrp install /sdcard/gapps.zip
adb shell twrp wipe cache
adb shell twrp wipe dalvik
reboot

  1. Done — you now have LineageOS running on your Firestick


What Root Gives You That ADB Exploit Doesn't


  • Full system partition read-write access

  • Magisk for root management and modules

  • Custom kernels — overclock, underclock, USB OTG enablement

  • Complete Amazon removal — clean LineageOS with zero Amazon code

  • True OTA immunity — Amazon literally cannot push an update

  • AFTV-MM (Firestick Magisk Module) — Xposed-like modules for Fire OS customization

  • Full backup/restore via TWRP nandroid


Which Firestick Do You Have


Device Name

Generation

OS

Unlockable?

Fire TV Stick (2024)

3rd gen Stick?

Fire OS 8

Fire TV Stick 4K Max (2023)

2nd gen Max

Fire OS 8

Fire TV Stick 4K Max (2021)

1st gen Max

Fire OS 7

✅ BootROM

Fire TV Stick (2020)

3rd gen

Fire OS 7

✅ BootROM

Fire TV Stick 4K (2018)

1st gen 4K

Fire OS 6

✅ kamakiri

Fire TV Stick Lite (2020)

Lite

Fire OS 7

✅ BootROM

Fire TV Stick (2016)

2nd gen

Fire OS 5

✅ amonet


Practical Quickstart Summary


On any Firestick (no root):

  1. Enable ADB debugging

  2. Install Downloader → code 730116

  3. Install Launcher Manager Mini

  4. Grant permissions via atvTools or ADB

  5. Install Wolf Launcher via Downloader

  6. Set custom launcher in Launcher Manager

  7. Disable OTA updates

  8. Reboot — enjoy your de-Amazoned Firestick


On a supported model (root):


  1. Follow the XDA BootROM exploit guide for your model

  2. Short the test point, run bootrom-step.sh

  3. Flash TWRP via fastboot-step.sh

  4. Push LineageOS + GApps

  5. Flash from TWRP

  6. Install Magisk

  7. Complete device ownership


Please Donate | Black Hat HQ
Enroll In Online Cybersecurity & Hacking Classes/Courses | Black Hat HQ

Comments


bottom of page