How To Jailbreak Amazon Firestick
- Biohazard

- 5 days ago
- 5 min read

Unlocking / Jailbreaking Amazon Fire Stick (Guide)
Same ground truth as the Fire tablet: there's no iOS-style jailbreak for Fire OS. What you're actually going for falls into two tiers depending on your model and goals: Custom Launcher + Debloat, System-Level ADB Exploit, & True Root / Bootloader Unlock.
Tier 1: Custom Launcher + System-Level Debloat (All Firesticks)
This is what most people mean by "jailbreaking a Firestick." It doesn't require root and works on virtually every Firestick in circulation as of 2026.
What You Achieve
Replace Amazon's ad-infested home screen with a clean custom launcher (Wolf Launcher, ATV Launcher, etc.)
Block all Amazon OTA updates permanently
Disable Amazon's app blacklist — install any APK
Remove/disable Amazon bloatware (Silk browser, Freevee, Amazon Music, etc.)
Install third-party app stores (Aptoide, F-Droid)
Full Kodi, Stremio, SmartTube, and sideloading capability
Step-by-Step
Phase 1: Preparation
1. Enable Developer Options
Settings → My Fire TV → About
Tap Fire TV Stick (the device name) 7 times rapidly
You'll see "You are now a developer"
2. Enable ADB Debugging + Unknown Sources
Settings → My Fire TV → Developer Options
Turn ON ADB Debugging
Turn ON Apps from Unknown Sources
3. Install Downloader App
From the Firestick home screen, search for Downloader (by AFTVnews)
Install it. This is your sideloading gateway.
4. Note your Firestick's IP address
Settings → My Fire TV → About → Network
Write down the IP (e.g., 192.168.1.100)
Phase 2: Install Launcher Manager Mini
Option A: Via Downloader Code (Easiest)
Open Downloader app
In the URL field, enter: 730116 (this is the TroyPoint shortcode)
Scroll down to Utility Apps → select Launcher Manager Mini
Install it. Delete the APK file after install to save space.
Option B: Via ADB (from PC)
bash
# Connect to your Firestick over WiFi
adb connect 192.168.1.100:5555
# Confirm connection
adb devices
# Push and install the APK
adb install LauncherManagerMini.apk
Phase 3: Grant System Permissions (The Actual "Exploit")
Launcher Manager Mini needs elevated permissions to intercept the home button and replace the launcher. You grant these via ADB.
Method A: Using atvTools on Your Phone (No PC Needed)
Install atvTools from the Play Store or App Store on your phone
Open atvTools. Connect to your Firestick's IP (must be on same WiFi)
Accept the ADB debugging prompt on the Firestick
Tap the Shell tab at the bottom
Enter this command:
bash
adb shell pm grant com.wolf.minilm android.permission.WRITE_SECURE_SETTINGSOr, enter all three permission commands at once:
bash
pm grant com.wolf.minilm android.permission.SYSTEM_ALERT_WINDOW && pm grant com.wolf.minilm android.permission.READ_LOGS && dumpsys deviceidle whitelist +com.wolf.minilm
Method B: Using ADB from PC/Mac
bash
# Connect
adb connect FIRESTICK_IP:5555
# Grant permissions
adb shell pm grant com.wolf.minilm android.permission.WRITE_SECURE_SETTINGS
adb shell pm grant com.wolf.minilm android.permission.SYSTEM_ALERT_WINDOW
adb shell pm grant com.wolf.minilm android.permission.READ_LOGS
adb shell dumpsys deviceidle whitelist +com.wolf.minilmPhase 4: Install a Custom Launcher
In Downloader, search for "Wolf Launcher APK" or enter code 79015
Install Wolf Launcher, ATV Launcher, or FLauncher — any of these work
Open Launcher Manager Mini on the Firestick
Under Custom Launcher, select your installed launcher
In Launcher Manager settings, disable:
OTA App (com.amazon.tv.forcedotaupdater.v2)
ADEP App
Arcus App
Turn ON Factory Reset Protection to block Amazon's recovery
Reboot the Firestick
When it boots up, you'll see your custom launcher instead of Amazon's interface.
Phase 5: Block OTA Updates (Critical)
Amazon actively patches these exploits. If your Firestick updates, you lose everything.
In Launcher Manager Mini:
Already done if you disabled OTA App in Phase 4
Additional hardening via ADB:
bash
adb shell pm disable-user --user 0 com.amazon.device.software.ota
adb shell pm disable-user --user 0 com.amazon.tv.forcedotaupdater.v2
adb shell pm disable-user --user 0 com.amazon.device.software.ota.overrideRouter-level block (most robust): Block these domains on your router or Pi-hole:
amzdigital-a.akamaihd.net
amzdigitaldownloads.edgesuite.net
softwareupdates.amazon.com
updates.amazon.com
firs-ta-g7g.amazon.comWhat to Install Next
App | Purpose | How to Get |
SmartTube | YouTube without ads, SponsorBlock, background play | Downloader code: 28544 |
Kodi | Full media center | Downloader: kodi.tv/download |
Stremio + Torrentio | Streaming aggregator | Downloader + addon config |
Aptoide TV | Alternative app store | Downloader: aptoide.com |
Button Mapper | Remap remote buttons | Downloader or sideload APK |
Mouse Toggle | Mouse cursor for apps that need touch | Downloader |
VLC / Nova Player | Local media playback | Downloader |
Tier 2: True Root + Bootloader Unlock (Specific Models Only)
For actual root access — TWRP recovery, Magisk, LineageOS — you need a supported model and a hardware exploit.
Supported Models
Model | Codename | Method | Status |
Firestick 4K (2018) | mantis | kamakiri BootROM exploit | ✅ Fully unlockable |
Firestick 4K Max (2021) | kara | kamakiri variant | ✅ Working |
Firestick 3 (2020) | sheldon | BootROM exploit | ✅ Working |
Firestick Lite (2020) | sheldonp | BootROM exploit | ✅ Working |
Firestick 2 (2016) | tank | amonet exploit | ✅ Working |
Firestick 4K Max (2023) 2nd gen | — | ❌ Not currently unlockable | ❌ |
Firestick 2022+ / newer | — | ❌ Locked bootloader, no public exploit | ❌ |
Root Process (Example: Firestick 3 "sheldon")
Prerequisites:
A Linux machine (or live USB)
A USB-A to Micro-USB cable (data-capable)
Python 3, PySerial, PyUSB, ADB, fastboot installed
Setup:
bash
sudo apt update
sudo apt install python3 python3-serial python3-usb adb fastboot dos2unix
sudo systemctl stop ModemManager # Critical — ModemManager interferesThe exploit:
Download the exploit package from the XDA thread for your model
Short the test point on the Firestick PCB (varies by model — documented with photos on XDA)
Run the BootROM exploit:
bash
sudo ./bootrom-step.sh
# Script waits for device...
# Plug in the Firestick (powered off) with the test point shorted
# Script runs, unlocks the bootloaderFlash TWRP:
bash
sudo ./fastboot-step.sh
# Device reboots into unlocked fastboot mode
# TWRP is flashedIn TWRP:
bash
# Push LineageOS and GApps
adb push lineage-18.1-*-sheldon.zip /sdcard/
adb push gapps-arm-*.zip /sdcard/
# Flash via TWRP
adb shell twrp install /sdcard/lineageos.zip
adb shell twrp install /sdcard/gapps.zip
adb shell twrp wipe cache
adb shell twrp wipe dalvik
rebootDone — you now have LineageOS running on your Firestick
What Root Gives You That ADB Exploit Doesn't
Full system partition read-write access
Magisk for root management and modules
Custom kernels — overclock, underclock, USB OTG enablement
Complete Amazon removal — clean LineageOS with zero Amazon code
True OTA immunity — Amazon literally cannot push an update
AFTV-MM (Firestick Magisk Module) — Xposed-like modules for Fire OS customization
Full backup/restore via TWRP nandroid
Which Firestick Do You Have
Device Name | Generation | OS | Unlockable? |
Fire TV Stick (2024) | 3rd gen Stick? | Fire OS 8 | ❌ |
Fire TV Stick 4K Max (2023) | 2nd gen Max | Fire OS 8 | ❌ |
Fire TV Stick 4K Max (2021) | 1st gen Max | Fire OS 7 | ✅ BootROM |
Fire TV Stick (2020) | 3rd gen | Fire OS 7 | ✅ BootROM |
Fire TV Stick 4K (2018) | 1st gen 4K | Fire OS 6 | ✅ kamakiri |
Fire TV Stick Lite (2020) | Lite | Fire OS 7 | ✅ BootROM |
Fire TV Stick (2016) | 2nd gen | Fire OS 5 | ✅ amonet |
Practical Quickstart Summary
On any Firestick (no root):
Enable ADB debugging
Install Downloader → code 730116
Install Launcher Manager Mini
Grant permissions via atvTools or ADB
Install Wolf Launcher via Downloader
Set custom launcher in Launcher Manager
Disable OTA updates
Reboot — enjoy your de-Amazoned Firestick
On a supported model (root):
Follow the XDA BootROM exploit guide for your model
Short the test point, run bootrom-step.sh
Flash TWRP via fastboot-step.sh
Push LineageOS + GApps
Flash from TWRP
Install Magisk
Complete device ownership






Comments