Last updated on December 1st 2023.
*#*#33284#*#*
being the most common.
Devices that (should) support WhatsApp's voice calls functionality have their KaiOS versions in bold.
I’d like to thank the team at PhoneCopy for collecting KaiOS phones’ information and making this table possible! Not sponsored, but definitely check them out.
Model name | Version | DBG | Note |
---|---|---|---|
Nokia 8110 4G | 2.5.1 17.00.17.01 | ✅ | |
Nokia 2720 Flip | 2.5.2.2 40.00.17.02 | ⚠️ | Debug-enabled on 2.5.2, requires permanent root via boot partition patching on 2.5.2.2 |
Nokia 800 Tough | 2.5.2.2 40.00.17.01 | ⚠️ | Debug-enabled on 2.5.2, requires permanent root via boot partition patching on 2.5.2.2 |
Nokia 8000 4G | 2.5.4 20.00.17.01 | ✅ | No engmode-extension apps, requires boot partition patching to root |
Nokia 6300 4G | 2.5.4 30.00.17.01 | ✅ | No engmode-extension apps, requires boot partition patching to root(excl. TA-1324 not rootable due to different PK_HASH ⇒ no substitute loader) |
Nokia 2720 V Flip | 2.5.4 10.00.17.12 | 🔒 | Rooting procedures should be the same as 8000 4G/6300 4G, but phone rejects patched boot image |
Nokia 2760 Flip | 3.1 | 🔒 | ADB reports as unauthorized |
Nokia 2780 Flip | 3.1 | ⚠ | Custom firmware & manual injection to sideload, no debugging. ADB reports as unauthorized |
CAT B35 | 2.5.1 | ⚠ | Requires extracting using EDL and editing ADB hex on data partition |
Doro 7050 | 2.5.x | ❓ | |
Doro 7060/7070 | 2.5.1 | ❓ | |
Energizer E241 | 2.5.1.1 | ❓ | |
Energizer E241s | 2.5.1.2 2.5.3.2 | ✅ | there appears to be two revisions of this phone? |
Energizer E242s | 2.5.3.2 | 🔒 | Credits to u/CaramelSpoonful on Reddit for confirming |
Energizer E280s | 2.5.3.2 | ✅ | Credits to u/gogolplex-pt on Reddit for confirming |
Energizer E282sc | 2.5.3.2 | 🔒 | Credits to u/nicalejo on Reddit for confirming |
Energizer H280s | 2.5.1.1 2.5.3.2 | ❓ | there appears to be two revisions of this phone? |
Alcatel 3078 3G | 2.5.1.1 | ❓ | |
Alcatel 3088X | 2.5.1.1 | ✅ | W2D for debug mode |
Alcatel Go Flip 1/2 (4044v) | 1.0 | ✅ | After turning on debugging mode, dial ##3424# to enable serial port |
Alcatel Go Flip 3/ Alcatel SMARTFLIP | 2.5.2 | ⚠️ | Requires permanent root by patching the boot partition |
Alcatel Go Flip 4 (4056w) | 3.0 | 🔒 | ADB reports as unauthorized. Credits to u/tbrrss on Reddit for confirming |
Alcatel MyFlip (A405DL) | 2.5.x | ⚠ | Requires extracting using EDL and editing ADB hex on data partition |
Alcatel MyFlip 2 (A406DL) | 2.5.4 | ✅ | No engmode-extension apps, no rooting |
AT&T Cingular Flip IV (U102AA) | 2.5.3.1 | ✅ | No rooting (confirmed on 2.5.3) |
AT&T Cingular Flex | 2.5.4 | ✅ | No engmode-extension apps, no rooting |
AT&T Cingular Flex 2/ Cricket Debut Flex | 3.1 | 🔒 | ADB reports as unauthorized. Credits to u/canyouswim73 on Reddit for confirming |
Cricket Debut Flip | 3.1 | 🔒 | ADB reports as unauthorized |
TCL Flip Pro | 3.0 | 🔒 | ADB fails to detect device |
IRIS Flip | 3.1 | 🔒 | First phone with eSIM support and 1GB of RAM. To enable ADB access, dial *#*#9527#*#* . DevTools is restricted for now |
myPhone Up Smart 3G | 2.5.1.1 | ❓ | |
myPhone Up Smart LTE | 2.5.3.1 | 🔒 | ADB reports as unauthorized |
Crosscall Core-S4 | 2.5.3.2 | ✅ | No engmode-extension apps |
Maxcom MK241 | 2.5.1 | ❓ | |
Maxcom MK281 | 2.5.1.1 | ✅ | |
Accent Nubia 50K | 2.5.1.1 | ❓ | |
Accent Nubia 60K | 2.5.1.1 | ❓ | |
Jazz Digit 4G | 2.5.3.1 | ❓ | |
MTN Smart 3G | 2.5.1.2 | ❓ | |
Multilaser/ObaPhone ZAPP | 2.5.1.1 | ✅ | |
Multilaser ZAPP II 3G | 2.5.1.2 | ✅ | |
TTfone TT240 | 2.5.1.1 | ✅ | |
BKAV C85 | 2.5.1.1 | ❓ | Imported from China and sold in Vietnam with limited quantity. If you have this phone, contact #device-dev on our Discord server. |
Viettel V6504 | 2.5.3.2 | ❓ | Press and hold 2 on boot to enter Recovery mode |
Itel it9200 4G | 2.5.1.2 | ❓ | |
Itel it9300 | 2.5.1.1 | ❓ |
The below portion of this page is not maintained.
This list was possible thanks to the feedbacks of our users, all people like you, and serves to guide developers in choosing a KaiOS device on which they can test applications, study bugs and improve the operating system as freely as possible using ADB and development tools.
Its thanks to the research of the community that it was possible to "free" these phones by bringing together the experiences of each of us.
The sideload of applications and the ability to access the debug tools belongs to the nature of Firefox OS, which is the heart that moves KaiOS, and should be so for all.
The devices supported by the Development Tools (WebIDE, Kaiostr, ADB, etc...) require access to the USB debugging, normally accessible using codes, however, there are many devices whose access requires specific tools to manipulate the partitions, safely (userdata or cache) or in a risky way (boot). It all depends on the OEMs and their decision to hide or not the natural properties of the software once installed on their devices.
After two years of research, since summer 2018, we have finally come to a precise pattern on how jailbreak works on different KaiOS devices.
The approach is based on the type of processor used on the device, Qualcomm, Spreadtrum or Mediatek (learn more here):
Qualcomm devices are the most prone to OEM blocking (CAT, Doro, Alcatel...), but for some of them debugging is the easier (Nokia), using just one code.
Spreadtrum devices use codes, just like Qualcomm phones, but statistically they are the most numerous among debug-enabled devices.
Mediatek devices do not have codes, but are much more versatile for Fastboot connections.
The devices in this list are broken down according to five search situations in which the researcher attempted to enable USB debugging and the Developer menu. We can further subdivide them on the basis of effectiveness and utility:
From the first to the fourth situation all the devices enabled for debugging are listed.
The fifth concerns devices that are still locked (for now).
We start by listing the debug-enabled devices, and then move on to locked phones up, ending with the devices unknown. If you want to let us know about any KaiOS phone, please edit the wiki. It will be of great help to other people like you. Because alone we are nothing, but all together we are so much!
Let's see them together. Just click on the devices with the name underlined for more details.
Start by reading the device class features listed below to understand what you can do with your device. Detect the chipset model, so you know where to start.
This solution is not based on any particular situation, as it is a natural capability of KaiOS, discovered on September 22, 2020 by Tbrrss (on Discord) and implemented in a web page by Luxferre. It consists to connect the browser of your phone to https://w2d.bananahackers.net/ to open the hidden Developer Menu, then select "Debugger" and enable "ADB and DevTools", a bug icon should appear in the system tray above. In the end, just jailbreak using OmniSD or Wallace Toolbox. Try it now from your KaiOS phone:
Listed below are all devices on which Development Tools have been proven to work properly and without adding patches to the boot partition:
This solution has proven effective not only for debug-enabled devices (situation 1 and 2), but also for many models that have been classified as "Debug-locked", for example, Blu Zoey Smart, various Qualcomm-based Jio phones and CAT B35 (see situation 4). NOTE that only Doro-branded KaiOS phones require to be started in FFBM mode in order to use ADB and WebIDE.
On any other device, if using the "adb devices" command you get "unauthorized" as output message, you probably need to patch the boot partition. Use Fastboot (see MEDIATEK-BASED devices) or jump to the situation 4.
This situation is typical of Qualcomm-based devices. If the code *#*#33284#*#*
needed for debugging works, we must verify if we have access to ADB and WebIDE. If all goes well we can use OmniSD or Wallace to perform a "privileged factory reset" and get the jailbreak.
Listed below are all Qualcomm-based devices where this rule is confirmed:
Although this situation is the easiest to move into, many other Qualcomm-based devices (for example Doro, CAT and Maxcom) are more likely to be "debug-locked" by their manufacturers, so by knowing this rule, we can be more aware of the problems we might encounter if we wanted to develop applications on a KaiOS device (skip to the points 4 and 5 for more information about debug-locked Qualcomm phones).
Listed below are some unknown Qualcomm-based phones that should work the same way as the ones just listed above, but we don't have any researchers on them to confirm or deny this rule:
Please move these devices to the other sections if any researches were done!
This situation is typical of Spreadtrum-based devices. If the code *#*#33284#*#*
needed for debugging works, we must verify if we have access to ADB and WebIDE. If the result is negative, enable debugging using the code *#*#0574#*#*
and retry the access to ADB and WebIDE. If all goes well we can use Wallace-toolbox to perform a "privileged factory reset" and get the jailbreak. Like before, all Spreadtrum-based phones where this rule is confirmed are listed here:
Listed below are some unknown Spreadtrum-based phones that should work the same way as the ones just listed above, but we don't have any researchers on them to confirm or deny this rule:
Edit this list and add to it as needed.
This situation is typical of Mediatek-based devices. The debug code does not work, let's check if Fastboot is available and if it is possible to flash the "cache" partition. If all goes well, use the "cache injection" method, and we will get the Developer menu. This rule was tested and confirmed on:
Listed below are some unknown Mediatek-based phones that should work the same way as the ones just listed above, but we don't have any researchers on them to confirm or deny this rule:
Please, edit this page if you have any further information. It will help many other people in their choice.
If all of the situations seen so far have not been successful, your device is Debug-locked (situations 4 and 5).
This situation is typical for devices that are no longer locked (see "situation 5"). The debug code does not work and Fastboot is not available even to flash the partitions. Check if we have other tools to flash the partitions. If yes, we can use the "cache injection" method, or the "manual jailbreak", and we will get the "developer" menu.
The situation 5 includes all the devices in which the debug code does not work, Fastboot is not available and we do not even have the tools to perform the partition flash. Those interested in developing applications for KaiOS are advised to do not buy one of these phones:
All of the known locked phones are Qualcomm-based and sold exclusively in Europe (CAT, Doro and Maxcom) and the United States (Alcatel and Doro), however, with the right tools we would be able to bring them back to situation 4, (see above), unlocking them, as has already happened for CAT B35, Alcatel A405DL and Maxcom MK241. Although debugging is not possible, you can use a non-root "adb shell" on them. Find out how to do on their common page
Listed here are some devices whose chipset is not specified anywhere:
To receive more support and report useful news and information about your device, please contact us. As always, your feedback will help many other people in their choice.
Some KaiOS phones are not sold as KaiOS phones, and or/feature modified versions of KaiOS. One example are the phones made by Alcatel for Greatcall/Lively, which feature custom versions of KaiOS. In this case these phones were targeted towards elderly Americans with large buttons and a custom OS.
Sometimes the official website of the manufacturer provides an idea and these phones really exist, but only in the form of prototypes to be presented on the stands of the main technology fairs, without the belief of being able to produce others in the future, perhaps for something better.
Sometimes to inflate the product portfolio on a site or fill blog pages with articles... as with many topics outside of technology, we easily come across fake news.
We know the shape of these devices and some articles, but they are not available. Learn more on the page of KaiOS devices that you will never find on the market