Last updated on December 1st 2023.
¶ Quick reference table
- A green tick (✅) indicates that this device is debug-enabled out-of-box. To enable debugging mode, go to w2d.bananahackers.net on the device’s Browser, click on Launch Developer menu and toggle ADB and DevTools under Debugger. Some devices also have a dedicated code for quick toggling debugging mode, with
*#*#33284#*#*being the most common.- Check out the dedicated Sideloading and debugging section for more information on methods of installing and debugging third-party apps.
- A warning symbol (⚠️) means that this device needs additional steps prior to activate debugging capability, such as editing some system files or at worst requiring permanent root access. Read the notes and the device’s dedicated page for information and guides.
- A lock (🔒) means that this device is, sadly, currently unable to be debugged using most of the known methods.
- A question mark (❓) means that this device is untested. We cannot get our hands on all available KaiOS devices to test them out, and we need your help! If you want to contribute to this table, post your discoveries on r/KaiOS subreddit, BananaHackers Google Groups or hit me up on GitHub!
Devices that (should) support WhatsApp's voice calls functionality have their KaiOS versions in bold.
I’d like to thank the team at PhoneCopy for collecting KaiOS phones’ information and making this table possible! Not sponsored, but definitely check them out.
| Model name | Version | DBG | Note |
|---|---|---|---|
| Nokia 8110 4G | 2.5.1 17.00.17.01 | ✅ | |
| Nokia 2720 Flip | 2.5.2.2 40.00.17.02 | ⚠️ | Debug-enabled on 2.5.2, requires permanent root via boot partition patching on 2.5.2.2 |
| Nokia 800 Tough | 2.5.2.2 40.00.17.01 | ⚠️ | Debug-enabled on 2.5.2, requires permanent root via boot partition patching on 2.5.2.2 |
| Nokia 8000 4G | 2.5.4 20.00.17.01 | ✅ | No engmode-extension apps, requires boot partition patching to root |
| Nokia 6300 4G | 2.5.4 30.00.17.01 | ✅ | No engmode-extension apps, requires boot partition patching to root(excl. TA-1324 not rootable due to different PK_HASH ⇒ no substitute loader) |
| Nokia 2720 V Flip | 2.5.4 10.00.17.12 | 🔒 | Rooting procedures should be the same as 8000 4G/6300 4G, but phone rejects patched boot image |
| Nokia 2760 Flip | 3.1 | 🔒 | ADB reports as unauthorized |
| Nokia 2780 Flip | 3.1 | ⚠ | Custom firmware & manual injection to sideload, no debugging. ADB reports as unauthorized |
| CAT B35 | 2.5.1 | ⚠ | Requires extracting using EDL and editing ADB hex on data partition |
| Doro 7050 | 2.5.x | ❓ | |
| Doro 7060/7070 | 2.5.1 | ❓ | |
| Energizer E241 | 2.5.1.1 | ❓ | |
| Energizer E241s | 2.5.1.2 2.5.3.2 | ✅ | there appears to be two revisions of this phone? |
| Energizer E242s | 2.5.3.2 | 🔒 | Credits to u/CaramelSpoonful on Reddit for confirming |
| Energizer E280s | 2.5.3.2 | ✅ | Credits to u/gogolplex-pt on Reddit for confirming |
| Energizer E282sc | 2.5.3.2 | 🔒 | Credits to u/nicalejo on Reddit for confirming |
| Energizer H280s | 2.5.1.1 2.5.3.2 | ❓ | there appears to be two revisions of this phone? |
| Alcatel 3078 3G | 2.5.1.1 | ❓ | |
| Alcatel 3088X | 2.5.1.1 | ✅ | W2D for debug mode |
| Alcatel Go Flip 1/2 (4044v) | 1.0 | ✅ | After turning on debugging mode, dial ##3424# to enable serial port |
| Alcatel Go Flip 3/ Alcatel SMARTFLIP | 2.5.2 | ⚠️ | Requires permanent root by patching the boot partition |
| Alcatel Go Flip 4 (4056w) | 3.0 | 🔒 | ADB reports as unauthorized. Credits to u/tbrrss on Reddit for confirming |
| Alcatel MyFlip (A405DL) | 2.5.x | ⚠ | Requires extracting using EDL and editing ADB hex on data partition |
| Alcatel MyFlip 2 (A406DL) | 2.5.4 | ✅ | No engmode-extension apps, no rooting |
| AT&T Cingular Flip IV (U102AA) | 2.5.3.1 | ✅ | No rooting (confirmed on 2.5.3) |
| AT&T Cingular Flex | 2.5.4 | ✅ | No engmode-extension apps, no rooting |
| AT&T Cingular Flex 2/ Cricket Debut Flex | 3.1 | 🔒 | ADB reports as unauthorized. Credits to u/canyouswim73 on Reddit for confirming |
| Cricket Debut Flip | 3.1 | 🔒 | ADB reports as unauthorized |
| TCL Flip Pro | 3.0 | 🔒 | ADB fails to detect device |
| IRIS Flip | 3.1 | 🔒 | First phone with eSIM support and 1GB of RAM. To enable ADB access, dial *#*#9527#*#*. DevTools is restricted for now |
| myPhone Up Smart 3G | 2.5.1.1 | ❓ | |
| myPhone Up Smart LTE | 2.5.3.1 | 🔒 | ADB reports as unauthorized |
| Crosscall Core-S4 | 2.5.3.2 | ✅ | No engmode-extension apps |
| Maxcom MK241 | 2.5.1 | ❓ | |
| Maxcom MK281 | 2.5.1.1 | ✅ | |
| Accent Nubia 50K | 2.5.1.1 | ❓ | |
| Accent Nubia 60K | 2.5.1.1 | ❓ | |
| Jazz Digit 4G | 2.5.3.1 | ❓ | |
| MTN Smart 3G | 2.5.1.2 | ❓ | |
| Multilaser/ObaPhone ZAPP | 2.5.1.1 | ✅ | |
| Multilaser ZAPP II 3G | 2.5.1.2 | ✅ | |
| TTfone TT240 | 2.5.1.1 | ✅ | |
| BKAV C85 | 2.5.1.1 | ❓ | Imported from China and sold in Vietnam with limited quantity. If you have this phone, contact #device-dev on our Discord server. |
| Viettel V6504 | 2.5.3.2 | ❓ | Press and hold 2 on boot to enter Recovery mode |
| Itel it9200 4G | 2.5.1.2 | ❓ | |
| Itel it9300 | 2.5.1.1 | ❓ |
¶ Regarding KaiOS 3 on older devices
¶ WhatsApp voice calls on KaiOS (WAVoIP)
The below portion of this page is not maintained.
Not maintained
This list was possible thanks to the feedbacks of our users, all people like you, and serves to guide developers in choosing a KaiOS device on which they can test applications, study bugs and improve the operating system as freely as possible using ADB and development tools.
Its thanks to the research of the community that it was possible to "free" these phones by bringing together the experiences of each of us.
The sideload of applications and the ability to access the debug tools belongs to the nature of Firefox OS, which is the heart that moves KaiOS, and should be so for all.
The devices supported by the Development Tools (WebIDE, Kaiostr, ADB, etc...) require access to the USB debugging, normally accessible using codes, however, there are many devices whose access requires specific tools to manipulate the partitions, safely (userdata or cache) or in a risky way (boot). It all depends on the OEMs and their decision to hide or not the natural properties of the software once installed on their devices.
After two years of research, since summer 2018, we have finally come to a precise pattern on how jailbreak works on different KaiOS devices.
The approach is based on the type of processor used on the device, Qualcomm, Spreadtrum or Mediatek (learn more here):
Qualcomm devices are the most prone to OEM blocking (CAT, Doro, Alcatel...), but for some of them debugging is the easier (Nokia), using just one code.
Spreadtrum devices use codes, just like Qualcomm phones, but statistically they are the most numerous among debug-enabled devices.
Mediatek devices do not have codes, but are much more versatile for Fastboot connections.
The devices in this list are broken down according to five search situations in which the researcher attempted to enable USB debugging and the Developer menu. We can further subdivide them on the basis of effectiveness and utility:
From the first to the fourth situation all the devices enabled for debugging are listed.
The fifth concerns devices that are still locked (for now).
We start by listing the debug-enabled devices, and then move on to locked phones up, ending with the devices unknown. If you want to let us know about any KaiOS phone, please edit the wiki. It will be of great help to other people like you. Because alone we are nothing, but all together we are so much!
Let's see them together. Just click on the devices with the name underlined for more details.
¶ Devices where debugging is possible
Start by reading the device class features listed below to understand what you can do with your device. Detect the chipset model, so you know where to start.
¶ using the integrated browser (BONUS)
This solution is not based on any particular situation, as it is a natural capability of KaiOS, discovered on September 22, 2020 by Tbrrss (on Discord) and implemented in a web page by Luxferre. It consists to connect the browser of your phone to https://w2d.bananahackers.net/ to open the hidden Developer Menu, then select "Debugger" and enable "ADB and DevTools", a bug icon should appear in the system tray above. In the end, just jailbreak using OmniSD or Wallace Toolbox. Try it now from your KaiOS phone:
Listed below are all devices on which Development Tools have been proven to work properly and without adding patches to the boot partition:
- Alcatel 4044C/N/W
- AT&T Cingular Flip IV [U102AA]
- BLU Zoey Smart
- Doro 7050 [DFC-0180]
- Doro 7060 & 7070 [DFC-0190]
- Jio Lyf F10Q/F30C
- Jio Lyf F50Y/F90M
- Jio Lyf F120B/F220B
- Jio Lyf F250Y
- Jio Lyf LF-2403/2403N
- Maxcom MK281
This solution has proven effective not only for debug-enabled devices (situation 1 and 2), but also for many models that have been classified as "Debug-locked", for example, Blu Zoey Smart, various Qualcomm-based Jio phones and CAT B35 (see situation 4). NOTE that only Doro-branded KaiOS phones require to be started in FFBM mode in order to use ADB and WebIDE.
On any other device, if using the "adb devices" command you get "unauthorized" as output message, you probably need to patch the boot partition. Use Fastboot (see MEDIATEK-BASED devices) or jump to the situation 4.
¶ Using one code(situation 1)
This situation is typical of Qualcomm-based devices. If the code *#*#33284#*#* needed for debugging works, we must verify if we have access to ADB and WebIDE. If all goes well we can use OmniSD or Wallace to perform a "privileged factory reset" and get the jailbreak.
Listed below are all Qualcomm-based devices where this rule is confirmed:
- Alcatel 4044O
- Alcatel 4044T
- Nokia 800 Tough
- Nokia 2720 Flip
- NOKIA 8110 4G
- Nokia 8110 4G (Jio version)
Although this situation is the easiest to move into, many other Qualcomm-based devices (for example Doro, CAT and Maxcom) are more likely to be "debug-locked" by their manufacturers, so by knowing this rule, we can be more aware of the problems we might encounter if we wanted to develop applications on a KaiOS device (skip to the points 4 and 5 for more information about debug-locked Qualcomm phones).
¶ Other unknown Qualcomm-based phones
Listed below are some unknown Qualcomm-based phones that should work the same way as the ones just listed above, but we don't have any researchers on them to confirm or deny this rule:
- Nokia 6300 4G
- Nokia 8000 4G
Please move these devices to the other sections if any researches were done!
¶ Using two codes(situation 2)
This situation is typical of Spreadtrum-based devices. If the code *#*#33284#*#* needed for debugging works, we must verify if we have access to ADB and WebIDE. If the result is negative, enable debugging using the code *#*#0574#*#* and retry the access to ADB and WebIDE. If all goes well we can use Wallace-toolbox to perform a "privileged factory reset" and get the jailbreak. Like before, all Spreadtrum-based phones where this rule is confirmed are listed here:
- Energizer E241
- Energizer E241s
- Energizer H280s
- IKU V400
- MTN Smart 3G
- Nobby 231
- Orange Sanza
- Orange Sanza XL
- Positivo P70S
- QMobile 4G Plus
- Tigo Kitochi 4G
- Wonder L2407 4G
- Accent Nubia 50K
¶ other unknown Spreadtrum-based phones
Listed below are some unknown Spreadtrum-based phones that should work the same way as the ones just listed above, but we don't have any researchers on them to confirm or deny this rule:
- Africell Afriphone
- Altan K26
- iPRO Geniphone A22
- Multilaser ZAPP
- TECNO T901
- Viettel BKav C85
- Zantel Smarta
Edit this list and add to it as needed.
¶ Using cache-injection (situation 3)
This situation is typical of Mediatek-based devices. The debug code does not work, let's check if Fastboot is available and if it is possible to flash the "cache" partition. If all goes well, use the "cache injection" method, and we will get the Developer menu. This rule was tested and confirmed on:
¶ Other unknown Mediatek-based phones
Listed below are some unknown Mediatek-based phones that should work the same way as the ones just listed above, but we don't have any researchers on them to confirm or deny this rule:
- Africell Vida K242
- DIXON XK1
- GeoPhone T15
- Ghia KOX1
- HAMMER 5 Smart
- Lanix U340
- Orange Neva Link
- Telma Wi-Kif 4G +
- TNM Smart 4G
- Vodacom Smart Kitochi
Please, edit this page if you have any further information. It will help many other people in their choice.
If all of the situations seen so far have not been successful, your device is Debug-locked (situations 4 and 5).
¶ Using flashing tools (situation 4)
This situation is typical for devices that are no longer locked (see "situation 5"). The debug code does not work and Fastboot is not available even to flash the partitions. Check if we have other tools to flash the partitions. If yes, we can use the "cache injection" method, or the "manual jailbreak", and we will get the "developer" menu.
- Alcatel A405DL
- Alcatel A406DL
- Alcatel Go Flip 3
- Alcatel SMARTFLIP
- CAT B35
- Jio Lyf F211S/F221S/F271I
- Jio Lyf F41T/F61F/F81E
- Jio Lyf F101K/LF-2401/2402
- Jio Phone 2 (Jio Lyf F300B)
- Maxcom MK241
¶ ...but not for now: Debug-locked (situation 5)
The situation 5 includes all the devices in which the debug code does not work, Fastboot is not available and we do not even have the tools to perform the partition flash. Those interested in developing applications for KaiOS are advised to do not buy one of these phones:
All of the known locked phones are Qualcomm-based and sold exclusively in Europe (CAT, Doro and Maxcom) and the United States (Alcatel and Doro), however, with the right tools we would be able to bring them back to situation 4, (see above), unlocking them, as has already happened for CAT B35, Alcatel A405DL and Maxcom MK241. Although debugging is not possible, you can use a non-root "adb shell" on them. Find out how to do on their common page
¶ Non-classifiable devices
¶ Unspecified chipset
Listed here are some devices whose chipset is not specified anywhere:
- Africell Vida K242
- Alpha B10 Flow
- Econet Atom 3G
- SPC Jasper
- Telkom Kenya T-Smart
- Viettel BKav C85
To receive more support and report useful news and information about your device, please contact us. As always, your feedback will help many other people in their choice.
¶ Non-standard KaiOS
Some KaiOS phones are not sold as KaiOS phones, and or/feature modified versions of KaiOS. One example are the phones made by Alcatel for Greatcall/Lively, which feature custom versions of KaiOS. In this case these phones were targeted towards elderly Americans with large buttons and a custom OS.
- Alcatel 4043S (Greatcall Jitterbug Flip)
- Alcatel 4053S (Greatcall Lively Flip) (Some attempts have been made to root it)
¶ Unreleased KaiOS phones
Sometimes the official website of the manufacturer provides an idea and these phones really exist, but only in the form of prototypes to be presented on the stands of the main technology fairs, without the belief of being able to produce others in the future, perhaps for something better.
Sometimes to inflate the product portfolio on a site or fill blog pages with articles... as with many topics outside of technology, we easily come across fake news.
We know the shape of these devices and some articles, but they are not available. Learn more on the page of KaiOS devices that you will never find on the market