Jailbreak for any kindle running FW 5.16.2.1.1 or LOWER

The exploit works best around version 5.16.2, so if you are on lower firmware you should consider updating

Big thanks to Bluebotlabs for all the help along the way and GeorgeYellow and bulltricks for bringing the vulnerability to light

The most up to date release can be found here.

• ⚠️ This method will DELETE all content on your device. Backup important files.
• ⚠️ This method works up to firmware version 5.16.2.1.1. It is strongly suggested you upgrade to this firmware before starting.
• ⚠️ Do not update your firmware beyond 5.16.2.1.1 after jailbreaking with LanguageBreak, as future versions of the firmware patch it.
• ⚠️ Your device must have no password lock. Remove it before starting.

• Airplane Mode is ON
• The device (esp. the root folder) should have no .bin or update.bin.tmp.partial files before you start. This may be a pending OTA update. Delete them.

1. Type ;enter_demo into the Kindle search bar, press enter, then reboot the device.
2. Once the device boots, dismiss the wifi selection dialog, type whatever you'd like into the text fields, then continue.
3. Select Skip, then Standard, then Done
4. The device will take a few minutes to go into demo mode. When it's done, use this gesture to access the main screen.
5. Type ;demo into the Kindle search bar, then press enter to access the Demo Mode Configuration screen.
6. Select the Sideload Content option.
7. Connect your Kindle to a PC, then copy the contents of the LanguageBreak folder to the Kindle's root directory (if prompted, overrwrite the existing files).
8. Eject, then unplug your Kindle, then return to the Demo Configuration Screen (using the method in step 5, if required).
9. Select Resell Device, then confirm.
10. As soon as the "Press the Power Button" screen appears, plug your Kindle back into your computer. (This is time sensitive, be quick.)
11. Copy the contents of the LanguageBreak folder to the Kindle's root directory, again. (if prompted, overrwrite the existing files).
12. After all files have been written, eject your Kindle, then press and hold the power button until the unit reboots.
13. At this point, a language selection screen appears. Select 简体中文 (Chinese), which should appear above an entry called Pseudot and below Japanese.
14. Your Kindle should reboot, and some log messages should appear in the top right-hand corner.

1. After the device has rebooted, type ;uzb into the Kindle search bar to enable USB access within demo mode, then press enter.
2. Connect the device to a PC and copy whichever Update_hotfix_languagebreak-{languge/locale}.bin file matches your language to the Kindle's root directory.
3. Eject your Kindle, then ;dsts into the Kindle search bar to access the settings page. Locate the Update your Kindle option and press it, then confirm.

• Using your phone to translate the menus is helpful if you don't happen to be able to read Chinese.

This will reboot the device out of Demo mode. Your device may go into Managed mode after completing these steps. Managed devices have some settings greyed out, and ask the user to contact their system administrator. See below for steps on how to restore functionality (and the correct language) to your device.

1. Type ;demo into the Kindle search bar.
2. You will get a prompt with two buttons. Press the right-most button.
3. The device will reboot. If all is well, your Kindle should have a folder named mkk in the root directory.

1. Enter ;enter_demo into the Kindle search bar, then reboot your device.
2. The device will be back in full "Demo Mode". Use the same gesture to access the main screen.
3. Enter ;demo into the Kindle search bar.
4. Select Resell device, then confirm.
5. The device will reboot. If all is well, your Kindle should have a folder named mkk in the root directory.

Q: How do I verify my installation?
A: (before applying hotfix): Install hotfix, if you can do that then it worked.
A: (after applying hotfix): Type `;log` into the Kindle search bar, some text should appear at the top right side of the screen.

Q: Where are the hotfix files?
A: The structure of the tarball is as follows
LanguageBreak.tar.gz
|-- LanguageBreak
|	|-- documents
|	|	|-- dictionaries
|	|	|	|-- a; export SLASH=$(awk 'BEGIN {print substr(ARGV[1], 0, 1)}' ${PWD}); sh ${SLASH}mnt${SLASH}us${SLASH}jb
|	|	|	|-- amisane
|	|-- DONT_CHECK_BATTERY
|	|-- jb
|	|-- patchedUks
|	|-- .demo
|	|	|-- boot.flag
|-- Update_hotfix_languagebreak-*.bin

Having general issues?

This method works best around firmware version 5.16.2. Consider updating to this version to avoid compatability issues.

Download the standard firmware for your device using the URL templates below, replacing the Xs with the version numbers as appropriate.

PW5: https://s3.amazonaws.com/firmwaredownloads/update_kindle_all_new_paperwhite_11th_5.XX.X.bin
PW4: https://s3.amazonaws.com/firmwaredownloads/update_kindle_all_new_paperwhite_v2_5.XX.X.bin
PW3: https://s3.amazonaws.com/firmwaredownloads/update_kindle_all_new_paperwhite_5.XX.X.bin
Kindle 11th Gen: https://s3.amazonaws.com/firmwaredownloads/update_kindle_11th_5.XX.X.bin
Kindle 10th Gen: https://s3.amazonaws.com/firmwaredownloads/update_kindle_10th_5.XX.X.bin
Kindle 8th Gen: https://s3.amazonaws.com/firmwaredownloads/update_kindle_8th_5.XX.X.bin
Scribe: https://s3.amazonaws.com/firmwaredownloads/update_kindle_scribe_5.XX.X.bin
Oasis 10th Gen: https://s3.amazonaws.com/firmwaredownloads/update_kindle_all_new_oasis_v2_5.XX.X.bin
Oasis 9th Gen: https://s3.amazonaws.com/firmwaredownloads/update_kindle_all_new_oasis_5.XX.X.bin
Oasis 8th Gen: https://s3.amazonaws.com/firmwaredownloads/update_kindle_oasis_5.XX.X.bin

So version 5.16.2.1.1 for PW4 would be https://s3.amazonaws.com/firmwaredownloads/update_kindle_all_new_paperwhite_v2_5.16.2.1.1.bin

To install the file, place it into the root directory of the Kindle, then select Update your Kindle in settings. It should also apply the update on reboot if the menu is inaccessible for some reason.

Consider buying me a coffee :)