Sanctuary
I know not all that may be coming, but be it what it will, I’ll go to it laughing.
- Herman Melville
Sanctuary is a jailbreak released on 30/06/2026 by Ava, Alysa (Sky), sparklerfish.
Prerequisites
- A Kindle (works on blacklisted and unregistered devices), running firmware 5.16.4 to 5.18.3 (inclusive) running chromium (see step 2).
- Patience, Wi-Fi connection.
If you face any difficulty in following these guides, please navigate to the troubleshooting section, and/or make a ticket in the KindleModding Discord support forums.
Installation Guide
Prevent updates
Ensure your Kindle is filled and there is no space to automatically update. The jailbreak process involves connecting to the Internet.
Preventing updatesNavigate to your kindle's browser.
On your Kindle, open the Browser
You can find it under: 3 Dots → Browser
Then, navigate to the following URL:
http://sanctuary.skyvincent.com/scroll

Check browser compatibility
Wait for the website to load until a scroll bar appears on the right.
Compare your scroll bar to the images below.
If your scroll bar appears to be the one on the left, you can proceed to the next step.
If your scroll bar is the one on the right, you will have to manually update your firmware to the latest jailbreakable version.

Navigate to the primary page, and scan ports
In your browser, navigate to
http://sanctuary.skyvincent.com/
Once the page has loaded, port scanning will start. This can take up to 20 minutes, but requires no interaction.
Once an ID has appeared, proceed to the next step.
If an ID never appears, please join the Discord server for support.

Enter in the ID
The ID will be displayed in a text box, and you must type the exact ID into the box below it.
The website automatically capitalizes the letters for you, so there is no need to manually capitalize while typing.

Click the "Connect" button
Upon ensuring that the typed id exactly matches the upper ID, you may hit the "Connect" button.
If nothing happens, or an error appears, then the ID was entered in wrong. Try re-typing the ID.
Check webpage output
Ensure "Downloads Done" appears at the top of the webpage.
Also, notifications indicating that appreg.db, appreg.db.bak, and privesc.sh downloaded should have appeared.

Exit the browser
Quit the browser by hitting the X in the upper right corner of the browser.
Do not disable Wi-Fi at this point. It is required until the final step of the jailbreak is completed.
Navigate to "Help"
Using the same 3 dots menu you used to access the browser at the start, select "Settings".
In Settings, click the "Help" menu.

Jailbreak!
Click "Getting Started".
Some text should appear, signifying a successful jailbreak!

Complete
You're done with the initial jailbreak!
A package manager named KPM is included. You can use ;kpm update and ;kpm install koreader in the search bar.
The Hotfix is pre-installed for you! You can commence by downloading KUAL directly.
Renaming OTA binaries and re-enabling the store have also already been done, so those steps can be skipped.
Troubleshooting
- Text not appearing after hitting connect? Ensure that you correctly entered your ID. All letters should automatically be made uppercase by the website.
Credits
- Ava - Found and engineered the privesc, wrote this wiki page, PW4 5.18.1.1.1 testing.
- sparklerfish - Large amount of JS coding + webpage design, screenshots for this guide, as well as PW4 5.18.1 testing.
- Alysa - JS development as well as extensive CS SE testing.
- Scam.net - POC assistance, minor troubleshooting with modifying the DB file, PW5 testing.
- HackerDude - JB.sh implementation assistance.
- Gimzie - Exemplary beta tester, tested for hours and was the first successful jailbreak.
- Thanks to all beta-testers: Gimzie, scam.net, mergen3107, TheMAXX, PluPlu, corniest_tortilla