How To: Root a Donut Phone (Android 1.6)

Ok, just to make this a little easier for everyone I figured I would do a video of how to root a stock Donut phone from beginning to end (all the steps are already on the site but I figured I would put them together in one post to make life easy).

I. Get Back to Cupcake

G1 Unroot Process

myTouch Unroot Process

Magic Unroot Process

Most of the procedures entail either putting the IMG.nbh file on the sd card and booting into bootloader and flashing it OR connecting the phone via HTC Sync to the computer and running an RUU to get back.

II. Root The Cupcake Phone with One Click Procedure

G1/MyTouch One Click Process

Magic One Click Process

All of the 1 click rooting procedures are putting the Flashrec.apk file and a recovery image on the SD card, installing Flashrec and then using it to flash the new recovery image. You WILL NOT have internal root access after this procedure (it only allows us external root access from recovery) so you MUST goto the next section to finish.

III. Load a Custom ROM

G1/MyTouch Load a ROM Process

Magic Load a ROM Process

All of these procedures consist of partitioning the SD card then putting a ROM on the SD card and then loading the ROM. In the case of the G1, you also have to update the radio and SPL (if you do not have the current version, if you do then do NOT load them again).

229 responses to “How To: Root a Donut Phone (Android 1.6)”

  1. SideshowMelleMel says:

    I thought this is what I would have to do, but your “putting is all together” post definitely made me sure of it! Thanks so much, I will be rooting very soon now that I’m sure.

    My only question is – is there a way to back everything Donut up first? (the CM Recovery image only allows you backup – but that will be a Cupcake backup)

    • TheUnlockr says:

      Hello SideshowMelleMel,

      Your very welcome!
      As for the backup, you should just save everything on your sd to your computer just in case and make sure your phone syncs with Google to save your Contacts, Calendar, and Mail and then you’ll never lost that.
      If you are concerned with getting back to donut, you can use a custom ROM to do that (recommended) or just unroot to cupcake and call TMo and have them send you the Donut update (say you still havent gotten it yet).

  2. VR says:


    i have had my phone rooted for some time now. (using the one click process from v1.5) it worked flawlessly! for some reason when i tried this process from firmware 1.6 on my friends phone, i cant seem to get it back to RC29. when i get to the bootloader screen, it says there is no file. i tried downloading the nbh from multiple sites and still no progress. why is this?????

    • TheUnlockr says:

      Hello VR,

      It can only be that the file you are downloading needs to be extracted first and then put the SD card and make sure it is not in any folder and is name correctly when on the sd card.

  3. VR says:


    yeah i double checked everything. i guess ill just keep trying until i get it to work i

  4. Rafa I says:

    Hi there, first of all I really want to thank you for all your support, I’ve been reading your page for some hours and you’re simply great.

    I’m using a T-Mobile My Touch 3G in Mexico, I bought a code from a e-bay seller and it worked perfectly with Telcel (Biggest carrier in Mexico) I’m considering to root my phone, but now I’m not sure my phone will still work with my Mexican carrier, do you know something about this? The main reason to consider rooting my phone is to get a ad-hoc connection at home (maybe for multi-touch, too), is this (rooting) the only way to get that?

    Thanks in advance.

    By the way, I’ve already got donut update (curiously I got it OTA through Telcel’s network)

    • TheUnlockr says:

      Hello Rafa I,

      Yes rooting is the only way to get those features and TECHNICALLY rooting should not effect your SIM unlock at all (and even if it did you could put the code you got back in to reunlock it, assuming you didnt throw it out). So you should be fine.
      Use this procedure (and the 3 it links to) to get root and ready to go 🙂 Good luck!

  5. Rafa I says:

    It’s working! =) It seems I have all what I got before plus a world to discover! =)

    Thank you very much!

  6. Luis says:

    Hi, I kinda rushed through the first part in the first section with loading the original SPL to the G1. I did not realize that the phone was stock and just needed to skip to loading the nbh file.

    When I now go to the rainbow screen, it doesn’t go any further along in the process to where i can load the nbh file.

    Does loading that SPL somehow screw up the process?

    • TheUnlockr says:

      Hello Luis,

      No, just read the reported issues and make sure you unzip the dreaimg.nbh file from the zip folder and put it on the root of the sd card (not in any folder) and this it is named exactly dreaimg.nbh (not or anything like that). Good luck!

  7. Nesta says:

    Hey guys, i have a question:
    I have an European(Dutch T-mobile G1, sim unlocked,Build number DRC92), i want to root it, but I have updated to Donut.
    Does this method work for my phone?

    Thnx in advance

    Grtz Nesta

  8. KJW says:


    I accidently locked my unrooted G1, got the “Too many pattern attempts” screen, and if I enter my real, correct gmail details it doesn’t let me in.

    I know if I root my phone it’s just a simple matter to unlock it with some SQL commands via ADB – My question is, would I be able to actually root my phone now that it’s password locked?



    • TheUnlockr says:

      Hello KJW,

      Shouldn’t be a problem. Follow this procedure and the phone will no longer be pattern locked after the first video (downgrading to cupcake) so then you can do the next 2 procedures without an issue.

  9. Emil  Begtrup-Bright says:

    Very nice overview, thank you! It makes the process less frightening when you are new to this.

    However, I have a HTC Tattoo, and I am unsure that I can use this guide with my phone? I have been looking for an answer on this question all over the net, but can’t find a good answer?

    • TheUnlockr says:

      Hello Emil,

      We are actually not sure if it will work on the Tattoo (we don’t have one). So if you want, try the How To Root the MyTouch in One Click procedure and let me know if you can get the recovery image on the phone (worst that will happen is it will block you). Don’t do this donut procedure, just go straight to the How To Root in One Click for the MyTouch.

  10. Nesta says:

    Allright then!!,But how do I downgrade to Cupcake if I don’t have the recoverymode loader installed?

    Grtz Nesta

  11. Nesta says:

    last question 😛 :
    First I need to downgrade to Cupcake,, I have to skip the SPL part, right?But don’t I need an European Rom for the downgrade?


  12. rashel says:

    hey theunlockr,
    i am having so much trouble trying to root my mytouch. 1st my phone is on 1.6 and i tried to bring it back to cupcake but it doesnt bring me to the reboot option when i press volume down and power. it just brings me to , with no action taking place.

    2nd i always get backup failed.
    3rd when i press home and power i get !.
    please help
    thank you

  13. Emil says:

    So just to be totally clear, even though the guide explicitly says that I need to go back to Cupcake, and that I shoulnd’t root the phone with Donut installed: I should just go ahead and try anyway?

    And what about custom ROMs, can I use them with my Tattoo? Which one should I install? Fx, Tattoo has a radio, which most other androids don’t, so I guess I can’t use cyanogenmod? There seems to be a black hole of no information on the Tattoo in the modding community, most likely because it’s not widely distributed yet.

    I’d be happy to test and see if it works on my tattoo, but I really want to be sure that I don’t break my phone while doing it! So sorry about all the questions. Hopefully it will help other Tattoo owners.

    • TheUnlockr says:

      Hello Emil,

      Yes, I would suggest trying to use the Flashrec.apk and load the recovery image. In all probability it wont work, but it can’t hurt to try (it’ll just say failed when you try). Thats it.
      You should go back to cupcake etc if it doesnt work, BUT at the moment we do not have access to a Non Donut version of the Tattoo ROM. If you want to do a little searching, here is what you need. You need the original Tattoo ROM (cupcake) OR the original Tattoo RUU (pre version 2.73). If you can find those, post a link here and I’ll get t work on a procedure for you ASAP.

  14. GGG says:

    hey unlockr i tryed to un root my mytouch 3g for tmobile using your video and i get to th hboot screen and it scans but dosent give me the option to activate the update

  15. BigzIzKing says:

    im back to rc29 but it wont update to cupcake and im doing it the write way

  16. Michi2502 says:

    does I. Back to Cupcake, work with a german unrooted phone?

  17. Emil says:

    Good that it might be useful! Forgot this one, from HTCPedia:

    • TheUnlockr says:


      Ok checked and the first ones you sent were trying to get Android onto Windows Mobile devices, so no go. BUT the last thing you sent looks like what we need.
      Can you check something on your phone though? Can you goto Settings > About then look at the Firmware version and tell me what the number is there? Use the contact us form instead of the comments here so I don’t miss it.

  18. Biigz says:

    im sorry 4 that post i made myself look stupud becuase it does work

    • TheUnlockr says:


      Ya, watch the temper next time will ya 🙂 Just ask for help if you’re having issues, so long as your nice about it, I’m happy to help.
      Glad you got it to work though.

  19. Klas says:

    I try to downgrade from 2.73.405.5 to the version included in Hero Unroot Process, but after some thinking the Update Utility states:

    “The ROM Update Utility cannot update your Android phone. Please get the correct ROM Update Utility and try again”.

    I’m a newbie and don’t understand this. What must I do from here?

    Best regards.

  20. Klas says:

    It’s a Hero, btw.

  21. Biggz says:


    • TheUnlockr says:


      Keep in mind that noone on this site gets paid to help anyone, so don’t get mad if we can’t get to you right away. Have you ever tried to ask a question on any other site about this stuff? If you have, you’d be in awe that we answer as much as we do here. Wish I could get to every question I reallllly do 🙂
      If anything, post in the Forums next time, theres more people helping (our AWESOME VOLUNTEER MODERATORS!!!) and they can usually get to stuff faster than I can.

      Glad it works though!

  22. […] 1.This ONLY works on MyTouch  3Gs and G1s. 2. Also, if you have already Rooted your MyTouch 3G or G1 without using the OUR 1 click method, then do one of our quick unrooting procedures before beginning to start fresh. MyTouch Unrooting or G1 Unrooting. 3. Your G1 MUST be on Cupcake to proceed, use the G1 Unrooting process above to get to a fresh cupcake install! 4. IF YOU HAVE DONUT! USE THIS PROCEDURE HERE TO GUIDE YOU! How To Root a Donut Phone […]

  23. […] 1.This ONLY works on HTC Magics. 2. Also, if you have already Rooted your HTC Magic without using the OUR 1 click method, then do one of our quick unrooting procedures before beginning to start fresh. (Search for Unroot Magic in our search bar). 3. Your Magic MUST be on Cupcake to proceed, use the Magic unrooting process to get to a fresh cupcake install! 4. IF YOU HAVE DONUT! USE THIS PROCEDURE HERE TO GUIDE YOU! How To Root a Donut Phone […]

  24. jon says:

    can i go back to donut and still be rooted or is there a way to just root donut with out going to cupcake

    • TheUnlockr says:


      You would have to go down to cupcake and load the do our root procedure there then just load a custom ROM that is based on Donut and you’ll have a Donut ROM with root. That is the only way to do it currently, but there are no downsides to doing it that way.

  25. 32gb SD Card says:

    Just grabbed the feed… thanks for posting this.

  26. jon says:

    thank you that help out alot

  27. Kix says:

    hi im going to try this on my google g1 v1.6 donut.

    Just wanted to ask, does this automatically make the feature to save apps from the market to the sd card available? i always run out of space on the phone.

    Which bit do i partition my sd card, i have an 8gb card?

    found the apps2sd how to but its obsolete.

    thanks excellent post btw simple to follow

    • TheUnlockr says:


      If you do all of these procedures and load a custom Donut ROM (I recommend Amon Ras from our Download section) you will have Donut (1.6) that you have now but also root access and it will automatically save apps2sd for you so long as you did the section to partition the sd card in the How To Load a Custom ROM section.

  28. jon says:

    ok i rooted and put donut back on with the expansion pack but for some reason it wont let me turn it sideways to full key board and the setup keeps force closing help plz

  29. Bee says:

    Hey, i’m still having problems with booting the spl. i keep getting the triangle screen like VR. I extracted and re-downloaded the file and nothing happens. I seriously need some help.

  30. Emil  Begtrup-Bright says:

    Hi Unlokr,

    Did you get my message through the “contact us” formular about the Tattoo? Not to hurry you or anything, just want to make sure you got it.

    The firmware version is 1.6.

    Software version is 1.6.405.6

  31. vlip says:

    hy unlockr,
    do you now when/where there is a rooting access availible docu for the htc tattoo ( htc click ) device?

  32. Emil  Begtrup-Bright says:

    Hi again,

    no probs, I’m just grateful that you’ll help me and other Tattoo owners!

    – well you just asked for my firmware version, it’s right above you 🙂

    • TheUnlockr says:


      The reason I asked is because the files you sent me have the same Firmware version so they wont downgrade you unfortunately, which means they wont help 🙁
      Try the How To Root The CDMA Hero procedure that just went up, it MIGHT work and there is no harm in trying. Let me know if it works!

  33. vlip says:

    my frimware htc tattoo = donut 1.6 / kernel 1.6.29-gf922713
    htc-kernel@and18-2 #117
    build number 1.67.405.6 CL#741718
    software version 1.67.405.6

  34. david says:

    Thanks so much for this. It is so helpful!

    Once you root the phone can you use the phone after process II, will you be able to use the phone or do you have to install and updated ROM?

  35. Rainer says:


  36. vlip says:

    in one click does not work,,, its patched somehow.

  37. aktive says:

    do i need a data plan in order to do root my phone?

  38. aktive says:

    do i need a data plan in order to root my g1?
    if i wanted to get the htc hero rom

  39. Roldy718 says:

    will i loose all the apps i downloaded from the Android market once i unroot the MyTouch 3G down to CUPCAKE??

  40. jacob taylor says:

    Just wanted to say thanks for the all to easy methods. It is very cool to have them all on one page instead of questing thru xda. You rock!!

  41. Ico says:

    This guide doesn’t make any sense to me. I have a STOCK G1 with Doughnut installed. When I click on the Downgrade The SPL link it tells me to SKIP THIS SECTION. Which would mean for me to go step 2 which is Root the Cupcake phone with one click. I can’t do that if I have Doughnut.

    ??? WTF?

    • TheUnlockr says:


      Read step 1 of this procedure (How To Root a Donut Phone procedure not the How To Root the G1 procedure). And if you click on the link for the G1 Unrooting, do that procedure first then go to the next procedure.

  42. Musik says:

    Ok, I have followed all of the steps above, in rooting my Donut G1. All is well, except for the fact that my internal memory on the phone is pretty much shot. I can’t even install apps from the market now, because there is only 50Mb left of memory. Every time i try to install an app, it says not enough memory, then cancels the install. What I don’t understand, is that during the process you have laid out here on this website, we wipe the phone, from the recovery screen, correct me if i’m wrong. Now before i started the rooting process, i had about 50 or so Mb in the internal phone memory. So now, i’m concerned with…was my phone ever wiped in the first place, or do i have random miscellaneous apps in my phone somewhere, that i can’t reach and delete (using linda file mgr. or any other that i know of). Thank you for your help in advance. —Musikal Future—

  43. Musik says:

    Another question: I didn’t partition the SD, well let me back up, i did, but it wasn’t recognized by my computer, so i couldn’t put a ROM on it. So i used a different SD card i had to put the standard Donut w/root on it, and loaded that. So i don’t have App2SD as of now> My question, is .. How come it wouldn’t be recognized by my computer after the partition. I tried on my MacBook Pro, and I also tried on my PC w/Vista. Neither of them wouldn’t recognize the partitioned SD card. Also, when partitioning, that erases everything on the SD card. Right?
    Thanks again, —Musikal Future—

  44. tworrells says:

    it wont root, when go to Backup Recovery Image, it fails and says that phone type is EBI0/32B on my G1, Can anyone help me please.

  45. tworrells says:

    It says Backup FAILED: Could not run command.

  46. Bruce says:

    I can confirm the CDMA Hero root procedure does not work for the HTC Tattoo 🙁

  47. Julian says:

    I have a rooted cupcake G1 that I rooted many months ago. it is running the jesusFreak 1.5.1 image and I’ve had no problems with it. The main root feature I use is of course the wifi tether. Now 1.6 is out (and my wife’s unrooted G1 picked it up) and it has the new google directions app that I’d like to try. so the big question is, since I loaded teh modified recovery stuff and all the modded stuff for loading 1.5, how can I upgrade to 1.6 without losing it all?

    • TheUnlockr says:


      Just load a custom 1.6 ROM, there is definitely one that some dev created from the official ROM and added the navigation program in already. Also you can probably search for the Nav app in the market and just download it, no need to unroot.

  48. flashy says:


    is there still no possibility to unlock a htc tattoo?
    I need to add my CA but didn’t get it to work


    • TheUnlockr says:


      Do you mean unlock or root? Unlocking is being able to use a different SIM card than it was intended to be used on the phone. For that you would need to purchase an unlocking code. Rooting is jailbreaking and allowing us to alter the system.

  49. Macnasty says:

    Watz up,

    Is it normal for the g1 to exit itself out of mount? Every time i try to put the dreaimg.nbh on my phone it exits from my computer. Do i need to format my SD card?

  50. HyDrO84 says:

    I just wanted to say thanks a million.
    I have the G1 and with this guide I was able to root and flash my phone in about 3 hours.
    This was my first attempt and these steps made it really easy for me to do.
    I am currently running the JACXHeroSki Hero ROM, and I must say that it is amazing, almost like buying a new phone without paying the money.
    Again thanks for this guide and keep up the awesome work!!!

  51. Bing says:

    I have one Tattoo too. I will really appreciate your efforts to help us root the tattoo! thx/

  52. Todd says:

    ok, i don’t think this is any kind of relevant but just tried to root my ‘My Touch (formatted the sd card, have 4.1 ROM and i downloaded and installed the apk) now when i try to backup recovery image it immediately says ‘Backup FAILED’..

    what should i do..?

  53. Todd says:

    yeah i figures it out just before you posted..


    well now i have another problem.. : /

    i forgot to load the recover img as i was running the apk program, not know then that i didn’t i went and applied the zip so now when i boot it doesn’t go anywhere past the green ‘mytouch’ screen..

    should i put the nbh file back on the SD and load cupcake again or is it bricked now..?

  54. Todd says:

    thank you so much!!

    now to get an SD adapter..

    let you know how it goes when i finish..

    Props to

  55. Todd says:

    ok, so i redid everything and this time remembered to put in the recovery img but it seemed like it didnt do anything.

    i expected a wait when flashing the custom img (recovery-RA-dream-v1.2.3.img) but it finished in a couple seconds. – dont know if thats normal

    so i did that the booted and applied the updated zip (update-cm-4.2.5-signed), once that was done i rebooted and now im still only getting the green ‘mytouch’ screen..

    please help.. again.. lol

  56. Todd says:

    is there a number i can call so someone can help me figure this out..?

    if anyone wants to help heres my email-

  57. jonut says:

    Hi unlockr, i have a tattoo and it’s kinda sorta driving me nuts how to root it.

    I’ve been reading up on the conversation between you and Emil, and it seems that you an older version of the Tattoo ROM?

    Perhaps it could be one of them here? One of them is 1.56.405.1

    Hope it helps 😐

  58. Žiga Cibic says:

    I have a never before rooted G1 on donut and when i try to load the dreaimg.nbh by starting the phone with camera + power combo, i get thenot allow error. I have a continental phone and any help would be appreciated.

  59. Žiga Cibic says:

    Tried that allready, i get the could not run command error

  60. Faded says:

    I would just like to thank The Unlockr for all of your tutorials and step by step process of unlocking, unrooting, rooting and loading custom roms to the HTC’s.

    We need people like you in our life. Awesome job + You rock.

    Thank you very much,

  61. […] properly communicate with your phone. 2. Downgrade Your HTC Hero So It Can Be Rooted or if you have another Android-enabled device that is newer. 3. Root your HTC Hero or if you have a G1 or Mytouch. 4. Pick and install a custom (rooted) ROM […]

  62. Jatan says:

    Hi Unlockr,
    I have a couple of questions about rooitng my phone. I was wondering how I would upgrade back to 1.6 after I root my phone? How would I get multi touch in the browser on this phone? And is there a way to switch between different operating systems on the phone?

    • TheUnlockr says:


      When you load a custom ROM they can be based on 1.6 or even 2.0 so once you load a ROM you are back to whatever Android version you choose.
      Certain ROMs have multitouch built in, you would have to check the feature list for the developers ROM on his ROMs page.
      Different versions of Android you mean? You could flash as many different ROMs as you want 🙂
      Good Luck!

  63. Josh says:

    Hi Unlockr, I just purchased a g1 today and I was wondering does it come stock cupcake or dount. I want to root it but im not sure if I need to get cupcake or if its already on cupcake.
    Thanks, josh

  64. Jatan says:

    Thank you unlockr. This website is the best

  65. Jatan says:

    Sorry Unlockr but I have one more question. How would I switch between different ROMs? Can I install many different ROMs on my sd card and flash any one ofthem any time I want or do I have to have one ROM on my sd card at a time and to flash another ROM I have to get rid of it and put a new one on?

    • TheUnlockr says:


      Yes you can. Just put the new ROM on the SD card like you did the first ROM and boot into recovery, wipe data, and flash that rom instead. You can do that as much as you want.

  66. Tom says:

    My device, an HTC Tattoo, has 1.6 donut but I can’t find a rom for it and stuff to root it 🙁

  67. Micutz says:

    if my HTC Magic has the following properties:
    * firmware: 1.5 (cupcake)
    * HBOOT-1.33.0010
    can I make an update to a 2.0 version(eclaire) or at least to a 1.6 version (donut)?? If yes, how should i do it, so i don’t transform it into a brick??

  68. Micutz says:

    I wasn’t very clear with my wishes.. I would like to root a Hero ROM into my Magic! Is that possible? If so, what version would you recomand! Thanks again, and sorry for bothering you!

  69. dusan7 says:

    I have as well Tattoo and waiting for a solution to become it rooted. Please help us to find some way.

  70. brandon h says:

    hey unlockr
    i recently tried to root my donut 1.6 mytouch 3g everything is good until i try to backup and it always say backup failed why is that when everything else is right

  71. tornado8282 says:

    I have htc magic vodafone new here n wanted to find out whats the diff between rooting a fone n flashing a phone?my phone firmware version is 1.6?thanks

    • TheUnlockr says:


      Rooting a phone means gaining root access which means allowing us to change anything we want on the phone without being blocked.
      So we use the root access to flash a custom rom, which has a bunch of features that the dev has put in.
      Thats the basic jist without going to much into detail lol

      If you have 1.6, you have Donut, follow this procedure to continue.

  72. Hamad says:

    I have a Tmobile Mytouch 3g with 1.6 firmware
    How do i try to get my phone to have Arabic language
    support so i could read and write in arabic. Do i have to rooted to get the support.

    Can you Please explain to me what does rooted, ROM and cupcake and Donut terms mean ?

    Thanks You

  73. hamad says:

    Thanks for Replying
    That mean if my phone is straight from Tmobile its considered a Donut phone Correct ?
    If so that mean i only need to root the phone to which means jailbreaking it.
    After Rooting the mytouch 3g then i could install Custome themes or Roms which one do i do next is istalling roms or once rooted thats it .

  74. Alex says:

    What’s you mean by Donut and cupcake?? I’m new at this.

    • TheUnlockr says:


      They are different versions of Android. Cupcake is 1.5 and Donut is 1.6.
      Goto Settings then About Phone and you’ll see Firmware – and a number after it, either 1.5 or 1.6 most likely.
      If you have 1.6 follow this procedure, if you have 1.5 go straight to the How To Root in One Click procedure.

  75. bodacosta says:

    First of all, congrats to this great site. I read a lot about rooting the G1 here in Germany, I wonder has anyone tried this method with a continental (german) G1?
    Seems to me that most rootings are done with a rather complicated goldcard method.

  76. Shaun says:

    You make reference to a “Stock Donut” phone. What exactly does that mean? I am getting a replacement phone sent to me this week. I imagine it will have Donut on it when it arrives. Does that make it a “Stock Donut” phone? Thanks.

  77. matthijs says:

    Is Android 1.5 supporting screen resolutions like 240×320 QVGA ?? If not than the roll back or down grade trick to 1.5 won’t work. As far as i know the tattoo never had 1.5 installed….

    Anyway, hail to the guy trying to root the tattoo cause unrooted Android is booring.

  78. Radu says:

    Hi Unlockr,

    I am trying to root my 1.6 g1 and the first instruction I need to follow is actually unrooting it. Well my g1 is not rooted and installing the cupcake nbh fails with the error 28002 “not allow”. You mentioned in another reply that this could happen because the phone is not rooted. And I agree, the phone is not rooted 🙂 So is there a resolution to the “not allow” issue when downgrading to cupcake?

    • TheUnlockr says:


      The procedure is Unroot/Downgrade to Cupcake. Doesn’t matter if you have root or not the procedure should get you back to Cupcake so you can root the phone.

      The .nbh file you load is not cupcake it is RC29 then you can update to cupcake at the very end of the procedure.
      If you get the not allow error, try redownloading the .nbh. Then format your SD card to Fat32 instead of just Fat (or vise versa if that doesnt work). Then place it on the SD card again and boot into bootloader mode (turn off the phone, turn it back on by holding down Camera and Power). Then see if it works this time.

      Good luck!

      Any other issues, please post in the technical support forums instead of here in the comments so we don’t clog them up with back and forth, thanks for understanding!

  79. […] מצולם, וכתוב, תמצאו בלינק הבא. יש להגיע למדריך הרלוונטי למכשירכם, בהתאם לקישורים […]

  80. Elf says:

    Hi guys,
    I’m going to apply this procedure to my Italian Vodafone HTC Magic (32B, so the same hardware of a MyTouch 3G), but, since in case I need to send my device to technical assistance I would need the stock ROM, first I would like to backup it, is there a way to do this without Nandroid Backup?
    Thanks 🙂

  81. bobbyshen says:

    have u found the way to root tattoo?
    i’m wait for it so long time

  82. terrence says:

    wait i’m just alittle confused….what if you had just turned on your phone and it happened to upgrade and you DID NOT root it when it was on Cupcake then should i still do the unroot process or something else…sorry for your time, i just want to make sure i get this root right since it’s my first time =D

    • TheUnlockr says:


      Regardless of how you got to 1.6 (if you are not rooted) you need to downgrade back to 1.5 then root then upgrade back with a custom ROM.
      Just follow these steps and you’ll be fine. Good luck!

  83. […] to root the MyTouch 3G and thanks to the process was quick and painless, reference How To: Root a Donut Phone (Android 1.6). I have made a local PDF copy however you should always check theunlockr for news and […]

  84. Revan says:


    I couldn’t get the one touch rooting to work. I have a g1 and went through the steps of removing donut and going back to cupcake. Can I just go back to the stock donut firmware?

  85. Revan says:


    Yes, I was able to revert back to cupcake using the DreaIMG.nbh file, however, When I tried the one click root, I couldn’t proceed. Am I supposed to use a certain apk file type? I used flashrec-1.1.3-20091107-2.apk as per the link on My phone wouldn’t let me past that point. Any Ideas??

  86. Revan says:

    I also completed the first step in it’s entirety. Right now my phone is running on firmware 1.0 (I started over), RC29 build. 2.6.25-01843-gfea26bo kernel.

  87. revan says:


    Actually, I did get back to cupcake. It still didn’t work which is why I started fresh. Card is fat32, went back to cupcake. Even tried other sites/tutorials. Can I just get back 2 donut?

  88. Revan says:

    I’m back to cupcake now, and still having the same issue as before. I can’t get the one click root to work.

  89. Revan says:

    When I get to the Linda File Manager step, nothing happens when using the Flashrec.apk.

    • TheUnlockr says:


      You need to make sure the Flashrec.apk is a .apk. Alot of computers try to make it a .zip (so itll be, if this is the case, delete the .zip off the end by clicking rename in Linda.

  90. Revan says:


    U rock.

  91. Karam says:

    I hope you can help me. I bought a used Dream, it has 1.6 Donut but it is not rooted. How can i revert to 1.5 cupcake so i can root it?

    Thanks for any help!

  92. Karam says:

    When i run bootloader this shows up:
    Not Allow

  93. ステファン says:

    Hey, im going to try this properly later, but have been trying lots of different guides without any luck.
    Any clue if this will work for magic (ht-03A the ntt docomo from japan) with 1.6?

  94. Mark says:

    Guys from,

    I have a G1, when i try to get it rooted with the one click, the Backup doenst work.

    So i figured i have to get back to cupcake, however, i dont get passed the rainbow screen .10. I am 100% sure the SD card is formatted and iN Fat32.

    need some help 🙁


  95. Mark says:

    Sorry to bother you again, I have formated the SD and another SD both ways either to Fat or FAT32. Every time I try the dreaming, I get checking.. not allow. and then back to the rainbow screen wih serial0.
    Any other ideas on how to get it done. Its a Tmobile G1 from holland now on 1.6.

    Please help 😀

  96. Thomas says:

    Dear unlockr,
    After you unroot your phone and get it back to cupcake if you decide to get back to donut can you do it.

    • TheUnlockr says:


      Yes, you can wait for the OTA or call T-Mobile and say you are still waiting for Donut and they will resend it.
      To be honest though, there is no reason to unroot unless you are sending in for warranty. If you just want to get back to cupcake coming from a Hero ROM or whatever, just load a custom Donut ROM. They are faster, lighter (less bloatware) and have better features that the stock Donut.
      But up to you.

  97. William says:

    Hey Unlockr, My G1 Is stuck at the logo screen and it wont let me do anyhing else. Ive tried to put it in recovery mode but it did not work. Please help me

    • TheUnlockr says:


      Can you get to the recovery image (Holding Home and Power)?
      If so, then format the SD card, wipe data and re apply the ROM.
      If not, can you get to the bootloader screen (Holding Camera and Power)?
      If so, then do the how to unroot procedure to get back to cupcake and start again.

  98. Hightree says:

    I’m in exactly the same situation as mark (dutch G1 1.6) with exactly the same problem.
    Tried formatting FAT and FAT32 multiple times -> “not allow”.
    The only difference is that when using FAT, the “not allow” message flashes by real quickly, while with FAT32 you can clearly read it.

    Beginning to fear that this method has been patched…

  99. Derick says:


    Can I use cyanogen mod if I use this method to root my mytouch 3g? Also I’ve been reading the wiki for cyanogen but I have no idea how to install the google apps before I load the rom.

    • TheUnlockr says:


      I don’t personally recommend Cyanogens ROMs since they are a pain to load (not his fault its because of the cease and desist he got from Google) there are plenty of others that do the same benefits without the headache.
      BUT if you really want to you can load his ROM with using this to root, but you would have to contact him or a support forum about how to load his roms correctly.

  100. ralph perez says:

    hey im having problems rooting my phone ive downloaded the files and put them in my sdcard and for some reason its not working i have a mytouch 3g from t-mobile just need some help in how to do this im trying to install the hero rom

  101. jose says:

    I unrooted my phone I jad the donut version before
    I’m on cupcake
    Will my phone automatically update to donut
    Oh and what is a OTA

  102. dariiO. says:

    MAY 27 2009,19:06:41

    i now alot of people is having trouble unrooting their mytouch or putting it back to version 1.5… so for those people that has the sappimg file not reading on the mytouch, you have to set your memory card to FAT32. you could do this by going to the format option on the computer but before you do it make sure you format the sd card to FAT32 and not FAT(default), then copy the sappimg file and the mytouch should read it with no problem.

    i hope i helped. at least someone

  103. David says:

    One more voice for the tattoo. Bump! Keep up the good work!

  104. steven says:

    Hello, do you need to activate the phone again after you install a custom ROM? because I dont have data just wifi. thanks unlockr!!

  105. […] that and flash a custom recovery image. So if you have Donut on your phone you need to follow this procedure (just do the How To Downgrade/Unroot procedure and the How To Root procedure so that you have a […]

  106. drone says:

    Any1 can help? Have german g1, which root method was complicated (goldcard) I was happy to read this. My radio was ok, and I left spl(because I didnt modify it)But nbh gives error2, and origin spl does not work(alt+w yes, but then reboot, alt+s does nothing(1 sec flash of loading but disappears) I need a goldcard, or dc7 and old hardspl?

  107. cobra8210 says:

    Does rooting ur phone stop u from downloadin 3rd party files(games,applications, etc)from the market place on the motorola cliq android phone? And does it make ur phone run faster?

    • TheUnlockr says:


      1. No not at all.
      2. No but it can. Rooting simply gives you access to ALL the files and permissions on your phone. To you that may not mean anything but to a developer (who makes a custom ROM for your phone) this means he can overclock the processor, setup system tweaks, give you themes, more apps, Wifi tethering, etc. So Rooting doesn’t give you these things but it allows you to download and install a developer’s ROM and that will give you these things.
      Alternatively, if you have root and dont want to load a whole ROM you can also download overclocking programs etc from the Market that say “only for root users”, etc.

  108. ADRIAN says:

    i have a question.. i have donut 1.6 on my G1 if i back to cupcake i need 3G networtk to activate my G1 with the google gmail account? im scared cuz i have no 3G network in my area

  109. LeDigitale says:

    Hi Unlockr,

    I just got a new Vodaphone HTC Magic (32B – Australian version)and I want to root it, in order to install a custom ROM on it but I was wondering if I could create a backup of my original ROM Cupcake(1.6) and settings in case something goes wrong or I need to send the phone back to Vodaphone for any warranty issues?

    If this can be done, How do I do it?

    Thanks in advance and congrats on this site very useful information.

    • TheUnlockr says:


      Unfortunately, we are actually looking for such a program, mainly because you need it to root (since Cupcake wont let you root without downgrading). So you wont be able to root without a .nbh file for Vodafone to downgrade the Magic to 1.5 then root and bring it back up to Cupcake (or beyond).

  110. dee says:

    Hi I want to root my phone for the first time and I wanted to know if I have to downgrade to 1.5 firmware because I have 1.6 firmware right now.

  111. Tim says:

    Hi Unlockr,

    Just read your post to Thomas asking about downgrading to Cupcake, rooting then going to Donut. Do you have to downgrade to Cupcake in order to root? And I wasn’t quite sure whether or not you can upgrade back to Donut once you have rooted ( and still have root access).

    Sorry just a little confused!



  112. ahmed says:

    hey i like your explantion a lot and how easy your steps are but i have a g1 and i got my phone to go to cupcake like the very first step you have and you guys said when your phone says update press okay i did and then it updated and then i downloded the file to go back to cupcake and it keeps saying con my phone installation aborted i put it to update and everything it just keeps telling me is bad do you have any ideas what i should do?

  113. adrian says:


  114. adrian says:

    Nope y try to press the (camera + end ) or (home + end) but nothing work I try to use adb shell to run the recovery mode but i cant cuz my phone is stock in the black screen with the logo T-mobile G1… do u know another way i want my g1 back to the life pliz

  115. Jason says:

    Hi Ive been trying to downgrade a friends mytouch to 1.5 but everytime i try i get a message that says the signature is wrong. Is this because its not the original sd card or is it something else i just missed? If it is the sd card is there a way around this to gain root as I do not have the original.

    • TheUnlockr says:


      Redownload the Sappimg.nbh file to your computer then transfer it to your phone’s SD card. Then boot into bootloader and try again (sometimes downloads get corrupted).

  116. Ron says:

    Hey, after my phone gets past the android sign, it disappears and then there is just a black screen. I’m trying to boot it on a new rom and it obviously isn’t working. So, any suggestions to make it work??

  117. NAbeel says:

    How to unroot without HTC sync .I have a G2 htc vodaphone touch .Htc sync isnt working i have tried many downloads and reinstallation but my phone just isnt syncing(except for mounting it works nicely). I bought my phone, sort of, second hand so i didnt get the official usb cable or anything nor a sd card. Is my phone hopeless to unroot or root. Plz help me,the unlockerguy!!! 🙁

  118. NAbeel says:

    sorry phone is not a touch but a magic :S my baaad! sorry!

  119. luis says:

    okk im a little lost with this.. so i have a myTouch 3G and i’ve never rooted the phone, my firmware version is 1.6, that means i have a Donut phone?!?!?!?!

    • TheUnlockr says:


      Correct, you have Donut.
      Use the unroot mytouch 3g procedure to downgrade to cupcake, then use the how to root in one click procedure to root and then use the how to load a custom rom and youre all done. Then from then on you can load whatever roms you want by just putting them on the sd card, wiping, and reapplying the rom.

  120. JC Fuentes says:

    Hi Unlockr, I have a question for you.
    I just got a mytouch3g like 2 weeks ago, I have been trying to unroot it, but i cant, because i have this motherboard version.

    HBOOT-1.33.0013 (SAPP31000)
    Oct 21 2009,22:33:27

    I would like to know if Im able to root this device or not?, because i tried the 1 click method, but it did not work,that tells me that backup fail. I also tried the sappimg.nbh. it tells me that i have a wrong ID.

    Can you please help with this issue.

  121. JC Fuentes says:

    I’m sorry I made a mistake on the information about the motherboard, here is the right one.

    HBOOT-1.33.0013 (SAPP31000)
    OCT 21 2009,22:33:27

  122. john says:

    hi ther this all are new to me., umm ive been carrying a rogers htc dream firmware 1.5 and wow it freezes a lot and i want to root it…

    the above procedure… would it work for rogers (canada) htc dream firmware 1.5
    help plzz

  123. john says:

    do we need a data plan ????

    would WIFI work???

    • TheUnlockr says:


      WiFi would only work if you use our How To Activate the G1 without a Data Plan procedure when you come to a point in the procedure that you need to turn on the phone after wiping.

  124. […] *If you have a European Milestone you can find a guide here and download Market Enabler here *A rooting guide for the HTC Tattoo (haven't tried it yet!) and you might be able to install Market Enabler *If there's no root […]

  125. john says:

    umm jst to make everything clear.,.,

    my G1 is from canada and the carrier is ROGERS.

    it will work rite….,.

  126. hoovnick says:

    Dear UnLockr:

    Since the HTC Eris is similar to the Magic/MyTouch, will the downgrade procedure work if I have downloaded the 2.1 leak for the Eris?

  127. ralph says:

    Hi I recently tried rooting my g1 running 1.6 but had many of the previously listed issues that other users were having. Particularly problems with the radio install. At this point I just want to get the phone back to factory and let the T-mobile updates take it back up to cupcake. I successfully took it back to RC29 per your procedure (thank you!) but when the phone said it was ready for updating this morning the update failed and the phone is still at rc29. I then tried your update procedures to take it up to donut and then cupcake but failed. After bring the phone back to rc29 I did the one touch root. Is this what is preventing the update from installing correctly? Should I try rc29 again and not do the one touch root. is there a way to undo the one touch root with out having to do the rc29 backup again. It took many tries to get the rc29 file to take before getting past the rainbow screen and the error 10 message.

  128. HUSSNAIN says:

    Well hello there mate i m getting big trouble wid my g1..its DRC92 …dont know that is it Us or Uk version and other thing is that i m updated to unroot 1.6… and got some keyboard problem like when i type

    y it type y9

    0 it type 60

    is this my fone problem or the os problem

  129. abc calendar says:

    […] staat het er precies niet bij Bij het googlen kom ik uit op deze site voor het rooten : How To: Root a Donut Phone (Android 1.6) | The Unlockr Slide me org uitleg vind je op deze link SlideME | Android Community and Application Marketplace […]

  130. Reji says:

    I am trying to downgrade my mytouch running 1.6 to 1.5 in preparation for rooting it, but I can’t seem to get the sappimg.nbh file on the megaupload site (site says that the file was removed and I don’t see any letters/numbers to type in in the top corner, like a previous thread states). Yesterday I searched for this file at other sources and almost picked up a virus on my PC.

    Can someone point me at a definitive URL for grabbing that file, please?

  131. theezy says:

    when i hold the end key and camera key the red green blue white screen comes up it says
    dre100 pvt 32b

    sep 2 2008

    it goes to a white loading screen says “no image file”. then goes back to colored screen and says serial0 in then middle of the screen

  132. theezy says:

    how do i format my sd card to FAT32?

  133. jedi says:

    FYI megaupload’s ‘ADS’ tried to give me a trojan. isn’t there a better site to upload the files to? pretty sure rapidshare is a much less bunk approach.
    plus i cant download from megaupload on the phone.

  134. marc says:

    hi! having european htc dream g1 with 1.6 software. when trying to “downgrade” i always get the “not allowed” message in the rainbow screen and that’s it. tried the fat32 thing, re-downloaded the files, tried starting from the generic bootloader: all of it does not work. after 3 hours of trying and reading in fora i am sick and tired. i used to have a nicely rooted g1, now after recieving an refurbished device, i cannot root it anymore. sucks! thanx for help!

  135. Roberto says:

    IHavee a Brand New Tmobile G1, it came with 1.5 but than I uprgraded to 1.6, but I was wondering does this method still work on my g1? And what are the pros and cons of the rooting the g1? Will it break my phone or mess it? And will I still be able to use 3G data, phone calls, texting and browsing when rooted and using a custom roms?

    • TheUnlockr says:


      Yes it works but look for the updated version of the procedure on the site (just easier to understand).
      no it will not mess up your phone and yes all features including 3g will work (check the ROM you want to use though for know issues using that specific ROM like no Bluetooth etc).
      Good luck!

  136. Joop says:

    Sad that it requires a downgrade to 1.5 since that doesn’t work without a GoldCard (and I don’t know if that will work because I refuse to go through that mess).

    Wish someone would focus on a 1.6 root and leave 1.5 in the past.

    • TheUnlockr says:


      The issue is that the only way devs know how to root 1.6 is to downgrade to 1.5 where the there is an exploit for us to root with… Goldcard is actually pretty easy. Just follow our How To Create a Goldcard procedure on the site word for word. Shouldn’t take more than 15 minutes. Good luck!

      • Glen Currier says:

        the only problem with that answer dave, is that the revskills website is no longer operational…If I had the ability (in a short amount of time) I would endeavor to do it myself.  But, as it stands, I lack the precise expertise…

  137. DonJuan says:

    Every where that I’ve looked to download, the .zip file is corrupt. I’ve downloaded it multiple times from several different sites. Any help there?

  138. Purple says:

    Can’t seem to access steps 2 and 3. Is it just me?

  139. Ido Deisuke says:

    I do all that is in the instructions but when i wanna install the spl it says:
    E: no signature (5 files)
    E: verification failed…
    What did i wrong?

  140. aceccy says:

    does this work on firmware 1.6?

  141. y3kgin says:

    so you mean 1.6 can’t be rooted it’s self you have to use 1.5 if you want a rooted phone.

  142. Cricket Chris says:

    I’m trying to figure out how to root my Zio android which is on donut, help me please. Thank you

  143. […] מצולם, וכתוב, תמצאו בלינק הבא. יש להגיע למדריך הרלוונטי למכשירכם, בהתאם לקישורים […]

  144. salman says:

    PLEASE HELP ME…. i HAVE htc dream g1,,with 1.6,,its DRC92,,i downloaded da dreaimg.nbh file and put it in my sd card,,when i go into da bootloader,,it displays 3 colors den says checking..somthing else and then says NOT ALLOW**..den goes back to da 3 colours screen and says serial 10…wt to do please help..and i also tried to simply put in da cupcake rom,,wdot using da dreaimg.nbh file but when i try to update it it says installing updates and den says faild to install,,please help…I WOULD APPRECIATE THAT U TELL ME DA SOLUTION AT MY maiL ADDRESS..… hope to revieve ur mail as i dont use my pc more often but do check my mail regularly via my phone mail..please help..

  145. AQEEL says:

    Could someone please tell me if this tutorial works with a mytouch 3g that came with android 1.6…PLEASE HELP ME

  146. Darris says:

    what about a devour?

  147. Arash Aliz says:

    Killing ADB Server…


    Starting ADB Server…
    * daemon not running. starting it now on port 5037 *
    * daemon started successfully *


    Waiting for device…


    Pushing rageagainstthecage…
    1464 KB/s (0 bytes in 585731.000s)


    chmod rageagainstthecage…


    Running rageagainstthecage…

    Getting mount path…

    Remounting system with read-write access…


    Pushing su…
    547 KB/s (0 bytes in 26264.000s)


    Pushing superuser.apk…
    1364 KB/s (0 bytes in 196521.000s)


    chmod su…


    Remounting system with read-only access…
    mount: Device or resource busy

    and not rooted what is my problem

  148. Ron says:

    hi i would like to root my acer e120 android 1.6? Can i use mytouch unroot process? Thanks

  149. mubeen ejaz says:

    PLEASE HELP ME…. i HAVEGOOLE G1,,with 1.6,,its DRC92,,i downloaded da dreaimg.nbh file and put it in my sd card,,when i go into da bootloader,,it displays 3 colors says checking.. and then says NOT ALLOW…den goes back to da 3 colours screen and says serial 10…wt to do please help..MY EMAIL

  150. Brandon says:

    would this work on a htc tattoo?

  151. is this still working and can this procedure flash the cyanogenmod7 rom? pls reply.. 

    thank you and more power..

  152. will this work in HTC TATTOO?

  153. […] to root the MyTouch 3G and thanks to the process was quick and painless, reference How To: Root a Donut Phone (Android 1.6). I have made a local PDF copy however you should always check theunlockr for news and […]

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.