Home / Technology / Cops Gain New Access to Locked iPhones
Cops Gain New Access to Locked iPhones
1 Oct
Summary
- New tool bypasses Apple's 72-hour iPhone inactivity reboot security.
- Magnet Forensics' GrayKey Preserve keeps iPhones in accessible data state.
- This circumvents encryption making seized phones easier to access.
A new tool developed by Magnet Forensics, called GrayKey Preserve, reportedly bypasses a key Apple security feature designed to protect iPhones. This feature, introduced in 2024, automatically reboots and encrypts devices after 72 hours of inactivity, making them difficult for law enforcement to access without a passcode. The GrayKey Preserve technology allows police to maintain an 'After First Unlock' (AFU) state on seized iPhones, preserving data access. Previously, devices would revert to a 'Before First Unlock' (BFU) state, re-engaging stronger encryption. This bypass is seen as a significant development for digital forensics investigations. The company claims the tool can preserve user data indefinitely. Magnet Forensics' broader GrayKey product is utilized by over 1,200 agencies globally, though Apple has not yet commented on this specific bypass.
The technology enables investigators to keep iPhones in a state where data is less encrypted and more readily extractable. Apple's security measure was intended to safeguard user information if a device was lost or confiscated and left idle for too long. However, the new workaround ensures that even if the iPhone reboots, it can remain in the more accessible AFU state. Additionally, the tool appears to make remote data wiping or disconnection more difficult for device owners by keeping the phone in Airplane Mode, thereby cutting off wireless access. This development marks a significant shift in the ongoing efforts by law enforcement to access data on encrypted mobile devices.
