Magnet Forensics Cracks iPhone Inactivity Reboot, Raising Privacy Concerns

Law enforcement may now be able to access data on locked iPhones, according to a report by Engadget. 404 Media claims it has seen a training video demonstrating Magnet Forensics tools bypassing Apple’s iPhone inactivity reboot feature.

Apple’s Inactivity Reboot Feature

Introduced in 2024, Apple’s inactivity reboot feature automatically restarts iPhones after 72 hours of inactivity, placing them in a more secure ‘Before First Unlock’ (BFU) state. This feature disables biometrics, encrypts data, and significantly restricts access.

Magnet Forensics and GrayKey

Magnet Forensics’ GrayKey tool, sold to law enforcement, is now reportedly capable of bypassing the BFU state. A recent training video shows a new version of GrayKey’s Preserve tool and Evidence Preservation Mode that allows access even when the iPhone is in its secure BFU state.

Expert Commentary

“This is an absolute game changer for iOS forensics and a function that I wish we had years ago,” a Magnet employee reportedly stated in the video.

How It Works

While the exact method is unclear, 404 Media suspects Magnet Forensics has found a way to revert locked iPhones from the BFU state to the ‘After First Unlock’ (AFU) state, which is less secure and allows full biometric functionality and access to more data.