Magnet Forensics Tools Bypass Apple's Inactivity Reboot Security
New forensic tools from Magnet Forensics allow law enforcement to access locked iPhones, circumventing Apple's automatic reboot security measures.
Magnet Forensics has reportedly developed new technology capable of bypassing Apple's security measures on iPhones, specifically targeting the inactivity reboot feature. According to a report by Engadget, the company showcased these capabilities in a training video designed for law enforcement agencies.
The new tools, identified as GrayKey Preserve and Evidence Preservation Mode, are designed to maintain a device in an "After First Unlock" (AFU) state. By keeping the device in this state, the tools prevent it from reverting to a more secure, encrypted state even if the phone reboots. This allows investigators to access data that would otherwise be locked.
These forensic capabilities are claimed to prevent the automatic deletion of sensitive information, including cached location data, recently deleted iMessages, and photos. This development directly challenges security features Apple implemented in 2024, when the company introduced an inactivity reboot function that automatically restarts iPhones if they remain locked for more than 72 hours, a measure previously effective at blocking law enforcement access.
Quick answers
What are the new tools developed by Magnet Forensics?
The tools are called GrayKey Preserve and Evidence Preservation Mode, designed to keep iPhones in an 'After First Unlock' state.
How do these tools impact Apple's security?
They allow law enforcement to bypass the inactivity reboot feature introduced in 2024, which normally restarts iPhones after 72 hours of inactivity to increase security.