● Covered by 3 sources · 3 reportsMedium impact1 negative2 neutral
Magnet Forensics Develops Tool to Bypass iPhone's Inactivity Reboot Feature
Key points
- Magnet Forensics developed GrayKey Preserve and Evidence Preservation Mode.
- These tools bypass Apple's 72-hour inactivity reboot feature on iPhones.
- The tools also preserve data that iOS automatically deletes.
- Law enforcement agencies use these tools to access locked iPhones.
- Apple began equipping many iPhones with an inactivity reboot feature in 2024.
- A training video for law enforcement demonstrates Magnet Forensics' tools.
- A Magnet employee called the new function an "absolute game changer for iOS forensics".
- The iOS 18.1 update introduced the Inactivity Reboot feature.
- The Inactivity Reboot feature forces iPhone reboots after 72 hours of inactivity.
New Tool Bypasses iPhone Security
Magnet Forensics, known for its GrayKey device used by law enforcement, has introduced new technology to circumvent Apple's iOS security features. A leaked video shows the company's new GrayKey Preserve device and an Evidence Preservation Mode for existing GrayKey units. These tools are designed to freeze iPhones in a state that allows continued access to sensitive data, even after the device has been inactive for an extended period.
Addressing Apple's Inactivity Reboot
In November 2024, Apple implemented an automatic reboot feature in iOS for iPhones unlocked for 72 hours. This 'inactivity reboot' was intended to make it harder for law enforcement to extract data from seized devices, as it reverts the phone to a state requiring a passcode for full access. Law enforcement agencies had expressed concerns about this feature, citing delays in obtaining court authorizations or processing backlogs.
Preserving Volatile Data
Beyond bypassing the inactivity reboot, GrayKey Preserve and Evidence Preservation Mode also address another iOS feature: the automatic deletion of certain data after a set number of days. This includes cached locations, recently deleted photos, and iMessages. The new Magnet Forensics tools aim to preserve this type of data indefinitely, according to a Magnet employee in the leaked video.
Impact on Digital Forensics
While the leaked educational video for law enforcement does not detail the technical specifics, it highlights the significance of these new capabilities for iOS forensics. The development represents a continuation of the ongoing technical competition between Apple's device security measures and the tools developed by companies like Magnet Forensics for law enforcement access.
Updates
- The iOS 18.1 update introduced the Inactivity Reboot feature.
- The Inactivity Reboot feature forces iPhone reboots after 72 hours of inactivity.
- Apple began equipping many iPhones with an inactivity reboot feature in 2024.
- A training video for law enforcement demonstrates Magnet Forensics' tools.
- A Magnet employee called the new function an "absolute game changer for iOS forensics".
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
Magnet Forensics, the company behind the GrayKey unlocking tool, has reportedly developed a method to bypass the iPhone's Inactivity Reboot security feature. This bypass allows law enforcement to maintain an iPhone's After First Unlock (AFU) state, even after a reboot, making data more accessible for forensic analysis.
Magnet Forensics has reportedly developed new tools, GrayKey Preserve and an Evidence Preservation Mode for GrayKey, that can bypass Apple's 72-hour inactivity reboot security feature on iPhones. This development could allow law enforcement to access data on locked iPhones that was previously inaccessible after the device automatically restarted.
Magnet Forensics, maker of the GrayKey device, has developed a new tool called GrayKey Preserve and an Evidence Preservation Mode to bypass Apple's iOS inactivity reboot feature. This allows law enforcement to access data on iPhones that would otherwise become inaccessible after 72 hours of inactivity, addressing a concern for police agencies. The new tools also preserve data that iOS automatically deletes after a certain period.