Magnet Forensics develops tool to bypass iPhone security restarts

Magnet Forensics has reportedly introduced a new hardware and preservation mode called ‘GrayKey Preserve’ designed to bypass Apple’s iPhone security features. The tool aims to prevent the automatic system restart that occurs when an iPhone remains locked for 72 hours.

According to training materials for law enforcement, the technology targets the security logic introduced in recent iOS versions. When an iPhone is not unlocked for 72 hours, it typically transitions from the ‘After First Unlock’ (AFU) state to a more secure ‘Before First Unlock’ (BFU) state, which restricts access to sensitive data and encryption keys.

GrayKey Preserve is intended to keep devices in the AFU state, potentially even after a restart or power loss, to facilitate easier data extraction by forensic investigators. The tool is used by over 1,200 agencies across 40 countries.