Magnet Forensics’ GrayKey may have found a way to preserve access to seized iPhones despite Apple’s 72-hour inactivity reboot, according to a leaked law-enforcement training video obtained by 404 Media.
Apple’s Inactivity Reboot automatically restarts an iPhone after an extended period without being unlocked. The reboot moves the device from After First Unlock (AFU) to the more secure Before First Unlock (BFU) state, making some data harder for forensic tools to access.
The leaked video reportedly demonstrates GrayKey Preserve and Evidence Preservation Mode, which Magnet says can preserve the device’s forensic state through reboots or power loss. Magnet also publicly describes GrayKey Preserve as a tool for protecting mobile evidence from automatic reboot timers and data expiration.
However, the exact technical method has not been disclosed, and the claims have not been independently verified. It is also unclear how effective the capability is against the latest iOS versions.
If confirmed, the development could significantly change how investigators handle seized iPhones where access is delayed.