Overview
- Reporting published Friday drew on a Magnet Forensics training video to show a GrayKey Preserve feature that reportedly keeps an iPhone in the After‑First‑Unlock (AFU) state across reboots, activates airplane mode to cut wireless links, and stops some automatic deletions.
- Apple introduced the Inactivity‑Reboot in 2024 to force devices into a Before‑First‑Unlock (BFU) state after 72 hours without an unlock so key data stays inaccessible until the owner enters a passcode.
- The internal video cited by reporters is said to date from early 2025, and neither Magnet Forensics nor Apple has publicly confirmed or explained the technical claims.
- Security researchers say the tool may work by manipulating the device clock or related processes, but independent technical validation is not yet available and experts advise fully powering off an iPhone before seizure as a practical mitigation.
- GrayKey products are sold to law‑enforcement agencies worldwide, and the reported capability—if confirmed—would expand forensic access for investigators while raising questions about misuse, vendor fixes, and legal limits on seized‑device searches.