Overview
- A video published Oct. 1, 2026 and obtained by multiple outlets shows a Magnet Forensics tutorial claiming a new GrayKey Preserve device and an Evidence Preservation Mode can hold iPhones in an After First Unlock (AFU) state even across reboots.
- The company in the video says the feature also stops expiration of cached locations, recently deleted photos, and iMessages so that those items remain available indefinitely for later extraction.
- The leaked clip gives operational hints—such as placing devices in Airplane Mode to isolate them—but it offers no technical disclosure or proof and appears dated from early 2025.
- Independent researcher Jiska Classen says the video lacks a mechanism and she suspects tactics like manipulating the device clock or disabling expiry tasks, while Apple and Magnet have not publicly confirmed or explained the claims.
- It is unknown whether the capability has been used in real investigations or still works on current iOS releases, and the report raises policy and privacy concerns about vendor control, export rules, and potential misuse by bad actors.