A tool has emerged that allows police to bypass the automatic restart of seized iPhones, making it easier to extract data.

iPhones have a feature called 'inactivity restart,' which automatically restarts the device after a certain period of time if it remains locked. According to overseas media outlet 404 Media, a tool has been developed to disable this inactivity restart feature, making it easier for police to extract data from seized iPhones.

Cops Can Bypass iPhone's Automatic Reboot to Get Into Locked Phones, Leaked Video Claims
https://www.404media.co/cops-can-bypass-iphone-automatic-inactivity-reboot-graykey/

Inactivity restart is a feature that automatically restarts a smartphone if it remains locked for a certain period of time without being unlocked. The security state of a smartphone differs significantly between 'before the first lock after restart' and 'after the first lock.' Before the first unlock, Face ID and Touch ID do not function, and a passcode must be entered to unlock the phone. In addition, the Wi-Fi password is encrypted, preventing Wi-Fi connection, making it difficult to bypass the lock screen using vulnerabilities or attempt to extract data through physical access.

Therefore, the feature that automatically restarts a smartphone after it is stolen or lost is a useful feature for enhancing smartphone security. iPhones introduced the 'restart when inactive' feature in iOS 18, released in 2024.

iOS 18.1 quietly adds a 'Restart When Inactive' feature that restarts locked iPhones after a certain period of time - GIGAZINE

Furthermore, Android 16, released in 2025, also added the feature to restart when the device is inactive.

Google announces Android 16 security features, including enhanced message fraud detection, prevention of app sideloading during calls, and improved advanced protection programs - GIGAZINE

However, a video obtained by 404 Media for law enforcement officials reportedly showed that digital forensics firm Magnet Forensics had developed a solution to prevent iPhones from restarting when inactive. Magnet Forensics is the company that develops and provides the smartphone unlocking tool 'GrayKey'.

Instructions for 'GrayKey,' a device that allows unauthorized users to unlock iPhones, have been leaked - GIGAZINE

In the video, a Magnet employee says, 'This is a game-changer for iOS forensics, and it's a feature we've wanted for years.' Magnet has developed a new device called 'GrayKey Preserve' and a new feature mode for existing GrayKey devices called 'Evidence Preservation Mode.'

GrayKey Preserve and Evidence Preservation Mode also support the iPhone's feature that automatically deletes certain data, such as cached location information, recently deleted photos, and iMessages, after a certain number of days. In the video, an employee explains, 'We will be able to store that data indefinitely.'

The specific mechanism for preventing restarts when inactive is unclear, but it seems that airplane mode is enabled during initial access, turning off wireless communication such as Bluetooth and Wi-Fi, and isolating the data. An employee stated, 'Even if the device restarts for any reason, such as memory maintenance or power loss, the state after the initial unlock will not be lost. This is the essence of GrayKey Preserve and Evidence Preservation Mode.'

Giska Klassen, who studies iPhone security, responded that it's impossible to tell how Magnet's new features work from the video alone. She speculated that Magnet may have discovered a way to manipulate the iPhone's time, allowing it to slow down or even stop the internal time.