interesting · Mobile — physical
GrayKey claims it can preserve an iPhone’s After First Unlock state through inactivity reboot or power loss.
Affects
Apple iPhone devices running iOS, when seized after at least one unlock and connected to Magnet GrayKey Preserve or a GrayKey system with Evidence Preservation Mode.
The claim would extend the forensic-access window indefinitely, but it applies only after the phone has already entered After First Unlock state and the preservation mode is activated.
Detail and 5 sources
We do not know the mechanism, supported hardware and iOS boundary, or whether the behavior works on fully updated devices.
Chain to watch
Obtain an iPhone that has been unlocked since boot.→↓Activate GrayKey preservation while it remains in After First Unlock state.→↓Test whether reboot or power loss ends the forensic-access window.→↓Current-version compatibility and preservation of the relevant keybag state have not been independently verified.
Unverified chainObserve keybag state on fully updated iPhones before and after inactivity reboot and power loss.
Sources
ResearchCops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video ClaimsResearchGrayKey maker can reportedly bypass the iPhone’s ‘Inactivity Reboot’ - 9to5MacResearchMagnet Graykey: Mobile Device Forensics | Magnet ForensicsResearchA forensic tool claims it can stop seized iPhones from locking down after 72 hours | TechSpotResearchDFIR News, 05 Oct 2026 - Forensic Focus