Apple added an inactivity timer that reboots iPhones to a more secure state when they haven’t been unlocked in a while.
Share this story
There is an apparently new iOS 18 security feature that reboots iPhones that haven’t been unlocked in a few days, frustrating police by making it harder to break into suspects’ iPhones, according to 404 Media.
404 Media, which first reported police warnings about the reboots on Thursday, writes that restarted iPhones enter a more secure “Before First Unlock,” or BFU state. Now, it seems Apple added “inactivity reboot” code in iOS 18.1 that triggers iPhones to restart after they’ve been locked for four days, Chris Wade, who founded mobile analysis company Corellium, told the outlet.
The code appears below in screenshots posted by Dr. -Ing. Jiska Classen, a Hasso Plattner Institute research group leader.
Both iOS and Android devices enter this BFU state when they’re restarted, requiring you to enter your passcode (or PIN) to unlock your phone, limiting what sort of data forensics experts can extract, according to a blog post from Dakota State University’s digital forensics lab.
Apple didn’t immediately respond to The Verge’s request for comment. The company has steadily made iPhones harder to compromise over the years, putting it at odds with law enforcement and raising the specter of government regulations requiring encryption backdoors. Apple has repeatedly resisted authorities’ requests to create backdoors, although that hasn’t stopped law enforcement from finding its own workarounds.
