Apple’s recent iOS 18.1 update has introduced a feature that’s causing frustration among law enforcement. Known as the “inactivity reboot,” this feature automatically restarts an iPhone if it remains locked for an extended period, returning it to a more secure state that’s harder to access without the owner’s credentials. As police attempt to access locked devices for forensic investigation, they’re finding these devices mysteriously rebooting, making it nearly impossible to extract data. This change has sparked concern in the law enforcement community, which speculated initially that connectivity issues or network requirements might be to blame.
Security experts have now identified that the reboot is triggered solely by a set inactivity timer, not by network connections or charging. When the timer runs out, the device reboots to what’s known as the “Before First Unlock” (BFU) state, a more secure mode that’s notoriously difficult for forensic tools to penetrate. This state differs from “After First Unlock” (AFU), which is easier for law enforcement to access because the phone has already been unlocked once by its user.
The new feature reflects Apple’s ongoing dedication to user privacy and security, even as it complicates forensic investigations. Security analysts like Matthew Green, a cryptography expert, view this as a positive step, arguing that the feature enhances device security by preventing prolonged unauthorized access. If a thief were to steal an iPhone, this reboot feature would limit their ability to bypass the phone’s security after a period of inactivity.
While Apple remains silent on the feature, law enforcement professionals have advised immediate data extraction from devices running iOS 18 to avoid losing access. The new iOS feature underscores the complex balance between security measures for users and the challenges they pose for law enforcement.
