5 ms·

Something that could come in handy: You can put iPhones into passcode mode by holding down a volume button + the lock button (the poweroff/emergency mode sequen

Something that could come in handy: You can put iPhones into passcode mode by holding down a volume button + the lock button (the poweroff/emergency mode sequence), and then cancelling.

sturges 9mo ago
Five presses of the power button works too.
- doubletwoyou 9mo ago
  just tested it and it seems to be a bit finicky if i dont click those 5 presses fast enough it instead opens apple cash or whatever it’s called i’m assuming that in a stressful situation it’d be much more consistent to hold down power and volume rather than clicking quickly
- aftbit 9mo ago
  5 clicks on power button is auto-911 on my Graphene/Android device
michaelmior 9mo ago
For Android, you can hold down the power button and press the Lockdown option that appears. (I think this may need to be enabled in settings.)
- ranger_danger 9mo ago
  Probably a much better idea to just go ahead and hit shutdown if you're on that screen anyway, since many phones are more susceptible to gear like Greykey or Cellebrite if they have ever been unlocked since the last power-on.
rimunroe 9mo ago
My understanding is that this and similar techniques don't get you back into the before first unlock (BFU) state. To do that as far as I know you have to shut down the device. Otherwise--even if locked--your phone will be in the after first unlock (AFU) state. I believe that in the AFU state considerably more of the system is decrypted and accessible than in the much more limited BFU state. Maybe someone with more knowledge can chime in here.
- fragmede 9mo ago
  You used to be able to ask Siri "who am I", and it would lock out biometrics, but they removed that feature and I don't know why.
- retsl 9mo ago
  This is true but there's automatic restart which will automatically restart the phone to get it back into BFU state: > Automatic Restart is a security mechanism in iOS 18.1 iPadOS 18.1 and or later that leverages the Secure Enclave to monitor device unlock events. If a device remains locked for a prolonged period, it automatically restarts, transitioning from an After First Unlock state to a Before First Unlock state. During the restart, the device purges sensitive security keys and transient data from memory. https://help.apple.com/pdf/security/en_US/apple-platform-security-guide.pdf https://help.apple.com/pdf/security/en_US/apple-platform-sec... > [...] inactivity reboot triggers exactly after 3 days (72 hours). [...] https://naehrdine.blogspot.com/2024/11/reverse-engineering-ios-18-inactivity.html https://naehrdine.blogspot.com/2024/11/reverse-engineering-i... GrapheneOS also has this (https://grapheneos.org/features#auto-reboot https://grapheneos.org/features#auto-reboot) with a default of 18 hours. Maybe one could try to force restart (https://support.apple.com/en-gb/guide/iphone/iph8903c3ee6/ios https://support.apple.com/en-gb/guide/iphone/iph8903c3ee6/io...) to quickly get to BFU. But I could imagine that it'd be hard to remember and then execute the right steps in a stressful situation.
gurjeet 9mo ago
On iPhone SE (and I'm guessing any iPhones with a home button) just a long-press of the power button is sufficient to trigger the passcode input.
- deleted 9mo ago
  [deleted]
- deleted 9mo ago
  [deleted]
Aaargh20318 9mo ago
I wish phones supported continuous re-authentication. Like an in-screen fingerprint reader that authenticates every single touch (even better if you could also use it to assign different actions to different fingers), or to have FaceID immediately lock the phone if someone other than the owner is using it.

Something that could come in handy: You can put iPhones into passcode mode by holding down a volume button + the lock button (the poweroff/emergency mode sequence), and then cancelling.

sturges 9mo ago

Five presses of the power button works too.

doubletwoyou 9mo ago
just tested it and it seems to be a bit finicky if i dont click those 5 presses fast enough it instead opens apple cash or whatever it’s called i’m assuming that in a stressful situation it’d be much more consistent to hold down power and volume rather than clicking quickly
aftbit 9mo ago
5 clicks on power button is auto-911 on my Graphene/Android device

michaelmior 9mo ago

For Android, you can hold down the power button and press the Lockdown option that appears. (I think this may need to be enabled in settings.)

ranger_danger 9mo ago
Probably a much better idea to just go ahead and hit shutdown if you're on that screen anyway, since many phones are more susceptible to gear like Greykey or Cellebrite if they have ever been unlocked since the last power-on.

rimunroe 9mo ago

My understanding is that this and similar techniques don't get you back into the before first unlock (BFU) state. To do that as far as I know you have to shut down the device. Otherwise--even if locked--your phone will be in the after first unlock (AFU) state. I believe that in the AFU state considerably more of the system is decrypted and accessible than in the much more limited BFU state. Maybe someone with more knowledge can chime in here.

fragmede 9mo ago
You used to be able to ask Siri "who am I", and it would lock out biometrics, but they removed that feature and I don't know why.
retsl 9mo ago
This is true but there's automatic restart which will automatically restart the phone to get it back into BFU state: > Automatic Restart is a security mechanism in iOS 18.1 iPadOS 18.1 and or later that leverages the Secure Enclave to monitor device unlock events. If a device remains locked for a prolonged period, it automatically restarts, transitioning from an After First Unlock state to a Before First Unlock state. During the restart, the device purges sensitive security keys and transient data from memory. https://help.apple.com/pdf/security/en_US/apple-platform-security-guide.pdf https://help.apple.com/pdf/security/en_US/apple-platform-sec... > [...] inactivity reboot triggers exactly after 3 days (72 hours). [...] https://naehrdine.blogspot.com/2024/11/reverse-engineering-ios-18-inactivity.html https://naehrdine.blogspot.com/2024/11/reverse-engineering-i... GrapheneOS also has this (https://grapheneos.org/features#auto-reboot https://grapheneos.org/features#auto-reboot) with a default of 18 hours. Maybe one could try to force restart (https://support.apple.com/en-gb/guide/iphone/iph8903c3ee6/ios https://support.apple.com/en-gb/guide/iphone/iph8903c3ee6/io...) to quickly get to BFU. But I could imagine that it'd be hard to remember and then execute the right steps in a stressful situation.

gurjeet 9mo ago

On iPhone SE (and I'm guessing any iPhones with a home button) just a long-press of the power button is sufficient to trigger the passcode input.

deleted 9mo ago
[deleted]
deleted 9mo ago
[deleted]

Aaargh20318 9mo ago

I wish phones supported continuous re-authentication. Like an in-screen fingerprint reader that authenticates every single touch (even better if you could also use it to assign different actions to different fingers), or to have FaceID immediately lock the phone if someone other than the owner is using it.