$15K GrayKey device marketed to law enforcement can reportedly unlock even the latest iPhones, posing serious security concerns
Ever since the case of the San Bernadino shooter pitted Apple against the FBI over the unlocking of an iPhone, opinions have been split on providing backdoor access to the iPhone for law enforcement.
Context & Ripple Effects
This story sits inside a decade-long standoff: Apple and the US government have clashed over iPhone encryption ever since iOS 8 removed Apple's ability to extract data itself, a conflict that went public with the San Bernardino case, where the FBI pursued workarounds like NAND mirroring rather than accept a mandated backdoor.
GrayKey changes the terms of that fight. Rather than compelling Apple, a $15K box sold directly to agencies lets police break passcodes on their own — Motherboard's follow-up reporting found the State Department and local departments buying it, and later established that it works by brute-forcing the passcode, which is why code strength matters as much as Apple's software.
First-order effects
- Law enforcement buyers — the State Department, local police, and reportedly interested Secret Service and DEA units — gain a way to unlock current iPhones without Apple's cooperation or a court fight over backdoor access.
- iPhone owners face a concrete security exposure: any device seized or stolen can potentially be passcode-cracked offline by whoever holds a GrayKey, independent of Apple's safeguards.
Second-order effects
- Apple's countermeasure arrived within months: sources reported GrayKey could no longer crack any iPhone running iOS 12 or above, forcing buyers of the $15K+ tools to question their value and pushing vendors toward new attack surfaces.
- The brute-force mechanism shifts part of the burden onto users — investigators' guidance to use long alphanumeric passcodes effectively turns individual password hygiene into the last line of defense against a commercial cracking industry.
Third-order effects
- The pattern points to a durable arms race rather than a resolution: Apple hardens each iOS release, forensic vendors find partial ways back in — leaked documents show Graykey still extracting partial data from iPhones up to the 16 running iOS 18 — so the practical policy debate shifts from 'should backdoors exist' to 'who can buy access.'
- If commercial tools keep closing the gap that litigation opened, the legal battleground of San Bernardino gives way to a procurement market, weakening both Apple's leverage over its own platform and lawmakers' ability to draw a clean line on lawful access.
The trend: iPhone security is settling into a recurring cycle in which Apple's encryption gains are eroded by commercially sold forensic tools, moving the encryption fight from courtrooms to police procurement budgets.