In a quiet but significant security update, Google has announced that Android phones will now automatically reboot if left locked for three consecutive days. The change was introduced through an update to Google Play Services and is intended to reduce the risk of unauthorized access to encrypted data.
The new feature is designed to counteract forensic tools used by law enforcement or hackers, which often rely on a phone remaining in a partially decrypted state after it has been unlocked at least once. By automatically rebooting after 72 hours of inactivity, the device returns to a “Before First Unlock” (BFU) state, where sensitive data remains fully encrypted and largely inaccessible without the passcode.
Following Apple’s Footsteps in Privacy
Apple introduced a similar auto-reboot mechanism in 2024, citing concerns over unauthorized forensic analysis. Google’s move mirrors that approach, signaling a broader industry shift toward reinforcing device-level privacy and security protections—even at the potential expense of accessibility for law enforcement.
Once rebooted, Android devices require a passcode to decrypt user data, effectively blocking brute-force tools that exploit the post-unlock (AFU) state, where some data becomes vulnerable.
Google Silent on Motivation
Although Google has not issued a formal statement on the change, the timing and structure of the feature suggest a clear focus on bolstering user privacy and preempting unauthorized data extraction by both state actors and malicious third parties.
