Your personal data is safer just after restarting your phone

It goes without saying that our phones contain some of our most personal information. This includes conversations, credentials, camera rolls, and many other pieces of information that we wouldn’t want to share with everyone. But more convenient unlocking methods, like fingerprint scanning and facial recognition, come with their own set of risks. Anyone curious enough can easily open your phone and access all that data. However, if you restart your phone often, you’ll be doing the digital equivalent of pulling the drawbridge to protect what’s inside. In this state, your device enters BFU or Before First Unlock, which requires you to enter your passcode, PIN, or password before your chosen biometric unlock option becomes available. In this state, your phone’s files remain encrypted until they enter AFU, or after the first unlock; only then will your files become accessible again until the next shutdown or restart.

You will know that your device has entered its BFU state if you see a little text implying that you will be able to unlock all of your features and data before entering your password. And before we start a debate about whether iOS is more secure than Android, both operating systems have this feature by default. BFU has been integrated as a key security feature since iOS 8 and Android 7.0 (Nougat), so if you have a relatively new device, you’re covered. In fact, in later versions your device will automatically restart and enter BFU again if it hasn’t been turned off after a while. With default settings, your iPhone automatically restarts after 96 hours, while your Android device restarts after 72 hours of inactivity.

In BFU state, your personal information, files and other sensitive data remain encrypted. In the event that your device is retrieved for information while in BFU, only certain data is accessible, such as device information, recent system notifications, and incoming calls and messages. This is useful if you are unable to access your own device while trying to keep sensitive information out of reach. To make sure BFU is enabled on your device, you’ll need a four- or six-digit PIN, an alphanumeric password, or a pattern you can draw (which is a method available on Android devices). Whatever unlock method you choose, don’t save one that can be easily guessed by anyone – and even if you have a secure code in mind, be sure to update your passwords regularly.

If you find yourself in a situation where law enforcement might demand access to your phone or a thief forces you to unlock it, turning it off (or restarting it) before handing it over is a safe and smart move to make. Additionally, a 2019 U.S. court ruling in California ruled generally that police cannot force you to disclose your password, which is protected by the Fifth Amendment. So if your phone is in BFU, they can’t force you to enter it – and they can’t bypass it with your fingerprint either. Just be sure to check your local jurisdiction’s position regarding disclosing your phone’s password to court officers or legal representatives.