Leaked Cellebrite Docs Reveal New iPhone Radio Unlock Tool for 2026
Confidential documents describe Advanced Unlocks, a next-generation tool that works with Stolen Device Protection enabled and uses a radio vector.
Key points
- Cellebrite's Advanced Unlocks product is designed for release in 2026.
- The tool uses a radio vector with an eight-meter range to access devices.
- It operates even when Apple's Stolen Device Protection feature is active.
Confidential Cellebrite documents leaked to security researcher Justin.sh describe a new forensic tool called Advanced Unlocks. According to the report published on October 20, 2026, this product represents a new capability for accessing locked iPhones, distinct from previous services.
The leaked materials indicate that Advanced Unlocks, abbreviated as AU, is a next-generation after-first-unlock vector. Cellebrite states that this new approach is more resilient to changes in Apple’s operating system than previous methods. The tool is distinct from the company’s earlier marketing of advanced unlocking services, marking a separate product line for the upcoming year.
Technical Capabilities and Range
The document highlights that Advanced Unlocks functions via a dedicated appliance with a stated operational range of approximately eight meters. This radio-based approach is described as a next-generation AFU vector. According to Schneier on Security, which reported on the leak, this method works with Stolen Device Protection enabled on the target iPhone.
Stolen Device Protection is an Apple feature that tightens USB restrictions. The ability of AU to work with this protection active is a key feature noted in the leaked documents. The eight-meter range is a stated specification of the dedicated appliance used to enable the unlock process.
Product Timeline and Context
A press release from earlier in 2026 confirmed that Advanced Unlocks is a new product scheduled for that year. This aligns with the timeline presented in the leaked confidential documents. The tool is described as an evolution of Cellebrite’s existing capabilities, specifically targeting resilience against iOS updates.
The distinction between AU and previous services is important for understanding the scope of the new product. While Cellebrite has marketed advanced unlocking services for years, AU is positioned as a specific next-generation vector. This suggests a dedicated hardware and software solution for 2026.
What should you do?
Security professionals should monitor for new Cellebrite hardware releases in 2026. Organizations should review their device management policies to understand the capabilities of new forensic tools. Users should remain aware that new vectors may work with existing protections enabled.
What to do and how to stay safe: Cellebrite
- Monitor official vendor announcements for new hardware appliances that could access devices with protections enabled.
- Review organizational policies regarding the physical security of mobile devices, noting new radio-based capabilities.
- Ensure that all devices have the latest operating system updates installed to maintain resilience against OS changes.
- Educate users on the fact that new tools may work with Stolen Device Protection enabled.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is Advanced Unlocks?
Advanced Unlocks is a new Cellebrite product for 2026 that uses a radio vector and works with Stolen Device Protection enabled.
How far away can the tool operate?
According to the leaked documents, the dedicated appliance has a stated range of about eight meters.
Does this work with Stolen Device Protection?
Yes, the tool works with Stolen Device Protection enabled, which tightens USB restrictions.
