I bought a used iPhone from someone, but I accidentally got a lock screen on the phone and can't figure out what the passcode is. Long story short, how does iOS hash the passcodes for entry, what kind of salt/etc. does it use, where would it store it, and is it possible to mount the internal drive (I'm guessing SSD?) where it stores the passcode?

Anyone familiar with iOS reverse engineering? Coding/development? Can one mount the whole filesystem and copy the files/decrypt/reverse engineer/view them/hex edit them/etc. (the files of the hashed/encrypted passcode)? I am all up for this 100%; just need some people more familiar with iOS to set me in the right direction.

Why other alternatives aren't good enough:

  1. Can't factory restore; all very important data will be lost that was not backed up.

  2. There's no way to bypass the lock-screen on this iOS version. Only way would be to determine where it stores the hashed/cryptographic passcode on the disk and figure out what it is to re-gain entry.

To be blunt, I'm striving to password crack my own device. On Android this is easy, but I have heard of absolutely no one getting this done with iDevices/iOS.

  • 2
    So you "bought a used iPhone", yet you don't want to factory restore because "all very important data will be lost". It sounds like you're trying to recover stored data from a lost/stolen iPhone (otherwise you wouldn't care about doing a factory restore). – Jason Geffner Sep 26 '14 at 22:05
  • Please don't post duplicate questions; improve the original instead. And absolutely do not create duplicate accounts. – Igor Skochinsky Oct 2 '14 at 2:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.