Google Introduces Automatic Reboot for Android Devices to Protect User Data
Google is rolling out a new security feature for Android devices that will automatically reboot locked and unused devices after three days of inactivity. This process returns the device’s memory to an encrypted state, making it more difficult for unauthorized parties to extract data.
How the Automatic Reboot Works
While Google has not provided detailed reasoning behind this new feature, it appears to be designed to hinder data extraction using digital forensic tools. When a device is rebooted, it transitions from the “After First Unlock” (AFU) mode—where user data is decrypted and accessible—to the “Before First Unlock” (BFU) mode, in which most user data remains encrypted and inaccessible until the device is unlocked again.
Devices that are seized by law enforcement or stolen are often in AFU mode, meaning that even if they are locked, some data can still be extracted. The new automatic reboot feature aims to reduce this risk by ensuring that devices left unused for 72 hours will reboot and return to the more secure BFU state.
Background and Industry Context
The idea of automatic reboots for security purposes was first proposed in January 2024 by the developers of GrapheneOS, a privacy-focused Android-based operating system. They suggested adding an auto-reboot function to Android to make it harder to exploit certain firmware vulnerabilities found in devices like Google Pixel and Samsung Galaxy. According to experts, these vulnerabilities have been used by forensic specialists to extract information from devices.
Initially, GrapheneOS developers recommended a shorter inactivity period of 18 hours before triggering a reboot. Google has now implemented a similar feature, but with a 72-hour interval, as part of the latest Google Play Services update (version 25.14) under the Security & Privacy section.
Similar Features in Other Platforms
Last year, digital forensic experts noticed that iPhones would spontaneously reboot if they were not connected to a cellular network for a certain period. It was later confirmed that with the release of iOS 18.1, Apple had introduced an automatic reboot feature as a security measure.