When removing iTunes encryption, it is important to ensure that you do not overwrite data created on your forensic workstation.

To remove the iTunes encryption using UFED 4PC follow these steps:

  • Connect the Cellebrite UFED adapter.

  • Plug the iPhone into the system and unlock it by entering the passcode.

  • Check for success by opening iTunes. Plug the device directly into the forensic workstation with the UFED device adapter and check under Backups to see if the encryption was removed.

In order to ensure that you do not accidentally overwrite a backup file, use the UFED device adapter along with UFED 4PC.

Share this post