From 7b1b31f7be3d357cbb4f401b3e0944f8aaf7d136 Mon Sep 17 00:00:00 2001 From: Daniel Kahn Gillmor Date: Fri, 30 Jul 2021 23:44:44 -0400 Subject: [PATCH 1/2] Update libimobiledevice docs about backup password reset In this stage, the user is likely to want to run `idevicebackup2` in interactive mode, so clearly specify the `-i` flag in the right place (just dropping `-i` at the end of the command does not work as expected -- i think `idevicebackup2 backup encryption on -i` tries to set the password to `-i`). More importantly, note that resetting the password by resetting all the settings runs a risk of removing some of the forensic information. Etienne identified a file that he thought was wiped as a result of this in the call this morning, but I don't remember which file it was. Maybe `id_status_cache.json` ? If you have more concrete info, please add it here too! --- docs/ios/backup/libimobiledevice.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/ios/backup/libimobiledevice.md b/docs/ios/backup/libimobiledevice.md index 892717c..9b40903 100644 --- a/docs/ios/backup/libimobiledevice.md +++ b/docs/ios/backup/libimobiledevice.md @@ -3,10 +3,12 @@ If you have correctly [installed libimobiledevice](../install.md) you can easily generate an iTunes backup using the `idevicebackup2` tool included in the suite. First, you might want to ensure that backup encryption is enabled (**note: encrypted backup contain more data than unencrypted backups**): ```bash -idevicebackup2 backup encryption on +idevicebackup2 -i backup encryption on ``` -Note that if a backup password was previously set on this device, you might need to use the same or change it. You can try changing password using `idevicebackup2 backup changepw` or resetting the password by resetting only the settings through the iPhone's Settings app. +Note that if a backup password was previously set on this device, you might need to use the same or change it. You can try changing password using `idevicebackup2 -i backup changepw`, or by turning off encryption (`idevicebackup2 -i backup encryption off`) and turning it back on again. + +If that fails, as a last resort you can try resetting the password by [resetting all the settings through the iPhone's Settings app](https://support.apple.com/en-us/HT205220), via `Settings » General » Reset » Reset All Settings`. Note that resetting the settings through the iPhone's Settings app may wipe some of the files that contain useful forensic traces, so try to reset the device's password using `idevicebackup2` as described above first. Once ready, you can proceed performing the backup: From 38b7aa60320a8f20e22d5357f267433b80046427 Mon Sep 17 00:00:00 2001 From: Nex Date: Sat, 31 Jul 2021 10:19:38 +0200 Subject: [PATCH 2/2] Updated doc on backup --- docs/ios/backup/libimobiledevice.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/ios/backup/libimobiledevice.md b/docs/ios/backup/libimobiledevice.md index 9b40903..5d05c8a 100644 --- a/docs/ios/backup/libimobiledevice.md +++ b/docs/ios/backup/libimobiledevice.md @@ -8,7 +8,9 @@ idevicebackup2 -i backup encryption on Note that if a backup password was previously set on this device, you might need to use the same or change it. You can try changing password using `idevicebackup2 -i backup changepw`, or by turning off encryption (`idevicebackup2 -i backup encryption off`) and turning it back on again. -If that fails, as a last resort you can try resetting the password by [resetting all the settings through the iPhone's Settings app](https://support.apple.com/en-us/HT205220), via `Settings » General » Reset » Reset All Settings`. Note that resetting the settings through the iPhone's Settings app may wipe some of the files that contain useful forensic traces, so try to reset the device's password using `idevicebackup2` as described above first. +If you are not able to recover or change the password, you should try to disable encryption and obtain an unencrypted backup. + +If all else fails, as a *last resort* you can try resetting the password by [resetting all the settings through the iPhone's Settings app](https://support.apple.com/en-us/HT205220), via `Settings » General » Reset » Reset All Settings`. Note that resetting the settings through the iPhone's Settings app will wipe some of the files that contain useful forensic traces, so try the options explained above first. Once ready, you can proceed performing the backup: