John McAfee iPhone Hack Promise: Fact Check
John McAfee did not hack the FBI’s locked iPhone, and his public offer to do so for free was never carried out. The cybersecurity pioneer made the claim in 2016 during the FBI’s legal fight with Apple over the San Bernardino shooter’s iPhone 5c, but no credible evidence ever showed he delivered a working unlock method. This article separates what actually happened from the legend, explains why the iPhone was so hard to crack, and answers the questions people still ask about the saga.
Background: The San Bernardino Case and the FBI–Apple Standoff
In December 2015, Syed Farook and Tashfeen Malik killed 14 people in San Bernardino, California. The FBI recovered Farook’s work-issued iPhone 5c running iOS 9, but it was locked with a passcode and had a feature that would erase data after too many failed attempts. The FBI wanted Apple to create a special version of iOS that would bypass the passcode limit, but Apple refused, arguing it would create a backdoor that could be abused.
The legal battle became a global debate about privacy versus security. In February 2016, a federal judge ordered Apple to assist the FBI, and Apple publicly resisted. Then, in March 2016, the FBI announced it had found an outside party to help unlock the phone, and the case was dropped. The identity of that outside party was never officially confirmed, and the method used remains unknown.
What John McAfee Actually Said and Did
On February 18, 2016, John McAfee posted a tweet claiming he and his team would “decryptâ€� the San Bernardino iPhone for free, calling the FBI’s request to Apple “a terrible mistake.â€� He said they would do it by extracting data from the phone’s flash memory and bypassing the passcode limit, without needing Apple’s help.
McAfee later claimed he had already done this, but he provided no proof and never showed a working method. When the FBI announced it had unlocked the phone through an unnamed third party, McAfee claimed credit in some interviews, but he never produced evidence. The FBI never confirmed his involvement, and no independent source verified his claims. McAfee was known for provocative statements and self-promotion, and many cybersecurity experts treated his iPhone claim with skepticism from the start.
Why the iPhone Was So Hard to Crack
The iPhone 5c in question ran iOS 9, which had several security features that made brute-force attacks difficult:
- Passcode attempt limit: After 10 failed attempts, the device would erase all data.
- Hardware encryption: The device used a dedicated encryption engine, and the passcode was combined with a hardware key to derive the actual encryption key.
- Secure Enclave: A separate processor handled passcode verification and enforced the delay between attempts, making it nearly impossible to bypass without Apple’s firmware.
Because of these protections, simply guessing passcodes was not feasible. The FBI’s legal demand was to force Apple to create a custom firmware that would disable the attempt limit, but Apple argued that such a tool would be a dangerous backdoor.
How the FBI Actually Unlocked the Phone
The FBI never publicly revealed the method or the vendor it used. Reports at the time suggested the FBI paid a professional hacking firm, possibly Cellebrite, to perform the unlock, but that was never confirmed. What is known is that the FBI withdrew its legal case against Apple in March 2016, saying it had accessed the phone’s data without Apple’s help.
Experts speculate that the method involved copying the phone’s flash memory, using a device to try passcodes without triggering the erase function, or exploiting a hardware vulnerability. But the exact technique remains a secret, and the FBI has not disclosed what data was found on the phone or whether it was useful to the investigation.
Common Misconceptions and Myths
Several myths have grown around this story. One is that McAfee actually hacked the iPhone—he did not, and no one has ever verified his claim. Another is that the FBI’s unlock was easy or that it used a “backdoorâ€� that still exists. In reality, the method was likely a one-off exploit, and Apple has since hardened iOS further.
Another misconception is that the FBI’s legal case was about creating a universal backdoor. In fact, the FBI only asked Apple to unlock one specific phone, but the technical solution would have applied to any iPhone running the same iOS version, which is why it was so controversial.
Frequently Asked Questions
Did John McAfee really hack the iPhone?
No. He claimed he could and later said he did, but he never provided proof, and the FBI never confirmed his involvement. The FBI unlocked the phone through an unnamed third party, and McAfee’s role remains unverified.
How did the FBI unlock the iPhone without Apple?
The FBI has never disclosed the method. It likely involved a professional hacking firm that found a way to bypass the passcode attempt limit, possibly by copying the phone’s storage or exploiting a hardware flaw. The exact technique is still a secret.
Is it true that McAfee offered to do it for free?
Yes, he publicly tweeted that he would decrypt the phone for free, but he never delivered a working method. His offer was widely seen as a publicity stunt.
Could the same method be used on today’s iPhones?
Probably not. Apple has significantly improved iPhone security since 2016, including stronger Secure Enclave protections and automatic security updates. The method used in 2016 was likely specific to that iPhone model and iOS version.
Why did Apple refuse to help the FBI?
Apple argued that creating a custom iOS to bypass the passcode limit would be a backdoor that could be used on any iPhone, posing a threat to all users’ privacy and security. The company said it would comply with valid warrants but would not build a tool that could be misused.
What happened to the data on the phone?
The FBI said it accessed the data but never revealed what it found. The investigation concluded that Farook and Malik acted alone, and the phone’s contents did not change that conclusion.
Lessons and Lasting Impact
The case set a precedent for how governments and tech companies handle encryption and law enforcement requests. It also highlighted the tension between privacy and security, a debate that continues today. For cybersecurity enthusiasts, the saga is a reminder that high-profile claims should be met with skepticism until proven, and that even the most secure devices can be compromised by determined attackers with enough resources.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.