When federal agents get your phone, they are not reading your messages. Here is what they are actually doing in the first 60 seconds. Step 1: Photograph the current screen state. Step 2: Check lock status. Step 3: Check Advanced Data Protection status. If it is on, the iCloud route is closed. Step 4: Assess iCloud backup status. Is a backup available? How recent? Step 5: Check remote wipe risk. Is Find My enabled? These five checks determine whether the extraction goes through the hardware using