Should I leave an unlocked phone unlocked?¶

Preserve the unlocked state while obtaining urgent specialist guidance, but do not explore the device merely because access is available.

Unlocked state may be short-lived¶

The handset may expose decrypted storage, active sessions, account identifiers and applications that become inaccessible after automatic lock, restart or power loss. Record the screen, open application, displayed time, battery, connections and notifications as found. Photograph where authorised without opening content.

Maintaining power or preventing lock may require interaction, and the appropriate method varies by model, operating system and current state. Keep control of the device and record every supported step.

Access creates change and security risk¶

Taps and swipes can mark messages read, update timestamps, synchronise accounts, acknowledge notifications or reveal material outside scope. A connected unlocked handset may also expose investigators to remote management or alert other users.

Do not guess credentials, change settings or search conversations. If low battery threatens the opportunity, use device-appropriate specialist advice rather than attaching an unrecorded charger. The next card addresses the different constraints of a locked phone.