--- title: "Guy Discovers a Way to Unlock Any Pixel Phone Without the Passcode" description: "Bug hunter David Schütz discovered that he could unlock any Google Pixel phone without a passcode — but Google were slow to respond." date: "2022-11-12" modified: "2022-11-12" authors: - name: "Frank Landymore" job_title: "Contributing Writer" link: "https://futurism.com/authors/flandymore" url: "https://futurism.com/the-byte/hack-unlock-pixel-phone-without-passcode" categories: - "Coding" - "Computing" - "Robots and Machines" tags: - "android" - "Google" - "smartphones" - "the digest" --- # Guy Discovers a Way to Unlock Any Pixel Phone Without the Passcode ![Bug hunter David Schütz discovered that he could unlock any Google Pixel phone without a passcode — but Google were slow to respond.]() *\Image: David Schütz\* ## Skeleton Key David Schütz, a bug hunter, discovered a clever way to unlock any Google Pixel phone without a passcode — and the vulnerability may affect swaths of other Android phones as well. According to a [post on ]()[Schütz's blog](), the vulnerability is exploited by using another SIM card. First, a hacker with physical access to the phone would input three incorrect fingerprint scans, causing biometrics to be disabled. From there, a hacker would remove the original SIM card and replace it with their own. They would then input the wrong PIN to unlock the foreign SIM. This causes the phone to instead ask for the SIM's PUK code, or Personal Unlocking Key, which the hacker would know since they've placed in their own SIM. When that's inputted, the phone inexplicably unlocks to the home screen. And this was no fluke: Schütz says he was able to replicate this multiple times, both on a fully updated Pixel 6 and an older Pixel 5. "My hands started to shake at this point," Schütz said in the post. "'What the f\*\*k? It unlocked itself?'" https://youtu.be/dSgSnYPgzT0 ## Left On Read Schütz sent in the report almost immediately. To Google's credit, he says Google flagged it and filed it in 37 minutes. But after that, "the quality and the frequency of the responses started to deteriorate." "After it got triaged, there was basically a month of silence," he wrote. Eventually, Google contacted Schütz in a formal email saying the bug had already been reported by someone else and that he wouldn't get any reward money — a brusque dismissal, considering that it was his report that prompted them to address the bug. Two months later after a September security update and still with no follow up from Google, Schütz tried to reproduce the bug again. It still worked. Deciding that he had enough, Schütz showed the vulnerability to Google engineers in person. That finally got their attention. "After I started 'screaming' loudly enough, they noticed," Schütz said. His persistence earned him a reward of $70,000, with a fix now reflected [in the company's source code]() — but if you ask us, he should've gotten the full $100 grand. **More on Google:** *[Google Engineers Joked About How Incognito Mode Isn't Very Incognito]()* ## Author At Futurism, my work has often centered on bringing a sense of clarity and insight to complex topics ranging from the regulation of emerging technologies to the esoteric ideologies of Silicon Valley executives, while striving not to lose the poetic sense of awe inspired by often-obscure fields like astrophysics and quantum computing. I broke the story of CNET using AI to produce articles that turned out to be riddled with factual errors and plagiarism — a dam-breaking inflection point, as I've reported, that's inspired copycats and endless discourse while beguiling stakeholders ranging from tech giants to purveyors of spam around the web. My work at Futurism has been cited by publications including CBS News, the Los Angeles Times, Vice, Gizmodo, Engadget, the Verge, and Vanity Fair. I grew up in locales ranging from India to China, and now live in the exotic suburbs of Virginia. In my free time, I'm an avid reader of weird sci-fi literature, an aficionado of East Asian cinema, and, regrettably, a relapsed gamer. Allegedly, I’m working on a debut novel, currently untitled. ### Author social links [Bluesky]()