A new security flaw found in iOS 8 and newer, including 10.2 beta 3, allows pretty much anyone to bypass your iPhone passcode and access photos, contacts and even message logs. No matter if you’ve configured TouchID or not, the glitch allows the attacker to break into your device; the only two things they need are access to the victim’s phone and basically access to Siri.

Discovered by EverythingApplePro, the glitch uses Siri to bypass the iPhone passcode, and all it takes is a few simple steps.

How to Unlock iPhone Photos Without Passcode

First things first, you need to call the victim’s iPhone, or a FaceTime call will do the work too. In case you don’t know their phone number just yet, you’ll have to reach their device first and ask Siri “Who am I?” She’ll give you the contact info of the phone.

Once you’ve made the call, go ahead and click Message and then Custom to proceed to the New Message Screen.

Next up, activate Siri using the Home button and ask her “Turn on Voice Over.” She’ll confirm saying “OK, I turned on VoiceOver” and then go back to the message screen.

Once there, double tap the bar where the contact info is and then hold, while immediately click on the keyboard. It may take a couple of attempts so keep trying until you see a slide-in effect on the screen above the keyboard. Basically, you’ll now be able to type up in the top bar even though you’re not allowed to.

At this point, you can ask Siri to “Turn off VoiceOver,” and you can click Home.

The next step is to type in the first letter of a contact’s name, tap the circular “i” icon next to it and you’ll be in the contact info. Go ahead and create new contact, then select add photo, click on Choose Photo, and you’ll access photos of the user without passcode.

The iPhone is still locked in the background, but you should be able to see the gallery just like you’d browse the phone.

Not only that but you can select any contact, and see all previous conversations with that contact, too.

As for how you can protect against this bug, the easiest way is to disable Siri on your lock screen. To do this, launch Settings app, find Touch ID & Passcode and enter passcode. Scroll down to the Allow Access When Locked section and toggle the slider of Siri off.

Hopefully, Apple will release a patch against this flaw in the coming days, more likely with the full version of iOS 10.2.