Manage tokens and passcodes in Apple Configurator
Save an unlock token
You use an unlock token to unlock a supervised device where a user has forgotten the device passcode. You should save unlock tokens for devices when the devices are initially configured.
If you’re creating a Blueprint for several devices, you should add the unlock token action to the Blueprint so that when devices are configured, the unlock tokens are stored on the Mac.
In Apple Configurator
, select one or more devices or Blueprints.Do one of the following:
Choose Actions > Advanced > Save Unlock Token.
Control-click the selected devices or Blueprints, and choose Advanced > Save Unlock Token.
Clear the device passcode
When a user forgets the device passcode on a supervised device, you can clear the passcode with the unlock token.
In Apple Configurator
, select one or more devices or Blueprints.Do one of the following:
Choose Actions > Advanced > Clear Passcode.
Control-click the selected devices or Blueprints, and choose Advanced > Clear Passcode.
On supervised devices running iOS 8 or later and iPadOS, you can keep the user from changing the device passcode by adding a configuration profile with the restriction setting “Allow modifying passcode” disabled. See MDM restrictions for supervised Apple devices in Apple Platform Deployment.
Clear the Screen Time passcode
A user can set a Screen Time passcode on a device so specific restrictions are in place, preventing anyone else using the device from accessing certain apps or features. This is done on the device in Settings > Screen Time.
The Screen Time passcode can be different from the device passcode. On supervised devices, you can clear the Screen Time passcode using Clear Screen Time Passcode.
In Apple Configurator
, select one or more devices or Blueprints.Do one of the following:
Choose Actions > Advanced > Clear Screen Time Passcode.
Control-click the selected devices or Blueprints, and choose Advanced > Clear Screen Time Passcode.