Manage tokens and passcodes in Apple Configurator 2
Save an unlock token
You use an unlock token to unlock a supervised device where a user has forgotten the device passcode. You should save unlock tokens for devices when the devices are initially configured.
If you’re creating a Blueprint for several devices, you should add the unlock token action to the Blueprint so that when devices are configured, the unlock tokens are stored on the Mac.
In Apple Configurator 2
on your Mac, select a device or Blueprint, then choose Actions > Advanced > Save Unlock Token.
Clear the device passcode
When a user forgets the device passcode on a supervised device, you can clear the passcode with the unlock token.
In Apple Configurator 2
on your Mac, select a device or Blueprint, then choose Actions > Advanced > Clear Passcode.
On supervised devices running iOS 8 or later, you can keep the user from changing the device passcode by adding a configuration profile with the iOS restriction setting “Allow modifying passcode” disabled. See iPhone and iPad MDM restrictions in Mobile Device Management Settings for IT Administrators.
Clear the restrictions passcode
A user can set a restrictions passcode on a device so specific restrictions are in place, preventing anyone else using the device from accessing certain apps or features. This is done on the device in Settings > General > Restrictions.
The restrictions passcode can be different from the device passcode. On supervised devices, you can clear the restrictions passcode using Clear Restrictions Passcode.
In Apple Configurator 2
on your Mac, select a device or Blueprint, then choose Actions > Advanced > Clear Restrictions Passcode.