Lockdown Mode support
Lockdown Mode helps protect devices against extremely rare and highly sophisticated cyber attacks. Lockdown Mode is an optional, extreme protection that’s designed for the very few individuals who, because of who they are or what they do, might be personally targeted by some of the most sophisticated digital threats. Most people are never targeted by attacks of this nature.
When Lockdown Mode is turned on, the device doesn’t function as it typically does. To reduce the attack surface that potentially could be exploited by highly targeted mercenary spyware, certain apps, websites, and features are strictly limited for security and some experiences might not be available at all.
For a complete set of protections, users should update devices to the latest software before turning on Lockdown Mode.
How Lockdown Mode protects devices
When Lockdown Mode is turned on, some apps and features function differently:
Messages: Most message attachment types are blocked, other than certain images, videos, and audio. Some features, such as links and link previews, are unavailable.
FaceTime: Incoming FaceTime calls are blocked unless the user has previously called that person or contact within the past 30 days. Features such as SharePlay and Live Photos are unavailable.
Apple services: Incoming invitations for Apple services, such as invitations to manage a home in the Home app, are blocked unless the user has previously invited that person. Focus and any related status won’t work as expected. Game Center is also disabled.
Photos: When users share photos, location information is excluded. Shared albums are removed from the Photos app, and new Shared Album invitations are blocked. Users can still view these shared albums on other devices that don’t have Lockdown Mode turned on.
Web browsing: Certain complex web technologies are blocked, which might cause some websites to load more slowly or not operate correctly. In addition, web fonts might not be displayed and images might be replaced with a missing image icon. While a device is in Lockdown Mode, you can exclude an app or website in Safari from being impacted and limited by WebKit restrictions. Exclude only trusted apps or websites and only if necessary.
While a device is in Lockdown Mode, you can exclude an app or website in Safari from being impacted and limited by WebKit restrictions. Exclude only trusted apps or websites and only if necessary.
Configuration profiles: If a device is in Lockdown Mode, new configuration profiles can’t be installed, and the device can’t be enrolled in device management or device supervision. If a user wants to install a configuration profile or management profile, they need to turn off Lockdown Mode, install the profile, and turn Lockdown Mode on again, if necessary. These restrictions prevent attackers from attempting to install malicious profiles. A device that’s enrolled in device management before Lockdown Mode is turned on remains managed. Administrators can install and remove configuration profiles on that device.
Device connections: To connect iPhone or iPad to an accessory or another computer, the device needs to be unlocked. To connect a Mac laptop to an accessory, the laptop needs to be unlocked and the user needs to provide explicit approval.
Wireless connectivity: A device won’t automatically join nonsecure Wi-Fi networks and disconnects from a nonsecure Wi-Fi network when the user turns on Lockdown Mode. 2G cellular support is turned off.
Phone calls and plain text messages continue to work while Lockdown Mode is turned on. Emergency features, such as SOS emergency calls, aren’t affected.
How to turn on Lockdown Mode
Lockdown Mode needs to be turned on separately for iPhone, iPad, and Mac. When a user turns on Lockdown Mode for one device, they get prompts to turn it on for other supported Apple devices signed into the same Apple Account. Notifications might also appear when an app or feature is limited. A banner in Safari indicates that Lockdown Mode is on.
On iPhone or iPad, go to Settings > Privacy & Security > Lockdown Mode, then tap Turn On Lockdown Mode.
If the user set up an Apple Watch with their iPhone, turning on Lockdown Mode also turns it on for the paired Apple Watch (requires watchOS 10 or later).
On Mac, choose Apple menu > System Settings > Privacy & Security, click Lockdown Mode (they may need to scroll down), click Turn On, click Turn On Lockdown Mode, click Turn On & Restart, have the user enter their login password, then click OK.