Learn how Lockdown Mode helps protect devices against extremely rare and highly sophisticated cyber attacks.

What is Lockdown Mode?

Lockdown Mode is an optional, extreme protection that’s designed for the very few individuals who, because of who they are or what they do, might be personally targeted by some of the most sophisticated digital threats. Most people are never targeted by attacks of this nature.

When Lockdown Mode is enabled, your device won’t function like it typically does. To reduce the attack surface that potentially could be exploited by highly targeted mercenary spyware, certain apps, websites, and features are strictly limited for security and some experiences might not be available at all.

Lockdown Mode is available in iOS 16 and coming soon in iPadOS 16 and macOS Ventura.

How Lockdown Mode protects your device

When Lockdown Mode is enabled, some apps and features will function differently, including:

  • Messages – Most message attachment types are blocked, other than certain images, video, and audio. Some features, such as links and link previews, are unavailable. 
  • Web browsing – Certain complex web technologies are blocked, which might cause some websites to load more slowly or not operate correctly. In addition, web fonts might not be displayed, and images might be replaced with a missing image icon.
  • FaceTime – Incoming FaceTime calls are blocked unless you have previously called that person or contact.
  • Apple Services – Incoming invitations for Apple Services, such as invitations to manage a home in the Home app, are blocked unless you have previously invited that person.
  • Shared albums – Shared albums are removed from the Photos app, and new Shared Album invitations are blocked. You can still view these shared albums on other devices that don’t have Lockdown Mode enabled.
  • USB accessories – To connect your device to a USB accessory or another computer, the device needs to be unlocked.
  • Configuration profiles – Configuration profiles can’t be installed, and the device can’t be enrolled in Mobile Device Management or device supervision while in Lockdown Mode.

Phone calls and plain text messages continue to work while Lockdown Mode is enabled. Emergency features, such as SOS emergency calls, are not affected. 

How to enable Lockdown Mode on iPhone

  1. Open the Settings app.
  2. Tap Privacy & Security.
  3. Under Security, tap Lockdown Mode and tap Turn On Lockdown Mode.
  4. Tap Turn On Lockdown Mode.
  5. Tap Turn On & Restart, then enter your device passcode.

When Lockdown Mode is enabled, you might receive notifications when an app or feature is limited, and a banner in Safari indicates that Lockdown Mode is on.

How to exclude apps or websites from Lockdown Mode

While your device is in Lockdown Mode, you can exclude an app or website from being impacted and limited. Exclude only trusted apps or websites and only if necessary.

To exclude a website while browsing: Tap the Page Settings button  > Website Settings, then turn off Lockdown Mode.

To exclude an app or to edit your excluded websites:

  1. Open the Settings app.
  2. Tap Privacy & Security.
  3. Under Security, tap Lockdown Mode.
  4. Tap Configure Web Browsing.

To exclude an app, turn that app off in the menu. Only apps that you have opened since enabling Lockdown Mode and which have limited functionality appear on this list.

To edit your excluded websites, tap Excluded Safari Websites > Edit.

Configuration profiles and managed devices

If a device is in Lockdown Mode, new configuration profiles can’t be installed, and the device can’t be enrolled in Mobile Device Management or device supervision. If a user wants to install a configuration profile or management profile, they need to turn off Lockdown Mode, install the profile, and then re-enable Lockdown Mode, if necessary. These restrictions prevent attackers from attempting to install malicious profiles.

A device that is enrolled in Mobile Device Management before Lockdown Mode is enabled remains managed. System administrators can install and remove configuration profiles on that device.

Lockdown Mode is not a configurable option for Mobile Device Management by system administrators, as it’s designed for the very small number of individual users who might be targeted by extreme cyber attacks.

Published Date: