Safeguard
Security Guides•

iPhone Lockdown Mode: who should turn it on, and what you give up

Lockdown Mode shrinks an iPhone's attack surface for people who may be targeted by spyware. See what it blocks, the cost to daily use, and who needs it.

Safeguard Security Team
3 min read

Lockdown Mode is an optional extreme setting on iPhone, iPad and Mac that cuts the features targeted spyware could exploit. Apple describes it as designed for the very few people who may be personally targeted. Most people never face such attacks, and for them the trade in convenience is not worth it.

What it changes

Apple's support page lists the restrictions.

  • Messages. Most attachment types are blocked, apart from certain images, video and audio. Links and link previews are unavailable.
  • Web browsing. Complex web technologies are blocked, so some sites load slowly or break. Web fonts may not show.
  • FaceTime. Incoming calls are blocked unless you recently contacted the person.
  • Device connections. The device must be unlocked before it connects to accessories or computers.
  • Wireless. The phone will not automatically join non secure Wi-Fi, and 2G and 3G are turned off on iPhone and iPad.
  • Configuration profiles. Profiles cannot be installed, and the device cannot be enrolled in management or supervision.

Phone calls and plain text messages still work, and emergency features are unaffected.

The management catch

That last point matters for any company. A phone in Lockdown Mode cannot be enrolled in device management. If you want a person to use Lockdown Mode on a work phone, enrol first and decide what to do about the conflict, or handle the person through a different control set. Write down which wins, security or manageability, for that role.

Who should consider it

Think about people with a real chance of being singled out: journalists covering sensitive subjects, activists, senior officials, and staff who hold access that an advanced attacker would want. For a software team, that might be a very small group such as people with production signing keys or those named in a public dispute.

For everyone else, the better return comes from basics: update promptly, use a strong passcode, use phishing resistant sign in, and install apps only from the official store.

How to turn it on

On iPhone or iPad, open Settings, then Privacy and Security, then Lockdown Mode, and tap Turn On. Confirm with Turn On and Restart and enter the passcode. On a Mac, use System Settings in the same section. It must be enabled on each device separately, and turning it on for an iPhone also enables it on a paired Apple Watch. Apple recommends updating first, because the full protections depend on current software.

Living with it

Expect friction and plan for it. Tell contacts that links and some attachments will not arrive. Keep a second, unrestricted device for tasks that break, if your threat model allows it. Review after a month: if someone turns it off because it is unbearable, you have learned something about what they need.

Safeguard's iOS app is a normal App Store app for reviewing findings and approvals, so it works for people who also choose stricter phone settings, though some web content inside any app may behave differently under the restrictions.

Quick check

Should every employee use Lockdown Mode?

No. Apple describes it as designed for very few people. For most staff, updates, a strong passcode and good sign in practices matter more.

Does it work with device management?

Per Apple, a device in Lockdown Mode cannot have configuration profiles installed or be enrolled in management or supervision.

Sources

Last reviewed: 19 October 2026.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.