How to use Apple’s ultra-secure Lockdown Mode and when you want it

Apple aims to improve device security for prominent individuals who could be the target of advanced cyber-attacks with a new mode in iOS 16† iPad OS 16and macOS Ventura† However, this mode is very restrictive and limits the functionality of the device.

Most Apple users will never encounter the dangers associated with state-sponsored mercenary spyware or complex hacking tools. However, Apple prides itself on being a secure option, so it doesn’t want government officials and the like to look elsewhere for secure devices.

Targeted attacks are extremely rare among the Apple-using population. However, that’s a hard sell for people being targeted.

Still, there’s no reason for Apple to restrict Lock Mode to a select user group. That means any user can take their security further than ever with just a few clicks, which can be useful in some situations.

When Lockdown mode is enabled, various security settings are changed, apps are changed, and communication functions are blocked. Essentially, it becomes a challenge for outside entities to access or control your iPhone† iPador mac†

Only the imminent threat of attack should justify enabling Lockdown Mode

Apple is specific about what Lockdown Mode does and who should use it.

“Lockdown mode is an extreme, optional protection that should only be used if you believe you are personally the target of a highly sophisticated cyberattack,” Apple says. “Most people are never the target of attacks of this nature.”

The new Lockdown mode is specific to the most vulnerable aspects of using a consumer device and removes potential attack vectors. Apple will continue to strengthen Lockdown Mode and add new protections over time.

Protections available at launch:

• Messages — Most message attachments are blocked and some features are not available.
• FaceTime – Incoming FaceTime calls from people you haven’t called before will be blocked.
• Browsing the web — Some web technologies and browsing features are blocked.
• Shared Albums — Shared Albums are removed from the Photos app and new Shared Albums invites are blocked.
• Device connections — Wired connections to another device or accessory while your iPhone is locked will be blocked.
• Apple Services — Incoming invitations to Apple Services from people you haven’t invited before will be blocked.
• Profiles — Configuration profiles, such as school or work profiles, cannot be installed.

Apple didn’t specify exactly why these features were intended to be part of Lockdown Mode, but it’s not hard to develop scenarios that could exploit them. For example, messages are simply too open if users can receive a link, file, or code snippet that has been abused in the past.

Famous people, such as politicians, journalists or military leaders, do not always have the best knowledge of technology. Many of these blocked features involve users giving consent to an entity that would put their data in the hands of another.

Apps like Safari will warn users that Lockdown Mode is on

Some of these attack vectors were used by the NSO Group, who sent links to people via WhatsApp. Clicking on the links opened a web page that installed spyware using a vulnerability, which in theory would no longer be possible in Lockdown mode.

If you think Lockdown Mode is necessary for any reason, it can be easily enabled through the Settings app:

1. Open Settings on any device.
2. Navigate to Privacy and Security†
3. Scroll down and select Lock Mode†
4. Select Enable lock mode

The device will reboot to complete entering Lockdown Mode. To turn it off again, navigate back to that menu in the settings and turn it off.

When the lock mode is disabled after it is enabled, some features, such as shared photo albums, may need to be re-enabled. This must be manually verified by the user.

Features such as Shared with you are disabled and cannot be re-enabled until lock mode is deactivated

From our – albeit brief, so far – testing, Lockdown Mode does not cause permanent changes or delete irrecoverable data. So there is no damage to your device or data when you turn the feature on and off.

Apple is clear in its coverage of Lockdown Mode – this is not for regular users in everyday situations. For example, your curious sibling isn’t going to pay thousands of dollars to an Israeli company to hack into your iPhone to learn about your private affairs.

However, an option to increase the security of the device on the fly is not completely useless. As Apple strengthens Lockdown Mode and what it can protect users from, it could be useful for more people, such as protesters.

The attack vectors covered by the Lockdown Mode currently all appear to target targeted attacks using web-based technologies, social engineering, and hard-wired hacking tools. This does not necessarily protect you from police investigations, data subpoenas, or legal process.

Those prone to attacks protected by Lockdown Mode already know who they are. Everyone else should avoid using the feature for everyday situations or else their devices will become less useful due to unnecessary security measures.