Lockdown Mode is an optional, extreme security setting on iPhone that limits some apps, websites and features to shrink the ways a very sophisticated attacker could reach your phone. Apple designed it for the very few people who might be personally targeted because of who they are or what they do, such as certain journalists, activists or officials. Most people do not need it, because most people are never targeted by this kind of attack. You turn it on under Settings, Privacy & Security, Lockdown Mode, and the phone restarts to apply it.
Who this is for and what you will have at the end
This guide is for iPhone users deciding whether Lockdown Mode is worth the trade-offs, and for anyone who has switched it on and now has sites or attachments that do not work. By the end you will know what it blocks, how to enable it, how to make exceptions, and how to troubleshoot common problems.
Everything here is based on Apple's support page "About Lockdown Mode." That page describes how to turn Lockdown Mode on and says you can turn it off, but it does not spell out the exact turn-off steps, and this article says so where it matters.
What Lockdown Mode is
Apple's description: "Lockdown Mode helps protect devices against extremely rare and highly sophisticated cyber attacks." When it is on, some apps, websites and features are restricted or unavailable. It is available on iOS 16 or later, iPadOS 16 or later, watchOS 10 or later and macOS Ventura or later, with additional protections starting with iOS 17, iPadOS 17, watchOS 10 and macOS Sonoma. It needs to be turned on separately on each device.
Think of it as a trade: fewer features and more friction in return for a smaller attack surface. It is not a replacement for basic habits such as keeping iOS updated, using a strong passcode and being cautious with links.
What it blocks
The following list is from Apple's page.
| Area | What changes |
|---|---|
| Messages | Most message attachment types are blocked, other than certain images, video and audio. Links and link previews are unavailable. |
| Web browsing | Certain complex web technologies are blocked, so some sites may load more slowly or not work correctly. Web fonts may not display, and images may show a missing-image icon. |
| FaceTime | Incoming FaceTime calls are blocked unless you have previously called that person or contact within the past 30 days. SharePlay and Live Photos are unavailable. |
| Apple services | Incoming invitations are blocked unless you have previously invited that person. Focus may not work as expected, and Game Center is disabled. |
| Photos | Location information is excluded when you share photos. Shared albums are removed from the Photos app, and new Shared Album invitations are blocked. |
| Wired connections | To connect an iPhone or iPad to an accessory or another computer, the device must be unlocked. |
| Wireless | Devices do not automatically join non-secure Wi-Fi networks. 2G and 3G are turned off on iPhone and iPad. |
| Configuration profiles | Configuration profiles cannot be installed, and the device cannot be enrolled in mobile device management (MDM) or device supervision. |
Apple states that phone calls and plain text messages still work, and that emergency features such as SOS are not affected.
What this means in daily use
- A colleague sends a PDF in Messages and it does not open. Ask them to email it or share it through a cloud link you open in the browser or another app.
- A news site looks plain, with missing fonts or pictures. That is expected, and you can exclude the site if you trust it.
- A person you have never contacted tries to FaceTime you and the call does not ring. Call them first, and the block lifts for 30 days.
- Plugging the phone into a car, a laptop or a charging dock that exchanges data requires unlocking it first.
- A phone for work that needs an MDM profile cannot be newly enrolled while Lockdown Mode is on.
Should you turn it on?
Apple is direct: it is "designed for the very few individuals who, because of who they are or what they do, might be personally targeted." It also says most people are never targeted by cyberattacks of this nature.
Use these questions to decide. They are practical suggestions, not Apple criteria.
- Could someone plausibly spend serious resources to attack you specifically? Examples include investigative reporting on powerful groups, human-rights work, certain government or security roles. If the answer is no, you are in the large majority Apple describes.
- Can you live with blocked attachments, link previews and some broken websites? If these would stop you from doing your job, the friction may outweigh the benefit.
- Do you rely on a configuration profile or MDM? If your phone is already enrolled before you turn it on, Apple says it stays managed and administrators can still install and remove profiles. But you cannot newly enroll while Lockdown Mode is on.
- Would you notice if something stopped working? Try it for a week and keep a list of what breaks, so you can decide with real information.
If you are not in the targeted group, better use of your time is the standard hardening steps. See the iPhone privacy settings checklist and Stolen Device Protection explained.
How to turn on Lockdown Mode on iPhone
Per Apple's page:
- Open Settings.
- Tap Privacy & Security.
- Scroll down and tap Lockdown Mode.
- Tap Turn On Lockdown Mode.
- Tap Turn On & Restart, then enter your device passcode.
The phone restarts. Afterward, Lockdown Mode shows as on in the same settings screen. On a Mac the equivalent path is Apple menu, System Settings, Privacy & Security, Lockdown Mode, then Turn On and Turn On & Restart.
Remember to do the same on each Apple device you want covered. Apple's personal-safety guide notes that Lockdown Mode needs to be turned on separately for each iPhone, iPad and Mac.
How to turn off Lockdown Mode
Apple's "About Lockdown Mode" page says you can turn it off, for example to install a configuration profile and then turn it back on, but it does not list the steps or the button label. The setting lives on the same screen as the turn-on button: Settings, Privacy & Security, Lockdown Mode. Open that screen and use the option shown there to turn Lockdown Mode off.
Make exceptions without turning it off
Apple provides ways to loosen the restrictions in specific cases. Every exception weakens protection for that item, so use them sparingly and only for things you trust.
Exclude a website in Safari
On iPhone or iPad:
- Open the site in Safari.
- Tap the Page Menu button.
- Scroll down and tap Website Settings.
- Turn off Lockdown Mode for that website.
To review or edit the list: Settings, Privacy & Security, Lockdown Mode, Customize Web Sites, then Excluded Safari Websites. On a Mac, choose Settings for the website from the Safari menu and clear the Enable Lockdown Mode checkbox, or manage the list under Safari, Settings, Websites, then Lockdown Mode in the sidebar.
Exclude an app
On iPhone or iPad, go to Settings, Privacy & Security, Lockdown Mode, Customize Web Sites, and turn off the app. Apple says only apps you have opened since enabling Lockdown Mode, and that have limited functionality, appear in this list. If an app is missing, open it once and check again.
Exclude a contact
Apple's page says contact exclusion requires iOS, iPadOS or macOS version 27 or later. On iPhone or iPad: Settings, Privacy & Security, Lockdown Mode, Customize Contacts, Add Contact, then choose the contact. Removing a contact from the list restores message limits automatically. If a listed contact's phone number or email address changes, the limits return and you get a notification.
Install a configuration profile
Because profiles cannot be installed while Lockdown Mode is on, Apple says to turn it off, install the profile, and turn Lockdown Mode back on if needed. Only install profiles from sources you trust, such as your employer's IT team. Apple notes MDM administrators cannot configure Lockdown Mode for you, and that devices enrolled in MDM before Lockdown Mode was enabled stay managed.
Troubleshooting
| Symptom | Likely cause | What to do |
|---|---|---|
| Attachment will not open in Messages | Most attachment types are blocked | Ask for another sharing method, or temporarily turn Lockdown Mode off if you trust the sender |
| Links in Messages cannot be tapped or previewed | Links and previews are unavailable | Copy the link from the message into Safari if you trust it |
| Website looks broken or loads slowly | Complex web technologies are blocked | Exclude the site in Website Settings if trusted |
| Missing fonts or images | Web fonts and some images are blocked | Same as above |
| Incoming FaceTime call does not ring | Caller not called in past 30 days | Call them first; on iOS 27 or later add them under Customize Contacts |
| Phone will not connect to a computer or accessory | Device must be unlocked | Unlock the phone, then connect |
| Phone will not join a hotel or cafe Wi-Fi | Non-secure Wi-Fi is not joined automatically | Use cellular or a trusted secure network |
| 2G or 3G only coverage | 2G and 3G are off | Move to an area with newer coverage, or use Wi-Fi |
| Work profile will not install | Profiles cannot be installed | Turn Lockdown Mode off, install, then turn it on again |
| App missing from the customization list | App not opened since enabling | Open the app once, then reopen the list |
| Shared albums missing from Photos | Apple removes them from the Photos app while Lockdown Mode is on | Check Photos again after you turn Lockdown Mode off |
Summary checklist
- You have decided whether you fit Apple's description of a possible target
- iOS is updated before enabling
- Lockdown Mode is enabled via Settings, Privacy & Security, Lockdown Mode, Turn On & Restart
- You told close contacts that attachments and previews may not work for you
- Trusted websites you need are excluded, and the list is reviewed from time to time
- You know how to turn it off temporarily for configuration profiles
- Other devices, such as iPad and Mac, are handled separately
Comments
Questions and tips are welcome. Comments are checked by the EpiFive team before they appear; please do not share passwords, phone numbers or other private details.