Lockdown Mode on Mac: what it does, who it's for and how to turn it off
Lockdown Mode is an optional, extreme protection that Apple designed for the very few people who might be personally targeted by some of the most sophisticated digital threats, because of who they are or what they do. Apple also says most people are never targeted by attacks of this nature.
Quick answer
Lockdown Mode strictly limits apps, websites and features on your Mac to reduce what a highly targeted attack could exploit. It's in System Settings > Privacy & Security > Lockdown Mode, needs macOS Ventura or later, and turning it on or off restarts your Mac. Apple says it's for the very few people who may be personally targeted.
What is Lockdown Mode?
Apple's Platform Security guide names the kind of threat it has in mind: targeted mercenary spyware. Lockdown Mode deals with that by shrinking what Apple calls the attack surface. Certain apps, websites and features are strictly limited, and some experiences aren't available at all. Apple says plainly that with it on, your device won't function like it usually would.
On a Mac it needs macOS Ventura or later, with additional protections from macOS Sonoma. Apple recommends updating to the latest software before turning it on, for the complete set of protections.
Should I turn on Lockdown Mode?
Apple's answer, in effect, is that most people don't need it. It describes Lockdown Mode as designed for the very few individuals who, because of who they are or what they do, might be personally targeted, and says most people will never be targeted by attacks of this nature. Apple's Mac User Guide puts the trigger as believing you're being personally targeted by a highly sophisticated cyberattack.
Apple doesn't publish a checklist of who counts. If you think you fit its description, the steps are below.
Lockdown Mode also isn't something an employer's IT team can switch on for you. Apple says it isn't a configurable option for Mobile Device Management, because it's designed for the small number of individual users who may be targeted by extreme cyber attacks.
What does Lockdown Mode limit?
Apple's support article lists what changes when it's on. These are the parts that apply to a Mac, in Apple's terms:
- Messages. Most message attachment types are blocked, other than certain images, video and audio. Some features, such as links and link previews, are unavailable.
- Web browsing. Certain complex web technologies are blocked, so some websites may load more slowly or not work correctly. Web fonts may not display, and images may be replaced with a missing image icon.
- FaceTime. Incoming FaceTime calls are blocked unless you've called that person or contact in the past 30 days. SharePlay and Live Photos are unavailable.
- Apple services. Incoming invitations, such as an invitation to manage a home in the Home app, are blocked unless you've previously invited that person. Focus may not work as expected, and Game Center is disabled.
- Photos. Location information is left out when you share photos. Shared albums are removed from the Photos app, and new Shared Album invitations are blocked.
- Device connections. To connect a Mac laptop with Apple silicon to an accessory, the Mac needs to be unlocked and you need to give explicit approval.
- Wireless connectivity. Your Mac won't automatically join non-secure Wi-Fi networks, and disconnects from one when you turn Lockdown Mode on.
- Configuration profiles. Profiles can't be installed, and the Mac can't be enrolled in Mobile Device Management or device supervision.
Apple's security guide also lists the areas these trade-offs touch, including background services, Mail, Safari, System Settings and WebKit. Phone calls and plain text messages keep working, and emergency features such as SOS emergency calls aren't affected. You may see notifications when an app or feature is limited, and a banner in Safari shows that Lockdown Mode is on.
How do I turn on Lockdown Mode on a Mac?
Apple's Mac User Guide gives these steps:
- Choose Apple menu > System Settings, click Privacy & Security in the sidebar, then click Lockdown Mode. You may need to scroll down.
- Click Turn On.
- Click Turn On Lockdown Mode.
- Click Turn On & Restart.
- Enter your login password, then click OK.
It's turned on separately for each Mac, iPhone and iPad. When you turn it on for one device, Apple says you get prompts to turn it on for your other supported Apple devices.
How do I turn off Lockdown Mode on a Mac?
The same place, in reverse:
- Choose Apple menu > System Settings, click Privacy & Security in the sidebar, then click Lockdown Mode. You may need to scroll down.
- Click Turn Off.
- Click Turn Off & Restart.
- Enter your login password, then click OK.
If you only need one thing to work, you may not have to turn it off completely. Apple lets you exclude trusted websites and, from macOS 27, contacts. Apple warns that any exclusion reduces Lockdown Mode's protections and may increase your security risk, so exclude only trusted ones, and only if necessary.
- A website: while you're on it in Safari, choose Safari > Settings for [website], then deselect Enable Lockdown Mode. To edit the list later, choose Safari > Settings, click Websites, scroll down the sidebar and click Lockdown Mode.
- A contact (macOS 27 or later): in Privacy & Security, choose Lockdown Mode, click Customise Contacts, click the Plus button and pick the contact. Messaging limits are turned off for them.
Where Failshot fits
Your password is the first layer. Failshot is the second: second layer device security for your Mac. While it's on, it photographs whoever unlocks your Mac, then, with Pro, records a 5-second video.
Lockdown Mode is Apple's answer to highly sophisticated digital attacks, and nothing on Apple's list records who unlocks your Mac. Failshot is for the moment someone sits down at your Mac and unlocks it, an extra layer beside macOS security features.
With the Mac's built-in camera, the green light comes on, and Failshot's window tells whoever unlocked the Mac that the unlock was photographed. With Pro, turn on alerts and Failshot emails you about an unlock you don't confirm as yours, a wrong Failshot PIN or answer, or its camera access being switched off while it's on. Switching it off, or quitting it from its menu, takes Touch ID or your Failshot PIN and answer, never your Mac password.
iPhone, Android and Windows versions are coming soon. Failshot is a free download for Mac (macOS 14 or later) from failshot.app, and turning it on needs a paid Pro plan. Try Failshot Pro free for 7 days. Your card is taken at sign-up and charged on day 8 unless you cancel.
More questions
Will Lockdown Mode slow down my Mac?
Apple's security guide says Lockdown Mode trades functionality, performance or both for security. The specific example Apple gives is web browsing: some websites may load more slowly or not work correctly because certain complex web technologies are blocked.
Does turning it on for my Mac turn it on for my iPhone?
No. Apple says Lockdown Mode needs to be turned on separately for your iPhone, iPad and Mac. When you turn it on for one device, you get prompts to turn it on for your other supported Apple devices.
Will I still get messages and calls?
Phone calls and plain text messages continue to work, Apple says. Most message attachment types are blocked other than certain images, video and audio, and incoming FaceTime calls are blocked unless you've called that person in the past 30 days.
Can my work's IT department turn on Lockdown Mode?
Apple says it isn't a configurable option for Mobile Device Management. A Mac already enrolled before Lockdown Mode was turned on stays managed. On other devices, installing a configuration profile means turning Lockdown Mode off, installing it, then turning it back on.