Most security settings politely ask attackers to wipe their feet before entering. Apple’s Lockdown Mode is less diplomatic. It closes several doors, boards up a few windows, disconnects suspicious accessories, and tells unfamiliar digital visitors to come back after they have been properly introduced.

Introduced with iOS 16, iPadOS 16, and macOS Ventura, Lockdown Mode is an optional security feature designed for people who may face highly targeted cyberattacks. Its intended audience includes journalists, human rights advocates, political figures, diplomats, executives, researchers, and other individuals who could attract the attention of well-funded spyware operators. Apple emphasizes that most users will never encounter attacks sophisticated enough to require it.

Still, anyone with a compatible Apple device can enable the feature. This guide explains how to use Lockdown Mode on iOS 16 and macOS Ventura, what changes after activation, when it makes sense, and what daily life feels like when your device becomes considerably less trusting.

What Is Lockdown Mode?

Lockdown Mode is an extreme device-hardening setting. Instead of trying to identify every possible spyware tool, it reduces the number of features that an attacker can potentially exploit. In security language, it reduces the device’s “attack surface.” In everyday language, it gives malicious software fewer doorknobs to jiggle.

Modern iPhones and Macs handle a huge range of content: message attachments, fonts, scripts, video calls, web applications, shared albums, configuration profiles, accessories, and cloud invitations. Those conveniences require complex code. Complexity creates opportunities for software bugs, and sophisticated attackers may combine several bugs into an exploit chain capable of compromising a device.

Lockdown Mode limits selected communication, browsing, sharing, and connection features that have historically offered attractive entry points. Apple launched it specifically in response to the threat posed by commercial mercenary spyware and other highly targeted attacks.

Who Should Consider Using Lockdown Mode?

Lockdown Mode is not intended to be a universal “make my iPhone safer” switch. Standard precautionsinstalling updates, using a strong passcode, enabling two-factor authentication, and avoiding suspicious linksremain more appropriate for most people.

You should seriously consider Lockdown Mode when your risk comes from who you are, what information you possess, or the work you perform. Examples include:

• A journalist investigating corruption, organized crime, military activity, or surveillance companies.
• A human rights worker communicating with vulnerable sources.
• A government official, diplomat, campaign employee, or political activist.
• An executive involved in a sensitive acquisition, lawsuit, or negotiation.
• A researcher handling confidential information about powerful organizations.
• Someone who has received an authentic Apple threat notification.
• A person whose device may be targeted by a government-backed or commercial spyware operator.

Security researchers have documented real attacks in which Lockdown Mode either blocked an exploit or made an attempted compromise visible. Citizen Lab reported that Apple’s security team confirmed Lockdown Mode would block the BLASTPASS zero-click exploit chain, demonstrating that the feature is more than decorative armor.

What Lockdown Mode Changes

Activating Lockdown Mode does not make an iPhone or Mac unusable. Calls, ordinary text messages, email, basic web browsing, maps, and most everyday apps generally continue working. However, some advanced features are blocked or restricted.

Messages Becomes More Cautious

Lockdown Mode blocks many types of message attachments and disables features such as link previews. A web address may appear as plain text instead of becoming a colorful preview card that automatically fetches information from the destination.

This matters because automatically processing an attachment or generating a preview can expose complicated media-handling code to content supplied by an attacker. The result is less visual convenience, but fewer opportunities for malicious files to do something clever and unpleasant.

Web Browsing Uses Fewer Complex Technologies

Safari and other browsers that rely on Apple’s WebKit engine restrict certain complex web technologies. In the original iOS 16 and macOS Ventura implementation, this included just-in-time JavaScript compilation unless a trusted site was excluded from Lockdown Mode.

Some websites may load slowly, display missing fonts, lose interactive elements, or refuse to work correctly. A basic news article will probably behave normally. A web-based design application attempting to perform the computational equivalent of juggling flaming chainsaws may have a more difficult afternoon.

The Electronic Frontier Foundation also noted a privacy trade-off: websites can sometimes detect restrictions associated with Lockdown Mode, potentially making users of the uncommon feature more identifiable through browser fingerprinting.

Unfamiliar Apple Service Requests Are Blocked

Incoming FaceTime calls and other Apple service invitations may be blocked when they come from someone with whom you have not previously communicated. This reduces exposure to unsolicited requests that could trigger vulnerable code without meaningful interaction from the target.

The practical downside is simple: a legitimate person contacting you for the first time may not get through. High-risk users should establish trusted communication channels with coworkers, family members, sources, and security teams before an important trip or event.

Shared Features Become Less Open

Photo sharing and shared albums may be restricted. Depending on the operating-system version, shared albums can disappear from the protected device, new invitations may be blocked, and location information can be removed from shared photos.

These restrictions are intentional. Lockdown Mode treats unexpected sharing features as potential delivery systems rather than delightful opportunities to view 146 vacation photos of somebody else’s breakfast.

Wired Connections Are Restricted

An iPhone or iPad generally must be unlocked before it can communicate with a computer or accessory. On supported Apple silicon laptops, accessory connections can also require the Mac to be unlocked and explicitly approved.

This protection is valuable when an attacker gains temporary physical access to a device. It can also surprise users connecting audio interfaces, storage devices, diagnostic equipment, or other accessories. Unlock the device first, approve the connection when prompted, and avoid approving hardware you do not recognize.

New Configuration Profiles and MDM Enrollment Are Blocked

While Lockdown Mode is active, a device cannot install new configuration profiles or enroll in a new mobile device management system. Malicious profiles can be abused to alter network settings, trust certificates, route traffic, or impose unwanted controls.

A device already enrolled in an organization’s management system before Lockdown Mode is activated can remain managed. Employees should nevertheless speak with their IT or security department before enabling the feature, especially when corporate apps, certificates, virtual private networks, or network filters depend on managed profiles.

How to Enable Lockdown Mode on iOS 16

Before beginning, install the newest iOS security update available for your iPhone. Lockdown Mode is an additional defense, not a replacement for patches.

1. Open the Settings app.
2. Scroll down and tap Privacy & Security.
3. Scroll to the Security section and tap Lockdown Mode.
4. Tap Turn On Lockdown Mode.
5. Read Apple’s explanation of the restrictions.
6. Tap Turn On Lockdown Mode again.
7. Select Turn On & Restart.
8. Enter the iPhone passcode when requested.

The iPhone will restart to apply the restrictions throughout the operating system. After rebooting, unlock it with the device passcode. You may see alerts when an app or function is limited, and Safari may display a banner indicating that Lockdown Mode is active.

How to Confirm It Is Active

Return to Settings > Privacy & Security > Lockdown Mode. The screen should indicate that the feature is on. You can also test it by opening Safari or checking whether link previews behave differently in Messages, although deliberately sending suspicious content to yourself is an experiment best left unperformed.

How to Enable Lockdown Mode on macOS Ventura

Lockdown Mode must be activated separately on each supported device. Turning it on for an iPhone does not automatically place a Mac running macOS Ventura into the same protected state.

1. Open the Apple menu in the upper-left corner.
2. Select System Settings.
3. Click Privacy & Security in the sidebar.
4. Scroll down to Lockdown Mode.
5. Click Turn On.
6. Confirm by clicking Turn on Lockdown Mode.
7. Enter the Mac user password if macOS requests it.
8. Click Turn On & Restart.

Save open documents before approving the restart. “Untitled Presentation 7” deserves a chance to survive, even if its design decisions do not.

After the Mac restarts, Lockdown Mode restrictions apply across supported apps and system services. Apple recommends enabling it on every supported device used by an at-risk person because an unprotected Mac can become a weaker link even when the corresponding iPhone is hardened.

How to Exclude a Trusted Website

A necessary website may stop functioning because Lockdown Mode disables web technologies it depends on. Apple allows carefully selected website exceptions, but every exception restores some functionality that the security mode deliberately removed.

On an iPhone Running iOS 16

1. Open the trusted website in Safari.
2. Open the website or page settings menu.
3. Select Website Settings.
4. Turn off Lockdown Mode for that website.

You can review configured exclusions through Settings > Privacy & Security > Lockdown Mode > Configure Web Browsing. Exclude only a site you recognize, genuinely need, and have reached through a verified address.

On a Mac Running macOS Ventura

1. Open the website in Safari.
2. Choose Safari from the menu bar.
3. Select Settings for [website].
4. Clear the option that enables Lockdown Mode for that site.

To manage existing Mac exclusions, open Safari > Settings > Websites, select Lockdown Mode, and review the settings for each listed domain.

Should You Leave Lockdown Mode On Permanently?

People facing sustained risk may benefit from leaving it enabled continuously. Others may activate it during a period of heightened exposure, such as an election, investigation, lawsuit, international trip, protest, confidential negotiation, or response to a verified threat alert.

However, frequently switching it off whenever a website becomes inconvenient weakens its purpose. A sophisticated attacker may intentionally send a target to a page that appears to require unrestricted browsing. Treat any request to disable Lockdown Mode as suspicious until independently verified.

Lockdown Mode also should not create a false sense of invincibility. It does not make every attack impossible, remove spyware that may already be present, replace software updates, secure a weak Apple Account password, or prevent someone from learning information you voluntarily disclose. Academic research into the user experience has warned that limited explanations of the feature’s technical boundaries can lead users to overestimate what it guarantees.

Security Practices to Use Alongside Lockdown Mode

• Install iOS and macOS security updates promptly.
• Use a long alphanumeric device passcode when your risk level justifies it.
• Protect your Apple Account with a unique password and two-factor authentication.
• Verify unexpected messages through a second communication channel.
• Review app permissions for the camera, microphone, photos, contacts, and location.
• Avoid unknown configuration profiles, certificates, browser extensions, and accessories.
• Use separate accounts or devices for especially sensitive work when appropriate.
• Contact a qualified security organization after receiving a credible threat notification.

Government and civil-society security guidance continues to recommend Lockdown Mode for people exposed to sophisticated surveillance threats, but always as one part of a broader security plan.

Experience Notes: What Using Lockdown Mode Feels Like

Using Lockdown Mode for the first time is surprisingly uneventful. The device restarts, the familiar lock screen returns, and there is no dramatic siren, steel door animation, or tiny security guard checking identification inside the charging port. Your apps remain in place, your photos do not disappear, and ordinary phone calls continue to work.

The differences reveal themselves gradually. The first noticeable change is often in Messages. Links look less polished because previews no longer appear. Attachments that once opened immediately may be unavailable. This can initially feel like the internet has traveled back to an era when every URL arrived naked, blue, and suspicious.

After a day or two, the absence of automatic previews can become reassuring. A link is once again just a link. You can inspect the domain, ask the sender what it contains, and decide whether opening it is necessary. That tiny pause is useful for anyone whose work involves unsolicited tips, confidential sources, public contact details, or messages from strangers.

Web browsing creates the clearest trade-off. Most simple pages load normally, including articles, search results, reference sites, and basic account pages. Trouble tends to appear on complicated web apps, interactive dashboards, design tools, document editors, and sites packed with custom scripts. A button may do nothing. A font may look wrong. A page may spin indefinitely, apparently reflecting on its life choices.

The temptation is to create an immediate exception. A better routine is to stop and verify the domain first. Is the site essential? Did you type the address yourself? Could you perform the task through a trusted native app or another protected workflow? Exceptions should be rare decisions, not reflexive responses to mildly grumpy web pages.

Incoming communication also requires adjustment. Imagine a journalist who has enabled Lockdown Mode before traveling. A new source attempts an unexpected FaceTime call, but the call does not arrive normally because there is no previous communication history. The journalist may initially think the phone is malfunctioning. In reality, the device is doing exactly what was requested: distrusting unfamiliar approaches.

The practical solution is preparation. High-risk users can establish contact with important people before a sensitive event, agree on backup channels, and tell colleagues that unsolicited Apple service invitations may be blocked. Security works better when everyone involved understands the rules.

On a Mac, accessory restrictions can be the most disruptive part of the experience. A photographer, musician, developer, or video editor may connect multiple devices throughout the day. Unlocking the Mac and approving legitimate hardware adds friction, but the friction has a purpose. Physical access is a powerful advantage for an attacker, and Lockdown Mode refuses to treat every connected cable as a friendly handshake.

Independent hands-on testing has found Lockdown Mode more usable than its “extreme” label might suggest. Most routine tasks remain possible, while inconveniences appear around sharing, integrations, new contacts, and complex browser functions. Whether those compromises are acceptable depends on the user’s threat level and daily workflow.

The most valuable experience is psychological: Lockdown Mode encourages deliberate computing. You inspect links. You question unexpected invitations. You notice when a site demands unusual functionality. You become slightly less convenient to contact and significantly less willing to trust random digital objects. For an average user, that may feel excessive. For someone facing professional surveillance, it can be a reasonable price for reducing exposure.

Conclusion

Learning how to use Lockdown Mode on iOS 16 and macOS Ventura takes only a few minutes. Deciding whether you need it requires a more thoughtful assessment of your personal risk.

For most Apple users, timely updates, strong authentication, cautious browsing, and sensible account security provide an appropriate foundation. For journalists, activists, officials, executives, researchers, and others who may be deliberately targeted, Lockdown Mode offers a meaningful additional layer by limiting the features sophisticated spyware frequently tries to exploit.

It is not invisible armor, a malware scanner, or a substitute for expert help after a suspected compromise. It is a deliberate exchange: fewer conveniences in return for fewer attack opportunities. Sometimes the safest smart device is one that agrees to be temporarily less smart.

Note: This guide focuses on the original Lockdown Mode experience introduced with iOS 16 and macOS Ventura. Apple has expanded the feature in later operating-system releases. Install the latest security updates supported by your devices before relying on it for protection.