iPhone Lockdown Mode: What It Offers and Who Needs It

Apple's iPhone has a security feature called Lockdown Mode, available since 2022 and designed to protect against commercial spyware such as Pegasus, developed by the company NSO. Apple itself describes it as an "extreme" layer of security for the small number of people who may be targeted by such attacks. Journalists, activists and politicians are among the potential targets.

How to turn it on

The mode is available on iPhones running iOS 16 or newer, as well as iPadOS 16 and later, watchOS 10 and later, and macOS 13 Ventura and later. To activate it, open Settings, go to Privacy & Security, choose Lockdown Mode, tap Turn On & Restart and confirm with your passcode. It can be switched off in the same place.

What the mode restricts

In Messages, most kinds of attachments are blocked, and link previews stop working. Browsers get restricted JavaScript, so some websites may load slowly or not work at all. FaceTime calls are blocked, and only people you have called recently can reach you.

Connectivity is narrowed too: wired connections are disabled while the device is locked unless the passcode is entered, the iPhone no longer joins unsecured networks automatically, and 2G and 3G support is fully turned off. Configuration profiles cannot be installed, which can be a problem if a school or employer requires one. On an Apple Watch, iPhone call notifications do not appear, Home invitations and Game Center are unavailable, and photo sharing is limited.

Who it is meant for

The mode's effectiveness was shown by the 2023 "Blastpass" exploit, which used iMessage to install Pegasus on Apple devices. Researchers found that devices in Lockdown Mode were completely immune. Apple's Security Bounty program pays a 100 percent bonus on top of the regular reward to anyone who finds a way to bypass the feature.

Exceptions can be set for certain contacts, websites and apps, but this makes the device slightly more vulnerable. Spyware is often deployed by governments targeting opponents or protesters. Those who believe they are targets should keep the default protections on. For everyone else, the security and privacy features already built into Apple devices are generally enough.