Apple says there has never been a successful spyware attack against any device placed in Lockdown Mode, a security mode the Cupertino firm first debuted in 2022.
“We are not aware of any successful mercenary spyware attacks against a Lockdown Mode-enabled Apple device,” an Apple spokesperson told TechCrunch.
Donncha Ó Cearbhaill, head of the security lab at Amnesty International, said he and his colleagues “have not seen any evidence of an iPhone being successfully compromised by mercenary spyware where Lockdown Mode was enabled at the time of the attack.” While there have been successful spyware attacks on iPhone users over the years, but none have involved a bypass of Lockdown Mode.
Patrick Wardle, an Apple cybersecurity expert, told TechCrunch, “I think it’s safe to say, Lockdown Mode is one of the most aggressive consumer-facing hardening features ever shipped.”
Lockdown Mode is available in iOS 16 or later, iPadOS 16 or later, watchOS 10 or later, and macOS Ventura or later. It offers an extreme, optional level of security for the very few users who, because of who they are or what they do, may be personally targeted by some of the most sophisticated digital threats, such as those from NSO Group and other private companies developing state-sponsored mercenary spyware. Turning on Lockdown Mode in iOS, iPadOS, and macOS further hardens device defenses and strictly limits certain functionalities, sharply reducing the attack surface that potentially could be exploited by highly targeted mercenary spyware.
While Lockdown Mode is turned off by default, it can be enabled in the Privacy & Security section of the Settings or System Settings app. After being turned on, Lockdown Mode can be turned off at any time in the same section of the Settings app. Enabling or disabling Lockdown Mode requires restarting the device and entering the device’s passcode.
Apple designed the feature specifically to protect high-risk users such as journalists, activists, lawyers, and others who may be personally targeted by sophisticated nation-state-level attacks.
An Apple support document explains more about Lockdown Mode:
When Lockdown Mode is enabled, some apps and features will function differently, including:
- Messages: Most message attachment types are blocked, other than certain images, video, and audio. Some features, such as links and link previews, are unavailable.
- Web browsing: Certain complex web technologies are blocked, which might cause some websites to load more slowly or not operate correctly. In addition, web fonts might not be displayed, and images might be replaced with a missing image icon.
- FaceTime: Incoming FaceTime calls are blocked unless you have previously called that person or contact within the past 30 days. Features such as SharePlay and Live Photos are unavailable.
- Apple services: Incoming invitations for Apple services, such as invitations to manage a home in the Home app, are blocked unless you have previously invited that person. Focus and any related status will not work as expected. Game Center is also disabled.
- Photos: When you share photos, location information is excluded. Shared albums are removed from the Photos app, and new Shared Album invitations are blocked. You can still view these shared albums on other devices that don’t have Lockdown Mode enabled.
- Device connections: To connect your iPhone or iPad to an accessory or another computer, the device needs to be unlocked. To connect your Mac laptop with Apple silicon to an accessory, your Mac needs to be unlocked and you need to provide explicit approval.
- Wireless connectivity: Your device won’t automatically join non-secure Wi-Fi networks and will disconnect from a non-secure Wi-Fi network when you turn on Lockdown Mode. 2G and 3G cellular support is turned off for iPhone and iPad.
- Configuration profiles: Configuration profiles can’t be installed, and the device can’t be enrolled in Mobile Device Management or device supervision while in Lockdown Mode.
Phone calls and plain text messages continue to work while Lockdown Mode is turned on, although incoming calls won’t ring on a paired Apple Watch. Emergency features, such as SOS emergency calls, are not affected.
How to turn on Lockdown Mode on iPhone or iPad
- Open the Settings app.
- Tap Privacy & Security.
- Scroll down, tap Lockdown Mode, then tap Turn On Lockdown Mode.
- Tap Turn On Lockdown Mode.
- Tap Turn On & Restart, then enter your device passcode.
How to turn on Lockdown Mode on Mac
- From the Apple menu , choose System Settings.
- From the sidebar, click Privacy & Security.
- Scroll down, click Lockdown Mode, then click Turn On.
- Click Turn on Lockdown Mode. You might need to enter the user password.
- Click Turn On & Restart.
