iPhone Lockdown Mode Offers Strong Spyware Defense at Cost of Everyday Features

The feature has been available since 2022 but is buried in the Settings app and is not meant for the average user, Engadget reported. Apple describes it as an extreme layer of security for the few people who may be targeted by spyware, including journalists, activists and politicians. It is available on iPhones running iOS 16 or newer, iPads running iPadOS 16 or later, Apple Watches running watchOS 10 or newer, and Macs running macOS 13 Ventura or later. Users can enable it by opening Settings, going to Privacy & Security, scrolling to Lockdown Mode, tapping Turn On & Restart and confirming with a passcode.

When enabled, Lockdown Mode blocks most kinds of attachments in Messages and stops link previews from working. It restricts how JavaScript operates in browsers, which can make some websites load slowly or fail to work. Incoming FaceTime calls from people the user has not recently called are blocked. Wired connections are disabled while the device is locked, so it cannot communicate with a computer or accessory without the passcode. The iPhone will not automatically connect to unsecured wireless networks, and support for 2G and 3G networks is disabled, though those networks were discontinued in the United States years ago. Users also cannot install configuration profiles, and call notifications from the iPhone will not appear on a paired Apple Watch. Home invitations and Game Center are unavailable, and photo sharing is restricted.

Engadget cited a 2023 exploit known as “Blastpass,” which used iMessage to install Pegasus spyware on Apple devices. Researchers found that devices running Lockdown Mode were completely immune, according to the report. Apple offers a 100 percent bonus on top of its regular reward through its Security Bounty program to anyone who finds a way to bypass the feature.

The setting allows some exceptions. Users can exclude certain contacts from messaging restrictions so family members can still send videos or documents, and they can exclude certain websites and apps. Engadget reported that loosening these restrictions makes a device somewhat more vulnerable, and that people who believe they are targets should keep all default protections on.

For most people, Engadget said there is no need to use Lockdown Mode because Apple devices already include many security and privacy features. Spyware like Pegasus usually targets public figures and is often deployed by governments seeking to monitor opponents or protesters. Apple may notify users if it believes they have been targeted. Users who are curious can try Lockdown Mode for a few days, but Engadget said the inconveniences it creates are likely not worth the extreme protection that few people need.