Lock or Unlock a Device

You can remotely lock an iPad, iPhone, or Mac, and remotely unlock an iPad or iPhone from your Jamf Now Devices page. If you want to remotely lock a mobile device to prevent an unauthorized user from accessing the device, you can also use Lost Mode. For more information, see Enabling Lost Mode.

After sending a lock command to an iPad or iPhone, the device will lock itself until the passcode to the device is entered. You can also remove the passcode from a device with Jamf Now by sending an Unlock Device command.

After sending a lock command to a Mac, the computer will lock itself until the chosen six-digit PIN is entered.

Important:

You must remember the six-digit PIN you entered when locking computers in Jamf Now. Jamf Now does not store the PIN and will not be able to bypass the lock if forgotten.

Sending the lock command to a Mac will restart the Mac and lock the device on the firmware level. There is no way to send an unlock command to a Mac. Once the Mac is locked, it is not able to receive any commands you send from Jamf Now until you unlock it manually.

Note:

Devices will not receive commands if they are not connected to a network. Once the device has a valid network connection (Wi-Fi, cellular, or Ethernet), it will immediately lock.

Locking or Unlocking an iPad or iPhone

  1. Log in to Jamf Now.
  2. On the Devices page, click the device you would like to lock or unlock.
  3. Click Lock or Unlock.
    Note:

    Sending the Unlock command will immediately clear the passcode set on the device. If Jamf Now is set to require a passcode on your enrolled devices (this is the default setting), the user will immediately be prompted to set a new passcode. If the Prevent Changes to Passcode restriction is enabled, the user will not be prompted to set the new passcode until the restriction is disabled. An internet connection is required on the device receiving this command.

Locking a Mac

  1. Log in to Jamf Now.
  2. On the Devices page, click on the Mac you would like to lock.
  3. Click Lock.
  4. You will now be prompted to enter a six-digit passcode. This passcode is used to unlock the Mac after you lock it. Once entered, click Lock.

After the Mac receives the command, it will restart and show the prompt for the six-digit passcode. The Mac will not receive any commands from Jamf Now while locked.

Note:

On computers with Apple silicon (i.e., M1 chip) with macOS 11.4 or earlier, the six-digit passcode is not set. The computer reboots to the Activation screen in macOS Recovery with the options to restart, shutdown, activate, or erase the computer. To activate the Mac, the user must authenticate with an administrator account that has a SecureToken. If there are no administrators with a SecureToken, activation cannot complete and the computer must be erased. This activation step requires an internet connection.

Unlocking a Mac

If a user has forgotten their password on their Mac, you can use the FileVault 2 key stored in Jamf Now (only available if FileVault is turned on and the key is stored). If FileVault 2 is not enabled, you can use any of the options outlined in If you forgot your Mac login password from Apple's support website.