Remote Lock for Apple Devices

You can remotely lock an iPad, iPhone, or Mac, and remotely unlock an iPad or iPhone from your Jamf Now Devices page. If you want to remotely lock a mobile device to prevent an unauthorized user from accessing the device, you can also use Lost Mode. For more information, see Enabling Lost Mode.

When sending a lock command to an iPad, iPhone, or Mac, the device will lock itself until the passcode to the device is entered, or you unlock the device within the Jamf Now device management page.

Sending the lock command to a Mac will restart the Mac and lock the device on the firmware level. There is no way to send an unlock command to a Mac. Once the Mac is locked, it is not able to receive any commands you send from Jamf Now until you unlock it manually.

Note:

Devices will not receive commands if they are not connected to a network. Once the device has a valid network connection (Wi-Fi, cellular, or Ethernet), it will immediately lock.

Locking or Unlocking an iPad or iPhone

  1. Log in to Jamf Now.
  2. On the Devices page, click the device you would like to lock or unlock.
  3. Click Lock or Unlock.
    Note:

    Sending the Unlock command will immediately clear the passcode set on the device. If Jamf Now is set to require a passcode on your enrolled devices (this is the default setting), the user will immediately be prompted to set a new passcode. If the Prevent Changes to Passcode restriction is enabled, the user will not be prompted to set the new passcode until the restriction is disabled. An internet connection is required on the device receiving this command.

Locking a Mac

  1. Log in to Jamf Now.
  2. On the Devices page, click on the Mac you would like to lock.
  3. Click Lock.
  4. You will now be prompted to enter a six-digit passcode. This passcode is used to unlock the Mac after you lock it. Once entered, click Lock.

Once the Mac receives the command, it will restart and show the prompt for the six-digit passcode. The Mac will not receive any commands from Jamf Now while locked.

Note:

The six-digit passcode does not apply to computers with both macOS 11.4 or earlier and M1. Instead, the Mac will boot into recoveryOS, where it can be restarted, shutdown, activated, or erased. To activate the Mac, enter an administrator user and their password. Activation requires an internet connection.

Unlocking a Mac

If a user has forgotten their password on their Mac, you can use the FileVault 2 decryption key stored in Jamf Now (only available if FileVault is turned on and the key is stored). If FileVault 2 is not enabled, you can use any of the options outlined in If you forgot your Mac login password from Apple's support website.