Using the Prevent Changes to Passcode Restriction

The Prevent Changes to Passcode restriction is useful if you have shared devices where multiple people need to know the passcode, or if you have a public-use device like a kiosk where you don't want any passcode at all.

Enabling the Prevent Changes to Passcode Restriction

  1. Log in to Jamf Now.
  2. Click Blueprints.
  3. Select the desired Blueprint, and then click Restrictions.
  4. Click Security & Privacy.
  5. Select the Prevent Changes to Passcode checkbox.
  6. Click Save Changes.

Setting Up a Device with No Passcode

If you want to set up a device with no passcode, you will need to leave Prevent Changes to Passcode turned on and Require Passcode turned off. To turn off the Require Passcode option, follow the steps below:

  1. Log in to Jamf Now.
  2. Click Blueprints.
  3. Select the desired Blueprint, and then click Security.
  4. Deselect the Require Passcode checkbox.
  5. Click Save Changes.

Preventing a Passcode from Changing

  1. Log in to Jamf Now.
  2. Click Blueprints.
  3. Select the desired Blueprint, and then click Security.
  4. Select the Require Passcode checkbox.
  5. Set a passcode on each device.
  6. Navigate back to the desired Blueprint, then click Restrictions > Security & Privacy, and select the Prevent Changes to Passcode checkbox.
If you have both Require Passcode and Prevent Changes to Passcode enabled, you may see the "Security: Out of date" error. This typically means that the device is trying to update its passcode requirements, but it is prevented by the restriction.

To fix this, navigate back to the Blueprint and disable Prevent Changes to Passcode. Wait a few minutes for the security settings to show "Applied", and then re-enable Prevent Changes to Passcode.