iPhone hacking alert: What is the lockdown feature that Apple recommends to targeted users

Apple notified multiple top opposition leaders and journalists that their iPhones are being targeted by "state-sponsored attackers" remotely trying to compromise their iPhones. The notification alerted and advised them to protect their devices by taking protective measures including creating a new Apple ID, changing passwords, and enabling two-factor authentication and activating the 'Lockdown Mode' feature on their iPhones.

Apple introduced Lockdown Mode with iOS 16 and is available on iPhones, iPads, Macs, and Apple Watch. The feature is designed to protect users against rare and sophisticated cyberattacks. Once enabled, lockdown mode keeps iPhones in extreme protection mode, severely restricting the features that could be exploited by highly targeted mercenary spyware.

"To reduce the attack surface that could potentially be exploited by highly targeted mercenary spyware, certain apps, websites and features will be strictly limited for security, and some experiences may not be available at all," explains Apple.

Essentially, when Lockdown Mode is enabled, users will only be able to use basic features such as SMS, calls, and SOS emergency calls. More complex features like iMessage, web browsing, FaceTime, Photos, Apple services, and Wi-Fi will be disabled. To be more precise, Apple applies following restrictions in lockdown mode:

1. Messages: Most message attachments are blocked, and features such as link previews and message history are disabled.
2. Browsing: Certain web technologies are disabled, such as just-in-time (JIT) compilation and web extensions.
3. Wired connections: Wired connections to devices or accessories are blocked.
4. Shared Albums: Shared Albums are temporarily disabled.
5. Device invitations: Device invitations and requests to join device management services are blocked.
6. MDM profiles: Installing or removing configuration profiles is blocked.

Apple has designed these restrictions to make it more difficult for attackers to exploit vulnerabilities in these features and gain access to a user's device.

How to enable Lockdown Mode

To enable Lockdown Mode in Apple, follow these steps:

• On your iPhone or iPad, go to Settings > Privacy & Security > Lockdown Mode.
• Tap Turn On Lockdown Mode.
• Review the information on the screen and tap Turn On & Restart.
• Your device will restart and Lockdown Mode will be enabled.

To enable Lockdown Mode on your Mac, follow these steps:

• Go to Apple menu > System Settings.
• From the sidebar, click Privacy & Security.
• Scroll down and click Lockdown Mode.
• Click Turn On Lockdown Mode.
• Review the information on the screen and click Turn On & Restart.
• Your Mac will restart and Lockdown Mode will be enabled.

To disable Lockdown Mode, follow the same steps as above and tap or click Turn Off Lockdown Mode.

Notably, Lockdown Mode is a powerful security feature, but it can also be disruptive to your workflow. Apple only recommends enabling Lockdown Mode if you are at risk of a highly targeted cyberattack.