Apple Announces New Lockdown Mode on iOS 16 With 'Extreme' Level of Security

[MacRumors]

Apple today announced a new Lockdown Mode coming to the iPhone, iPad, and Mac with iOS 16, iPadOS 16, and macOS Ventura. Apple says the optional security feature is designed to protect the "very small number" of users who may be at risk of "highly targeted cyberattacks" from private companies developing state-sponsored spyware, such as journalists, activists, and government employees.

Apple says Lockdown Mode is enabled in the third beta versions of iOS 16, iPadOS 16, and macOS Ventura released today, and the feature will be available to all users when the software updates are released later this year. While the feature is aimed at users who are targets of cyberattacks, it appears that it can be enabled by any user.

Lockdown Mode is turned off by default and can be enabled in the Privacy & Security section of the Settings or System Settings app. After being turned on, Lockdown Mode can be turned off at any time in the same section of the Settings app. Enabling or disabling Lockdown Mode requires restarting the device and entering the device's passcode.

When enabled, Apple says Lockdown Mode provides an "extreme" level of security by strictly limiting or disabling the functionality of features, apps, and websites. At launch, Lockdown Mode will include the following protections:

• In the Messages app, most message attachment types other than images are blocked, and some features like link previews are unavailable.
• Incoming FaceTime calls from people you have not previously called are blocked. Incoming invitations for other Apple services from people you have not previously invited are also blocked.
• Some complex web technologies and browsing features, including just-in-time (JIT) JavaScript compilation, are disabled unless the user excludes a trusted site from Lockdown Mode. This protection applies to Safari and all other web browsers using WebKit across the iPhone, iPad, and Mac.
• Shared albums will be removed from the Photos app, and new shared album invitations will be blocked.
• When a device is locked, wired connections with other devices/accessories are blocked.
• Configuration profiles cannot be installed, and the device cannot enroll into mobile device management (MDM), while Lockdown Mode is turned on.

Apple said it will continue to add new protections to Lockdown Mode over time. Apple has added a new category to its Security Bounty program to reward researchers who find Lockdown Mode bypasses and help improve its protections, with bounties to be doubled for qualifying findings in Lockdown Mode, up to a maximum of $2 million.

"Lockdown Mode is a groundbreaking capability that reflects our unwavering commitment to protecting users from even the rarest, most sophisticated attacks," said Ivan Krstić, Apple's head of security engineering, in a press release shared today. "While the vast majority of users will never be the victims of highly targeted cyberattacks, we will work tirelessly to protect the small number of users who are."

Apple also announced it is making a $10 million grant to the Ford Foundation's Dignity and Justice Fund to support organizations that investigate, expose, and prevent highly targeted cyberattacks. Apple said it will also be donating any damages awarded from its lawsuit filed against NSO Group, creator of the spyware Pegasus.

Last year, Apple began notifying users who may have been targeted by state-sponsored attackers via email and iMessage notifications.

Article Link: Apple Announces New Lockdown Mode on iOS 16 With 'Extreme' Level of Security

 

[tranceme]

I hope this doesn't mean the rest of the security will become weaker or relaxed. Would suck having to default to this mode to really keep security.

 

[rjp1]

It would be nice if some of these things could be configured. If they are known higher risk, then why can't we disable some things we don't care about?

 

[falkon-engine]

Inspector Gadget mode incoming?
Also if we get an Extreme lockdown mode, what about Sideload mode? If you swing the pendulum in one direction (towards extreme security) how about letting it swing in the other direction (to let me install 3rd party apps like say Wifi Explorer)?

 

[johnmarki]

I applaud Apple for bringing this feature/mode to the masses. I would really like to see this as an a la carte set of controls though.

 

[BWhaler]

This is fantastic. And I think it will be relevant to more people than Apple is positioning this for, sadly.

Thank you Apple.

 

[Doctor Q]

In the Messages app, most message attachment types other than images are blocked, and some features like link previews are unavailable.

I'd like to have this feature myself.

 

[Chaos215bar2]

Am I the only one who wants to see some of these made into first-class features? Being able to block automatic loading of previews and attachments in Messages, for instance, would be a great.

 

[EmotionalSnow]

I hope this doesn't mean the rest of the security will become weaker or relaxed. Would suck having to default to this mode to really keep security.

Probably not. They know that most people don’t want to give up all of these features.

 

[wigby]

Inspector Gadget mode incoming?
Also if we get an Extreme lockdown mode, what about Sideload mode? If you swing the pendulum in one direction (towards extreme security) how about letting it swing in the other direction (to let me install 3rd party apps like say Wifi Explorer)?

Lockdown mode feeds into the Apple security narrative. What does sideload mode feed into? Apple caving into regulators? No. Apple designing products based on customer feedback and complaints? No. Apple dealing with a million bricked customer iPhones? No. Apple competing with app stores on their own device? No.

 

[_Spinn_]

Sounds like a good addition to security.

 

[Villarrealadrian]

I see this feature being a standard on my phone

 

[Lexdexia]

I hope Apple sues that israeli spyware group into bankruptcy.

 

[siddavis]

EU will legislate that Extreme Lockdown Mode must be made interoperable with apps that disable Extreme Lockdown Mode.

 

[contacos]

EU: please allow developer XY to access lockdown mode even tho … ITS IN THE NAME

 

[IIGS User]

Inspector Gadget mode incoming?
Also if we get an Extreme lockdown mode, what about Sideload mode? If you swing the pendulum in one direction (towards extreme security) how about letting it swing in the other direction (to let me install 3rd party apps like say Wifi Explorer)?

Archer Mode.

For when you're in the Danger Zone....

 

[cupcakes2000]

I hope this doesn't mean the rest of the security will become weaker or relaxed. Would suck having to default to this mode to really keep security.

Why would that happen? It’s just an extra more secure but non user friendly safety mode.

 

[kirbyrun]

When a device is locked, wired connections with other devices/accessories are blocked.

Am I correct in assuming that this means that devices such as GrayKey would be ineffective when this function is turned on?

 

[Just sayin...]

How about text messages and phone calls from senders not in your contact list are automatically rejected? I'd LOVE that one...

 

[TheDailyApple]

None of this matters if the EU’s regulations are complied with. As soon as third party routes onto iPhone exist, apps (from the likes of meta, bytedance, alphabet, Microsoft, etc.) with be made available solely through these means to avoid Apple’s cut and their rules. Anyone who has to use these such apps won’t have a choice but to bypass iOS’s safety rules.

 

[Googlyhead]

I'd like to have this feature myself.

Am I the only one who wants to see some of these made into first-class features? Being able to block automatic loading of previews and attachments in Messages, for instance, would be a great.

Even if I don’t need some of the security aspects; I’d turn this mode on immediately just for some of the features listed. in fact; I don’t see any particular downside…0

 

[OhMyMy]

It would be nice if some of these things could be configured. If they are known higher risk, then why can't we disable some things we don't care about?

Cuz you can’t predict the lengths a state-sponsored actor would go to to target an individual and the only way to maximize security is to remove any possibility for a vulnerability altogether.

 

[OhMyMy]

Lockdown mode feeds into the Apple security narrative. What does sideload mode feed into? Apple caving into regulators? No. Apple designing products based on customer feedback and complaints? No. Apple dealing with a million bricked customer iPhones? No. Apple competing with app stores on their own device? No.

Be glad you’re not one of those the feature is intended for.
You’re concerned about first world problems while there are people genuinely scared for their lives from their very own government coming at them with everything they got. The journalists who expose government scandals for example.

 

[bigboy29]

Hmmm... I am trying to figure out why I would not use this all the time and am falling short.

 

[falkon-engine]

Lockdown mode feeds into the Apple security narrative. What does sideload mode feed into? Apple caving into regulators? No. Apple designing products based on customer feedback and complaints? No. Apple dealing with a million bricked customer iPhones? No. Apple competing with app stores on their own device? No.

It feeds into user choice. If I have the choice to be more secure than stock iOS, then give me the choice to side load too.