App Clips are a feature in iOS that allows users to access a small, fast, and highly focused portion of an app without needing to download and install the full application from the App Store. They are typically triggered by scanning a QR code, an NFC tag, or clicking a link in Safari or Messages (e.g., paying for parking or renting a scooter). While highly convenient for consumers, App Clips represent a form of dynamic, ephemeral code execution. In strictly regulated corporate environments where all software execution must be vetted, whitelisted, and provisioned via a Mobile Device Management (MDM) solution, allowing unvetted, transient app fragments to execute on the device is a significant security and compliance violation.
This guide explains how to completely disable App Clips system-wide on an iPhone using the native Screen Time Content & Privacy Restrictions.
Disable App Clips via Screen Time Restrictions
To enforce a strict block on ephemeral code execution, we must use Apple’s built-in restriction engine to prevent the operating system from downloading or launching App Clip binaries.
- Unlock your iPhone and open the main Settings app.
- Tap on Screen Time. (If you haven’t used Screen Time before, you may need to tap “Turn On Screen Time” and follow the prompts).
- Scroll down and tap on Content & Privacy Restrictions.
- If the master toggle switch at the top is off, toggle Content & Privacy Restrictions to the On (green) position. You may be prompted to enter your Screen Time passcode.
- Tap on Content Restrictions.
- Scroll down to the bottom of the list and locate the App Clips option.
- Tap on it and change the selection from “Allow” to Don’t Allow.
Verify the Configuration Lockdown
Selecting “Don’t Allow” immediately instructs the iOS kernel and the Safari rendering engine to block the parsing and execution of any App Clip invocation URLs or NFC payloads.
To verify the lockdown is active, attempt to trigger an App Clip. For instance, if you navigate to a website in Safari that normally displays an App Clip banner at the top of the screen (such as Yelp or a parking app), that banner will be completely suppressed and hidden. If you scan an App Clip QR code with the Camera app, the device will simply treat it as a standard text or URL barcode and will absolutely refuse to download the ephemeral application payload. Your device is now secured against unauthorized dynamic app execution.