How to Configure Lockdown Mode and Extreme Hardware Security on iPhone in iOS 18

While standard iOS security architecture shields the vast majority of iPhone users from everyday malware and phishing, high-profile individuals—including investigative journalists, diplomats, human rights activists, and corporate executives—face targeted attacks from mercenary spyware (such as Pegasus). These state-sponsored exploits frequently utilize zero-click vulnerabilities that compromise devices without requiring user interaction. In iOS 18, Apple provides Lockdown Mode, an extreme protection tier that hardens hardware and software boundaries to neutralize sophisticated cyber threats.

Understanding How Lockdown Mode Hardens System Attack Surfaces

Lockdown Mode fundamentally alters core iOS behaviors to eliminate attack vectors commonly targeted by zero-click exploits:

• Messages: Most message attachment types (aside from select images, audio, and video) are blocked. Link previews are completely disabled to prevent background URL fetching.
• Web Browsing: Complex web technologies, including Just-In-Time (JIT) JavaScript compilers and WebAssembly, are disabled unless explicitly whitelisted by the user for trusted domains.
• FaceTime & Apple Services: Incoming FaceTime calls and service invitations from individuals you have not previously contacted are blocked automatically.
• Wired Device Connections: When your iPhone is locked, USB and Lightning/USB-C accessory connections to computers and hardware forensics kits are severed.
• Configuration Profiles: Device management profiles (MDM) cannot be installed, preventing rogue supervisory takeovers.

Enabling Lockdown Mode on iPhone

Activating Lockdown Mode requires an administrative device restart:

1. Open the Settings app on your iPhone running iOS 18.
2. Scroll down and select Privacy & Security.
3. Scroll to the very bottom of the menu to locate Security.
4. Tap Lockdown Mode.
5. Review the detailed overview screen describing the limitations placed on Messages, Safari, and connected accessories.
6. Tap Turn On Lockdown Mode.
7. Tap Turn On & Restart, then enter your iPhone passcode to authenticate.
8. The iPhone restarts into the hardened operational state.

Managing Safari Web Browsing Exemptions

Because disabling JIT compilation can cause some complex web applications or banking portals to render slowly or fail:

1. Navigate to the trusted website in Safari.
2. Tap the Page Settings icon (aA) in the address bar.
3. Select Website Settings.
4. Toggle Lockdown Mode to Off for that specific domain.
5. The site reloads with normal web technologies active, while all other browsing sessions remain securely confined.

Securing Watch and Mac Ecosystem Devices

In iOS 18, enabling Lockdown Mode on your iPhone automatically propagates to your paired Apple Watch (running watchOS 10 or later). If you also utilize a Mac running macOS Sequoia under the same Apple Account, enable Lockdown Mode separately in System Settings > Privacy & Security > Lockdown Mode to ensure continuous ecosystem-wide protection.