---
title: "Lock a Device"
slug: "lock-a-device"
updated: 2025-02-24T23:52:07Z
published: 2025-02-26T14:05:56Z
canonical: "support.kandji.io/lock-a-device"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.kandji.io/kb/llms.txt
> Use this file to discover all available pages before exploring further.

# Lock a Device

### Lock Device

The Lock Device command is available on macOS, iOS, iPadOS, and visionOS. It does not require supervision.

> [!WARNING]
> A locked device cannot recieve an Erase Device MDM command. For more information on erasing a device, see our [Erase a Device](/v1/docs/erase-a-device) support article.

#### How to Lock a Mac

1. Navigate to the Device Record.
2. Open the **Device Action Menu**.
3. Select **Lock Device**. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/kdagbhstsmf7rbqmjkd675dctrwikquloq.png)
4. Optionally, configure a **Lock message** (macOS 14 or higher).
5. Click **Lock device**. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/tngeowr7tpkcb-t0war3srq2p_askbljhw.png)

#### How to Lock an iPhone or iPad

1. Navigate to the Device Record.
2. Open the **Device Action Menu**.
3. Select **Lock Device**. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/qxpq3ymdrd_e8abrdkzzxki9b0aszz23tw.png)
4. Optionally, configure a **Lock message** and **Phone number** to display on the locked device.
5. Click **Lock device**. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/c67o1jkbnio_u1qaxuxzmln27hxbhxzdkq.png)

#### How to Lock a Vision device

1. Navigate to the Device Record.
2. Open the **Device Action Menu**.
3. Select **Lock Device**. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/Kandji-Support-KB-0440PM.png)
4. Click **Lock device**. ![](https://cdn.document360.io/0844b095-d720-4a7b-bb17-ec97d9bc6e41/Images/Documentation/Kandji-Support-KB-0446PM@2x.png)

#### Command Behavior for macOS

For macOS devices, the device will be locked with an EFI/Find My PIN code. Some conditionals, whose behavior is unique to the hardware and macOS version, are outlined below. Once the device receives the command, a 6-digit pin will automatically be generated and available on the device record.

**Mac computers** with **Apple silicon** running **macOS 11.5 or earlier**.

- Lock device PINs are not supported on Mac computers with Apple silicon before macOS 11.5.
- The device will restart to recoveryOS, where an admin must authenticate, and activation will be required.

**Mac computers** with **Apple silicon** running **macOS 11.5 or later**.

- The device will restart and be locked with a randomly generated PIN once the device receives the command.

**Mac computers** with **Intel** running **any supported macOS version**.

- The device will restart and be locked with a randomly generated PIN once the device receives the command.

#### **Command Behavior for iOS, iPadOS, and visionOS**

For iOS, iPadOS, and visionOS devices, once the command is received, the screen will automatically be locked, and you can optionally specify a lock message. The device will be locked with the existing passcode.