> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Lock a Device

> Remotely lock a managed device from Iru Endpoint. Set a PIN or password and display a message on the lock screen across Mac, iOS, and Windows.

<Callout icon="list-check" color="#B84A7A" iconType="regular">This guide applies to Mac computers, iOS devices, iPadOS devices, visionOS devices, and Android devices</Callout>

### About Device Lock

The Lock Device command is available on macOS, iOS, iPadOS, visionOS, and Android. It doesn't require supervision.

<Warning>
  A locked device can't receive an Erase Device MDM command. For more information on erasing a device, see our [Erase a Device](/en/endpoint/devices/device-actions/erase-a-device) support article.
</Warning>

### How It Works

When you lock a device, Iru Endpoint sends an MDM command to the device to immediately secure it. The device will require a passcode to unlock, and you can optionally display a custom message on the lock screen.

<Tabs>
  <Tab title="macOS">
    #### How to Lock a Mac

    <Steps>
      <Step title="Navigate to Device Record">
        Navigate to the Device Record.
      </Step>

      <Step title="Open Device Action Menu">
        Open the **Device Action Menu**.
      </Step>

      <Step title="Select Lock Device">
        Select **Lock Device**.
      </Step>

      <Step title="Configure Lock Message">
        Optionally, configure a **Lock message** (macOS 14 or higher).
      </Step>

      <Step title="Lock Device">
        Click **Lock device**.
      </Step>
    </Steps>
  </Tab>

  <Tab title="iOS/iPadOS">
    #### How to Lock an iPhone or iPad

    <Steps>
      <Step title="Navigate to Device Record">
        Navigate to the Device Record.
      </Step>

      <Step title="Open Device Action Menu">
        Open the **Device Action Menu**.
      </Step>

      <Step title="Select Lock Device">
        Select **Lock Device**.
      </Step>

      <Step title="Configure Lock Message and Phone">
        Optionally, configure a **Lock message** and **Phone number** to display on the locked device.
      </Step>

      <Step title="Lock Device">
        Click **Lock device**.
      </Step>
    </Steps>
  </Tab>

  <Tab title="visionOS">
    #### How to Lock a Vision device

    <Steps>
      <Step title="Navigate to Device Record">
        Navigate to the Device Record.
      </Step>

      <Step title="Open Device Action Menu">
        Open the **Device Action Menu**.
      </Step>

      <Step title="Select Lock Device">
        Select **Lock Device**.
      </Step>

      <Step title="Lock Device">
        Click **Lock device**.
      </Step>
    </Steps>
  </Tab>

  <Tab title="Android (Company-Owned Work Profile)">
    #### How to Lock an Android Device

    <Steps>
      <Step title="Navigate to Devices Page">
        Navigate to the **Devices** page. In the upper right corner, select the three dot ellipsis icon.
      </Step>

      <Step title="Select Lock Device">
        Select **Lock device**.
      </Step>

      <Step title="Confirm Lock Command">
        Select **Lock device** again to send the lock command.
      </Step>
    </Steps>
  </Tab>
</Tabs>

## Command Behavior

<Tabs>
  <Tab title="macOS">
    #### Command Behavior for macOS

    For macOS devices, the device will be locked with an EFI/Find My PIN code. Some conditionals, whose behavior is unique to the hardware and macOS version, are outlined below. Once the device receives the command, a 6-digit pin will automatically be generated and available on the device record.

    **Mac computers** with **Apple silicon** running **macOS 11.5 or earlier**.

    * Lock device PINs aren't supported on Mac computers with Apple silicon before macOS 11.5
    * The device will restart to recoveryOS, where an admin must authenticate, and activation will be required

    **Mac computers** with **Apple silicon** running **macOS 11.5 or later**.

    * The device will restart and be locked with a randomly generated PIN once the device receives the command

    **Mac computers** with **Intel** running **any supported macOS version**.

    * The device will restart and be locked with a randomly generated PIN once the device receives the command
  </Tab>

  <Tab title="iOS/iPadOS/visionOS">
    #### Command Behavior for iOS, iPadOS, and visionOS

    For iOS, iPadOS, and visionOS devices, once the command is received, the screen will automatically be locked, and you can optionally specify a lock message. The device will be locked with the existing passcode.
  </Tab>

  <Tab title="Android (Company-Owned Work Profile)">
    #### Command Behavior for Android

    For Android company-owned work profile devices, the lock command will immediately lock the device. The device will be locked with the existing device passcode or work profile passcode, depending on the device configuration.
  </Tab>
</Tabs>