Remote Supervision (Early Access)
Use Tech Lockdown to remotely Supervise Apple devices via Mobile Device Management.
We're excited to announce that Remote Supervision (Mobile Device Management) is now available for early access!
This is an opt-in only beta, available to anyone who wants early access (details further down the page).
In short, this unlocks an even more restrictive and convenient way to lock down iPhones, iPads, and Mac computers.
Here are a few key benefits:
- Config changes sync automatically (no more re-downloading configs).
- Protect VPN settings completely.
- See which restrictions are actually applied on the device, along with the installed apps (ideal for monitoring).
Real-Time Config Syncing
Apple devices can gain access to advanced restrictions by installing configs. Previously, making changes to these restrictions requires re-downloading the config and manually installing it in the Settings app.
Now, with Remote Supervision, config changes are automatically synced on save without requiring downloading/re-installing the config:
View Installed Apps and Actual Restrictions
Use the Installed applications section on the device page to see which apps are currently downloaded and installed on the device.
Note that if you block an app that is installed, it may still appear on this list.
The Restrictions section shows what is actually in force (across all configs and Screen Time).
This is especially useful for troubleshooting issues.
Full VPN Protection
If you're using the Cloudflare One VPN to connect your device to your Content Policy (to block websites on the network of the device), Remote Supervision can be used to completely lock down the VPN settings so that they can't be bypassed.
Standard, unprotected VPN:
Protected VPN using Remote Supervision:
Since Connect On Demand is locked on, the VPN is automatically re-enabled if it is turned off.
Connect on demand, when toggled on, ensures that the VPN is automatically turned on when the internet on the device is used (like opening Safari and trying to browser to a webpage).
Configs automatically adapt based on linked OS versions
One of the challenges with using configs to restrict an Apple device is that some options work on certain versions, but not on others, or the underlying behavior is quite different between OS versions.
To make a long story short, a config has to be optimized for the version of iOS or macOS that the device is actually using. Otherwise, restrictions may not work as expected (or may not be supported at all).
Now, with Remote Supervision, we're able to always know what OS version the device is currently running and adapt to it.
Configs automatically adapt to the device they are being installed on.
This means you could have a shared config that's installed on an iPad running iOS 16 and an iPhone running iOS 26 and it will automatically adjust to the target device.
Get Early Access
Remote Supervision isn't available by default and requires opt-in. Please follow the instructions below to get access.
Please closely follow the instructions in the next section to upgrade devices to Remote Supervision.
Upgrading an iPhone to Remote Supervision
As a current customer, your VPN & Device Management section of iPhone settings probably has a VPN, possibly DNS settings, and multiple configs installed (config presets + a custom config):
When upgrading your device, none of these settings will be lost - they will be merged into a single managed config:
Here's how to upgrade: