Manage tokens and passcodes in Apple Configurator for Mac

You use an unlock token to unlock a supervised device where a user has forgotten the device passcode. You should save unlock tokens for devices when the devices are initially configured.

If you’re creating a Blueprint for several devices, you should add the unlock token action to the Blueprint so that when devices are configured, the unlock tokens are stored on the Mac.

1. In Apple Configurator , select one or more devices or Blueprints.

2. Do one of the following:

   • Choose Actions > Advanced > Save Unlock Token.

   • Control-click the selected devices or Blueprints, and choose Advanced > Save Unlock Token.

When a user forgets the device passcode on a supervised device, you can clear the passcode with the unlock token.

1. In Apple Configurator , select one or more devices or Blueprints.

2. Do one of the following:

   • Choose Actions > Advanced > Clear Passcode.

   • Control-click the selected devices or Blueprints, and choose Advanced > Clear Passcode.

On supervised devices running iOS 8 or later and iPadOS, you can keep the user from changing the device passcode by adding a configuration profile with the restriction setting “Allow modifying passcode” disabled. See Device management restrictions for supervised Apple devices in Apple Platform Deployment.

A user can set a ScreenTime passcode on a device so specific restrictions are in place, preventing anyone else using the device from accessing certain apps or features. This is done on the device in Settings > ScreenTime.

The ScreenTime passcode can be different from the device passcode. On supervised devices, you can clear the ScreenTime passcode using Clear ScreenTime Passcode.

1. In Apple Configurator , select one or more devices or Blueprints.

2. Do one of the following:

   • Choose Actions > Advanced > Clear ScreenTime Passcode.

   • Control-click the selected devices or Blueprints, and choose Advanced > Clear ScreenTime Passcode.