Pick your path
The 3 Ways to Lock Down Your Kid's iPhone (and how to choose)
Three viable setups, from a one-time static lockdown to a fully tamper-proof phone. Here is what each one actually gets you, so you can pick the one that fits your kid.
First, the one word that matters: Supervision is a free setting built into every iPhone (the same one schools and companies use) that gives you real control your kid can't switch off. Every path below starts by turning it on.
Turning it on works the same way every time: you connect the phone to a Mac and switch on Supervision using Apple's free Configurator app. (You'll make up a fake company name during setup, and you do not need any Apple account for this part.) The fork is what you add on top: nothing, an app/service that lets you control the phone from your own phone (called MDM), or that same service plus an extra Apple account that re-locks the phone even if your kid wipes it (called Apple Business Manager, or ABM).
How the fork works
Apple Configurator, on a Mac
(no Apple account needed)
Path A
Local, no MDM · static lockdown only
Path B
Supervised + MDM
Path C
+ ABM, tamper-proof
What each path gains you
| What you get | Path ALocal, no MDM | Path BSupervised + MDM | Path C+ ABM |
|---|---|---|---|
| Supervised restrictions at setup (block apps, stop them erasing the phone to start over, stop apps that hide their internet activity, hide Apple's built-in apps) | Yes | Yes | Yes |
| Blocks bad websites (porn, etc.) using a filter like NextDNS | Yes, set at setup | Yes | Yes |
| Change settings / block an app later, remotely (no cable) | No, re-plug to the Mac to change anything | Yes | Yes |
| Nightly Lost Mode shut-off, on demand from your phone | No | Yes | Yes |
| Live dashboard + bypass/usage alerts | No | Yes | Yes |
| Teen can't remove your control | Your controls stay on unless someone erases the phone from a computer, and you can turn on a setting that blocks even that | Removable: a determined teen could delete your controls or erase the phone using a computer | Non-removable; your controls come back by themselves even if the phone is erased |
| Business account / paperwork | None | None | A free Apple Business account (needs a business ID number and a verification call from Apple). Takes a week or two |
| Rough ongoing cost | ~$0-2/mo (NextDNS optional) | ~$4-6/mo (SimpleMDM + NextDNS) | ~$4-6/mo (ABM itself is free) |
| Best for | Cooperative younger kid; set-and-forget | Most parents (the sweet spot) | Determined / tech-savvy teen |
In plain words
You supervise the phone and bake your restrictions and filters in at setup. It is genuinely locked down (block apps, force a web filter, stop them erasing the phone to start over), but everything is static: to change anything you plug back into the Mac, and there is no remote anything, so no nightly Lost Mode shut-off. Good for a young, cooperative kid where you set it once and never touch it again.
Everything in Path A plus remote, ongoing control from your phone: change filtering, block or unblock an app, push new rules anytime, and the nightly Lost Mode shut-off. This is the full day-to-day power, no business account, a few dollars a month. The catch: a determined teen can remove the management profile or wipe the phone with a computer to escape.
Everything in Path B plus tamper-proof: management cannot be removed and supervision re-applies itself even after a factory reset, so the teen genuinely cannot escape without you. The cost is the ABM setup (a DUNS number, an Apple verification call, a week or two). Worth it for a determined or tech-savvy teen; overkill for a younger one. You can start at Path B and add ABM later on the same phone.
What none of these do (be honest)
- ·None of these let you secretly read their text messages. There's no reliable way to do that on an iPhone.
- ·DNS filtering is defeatable by a motivated kid. Supervised profile-locking raises the bar but is not absolute.
- ·Setting up supervision always erases the phone once (your data returns via iCloud at Setup Assistant). Any tool advertising “no erase” is hiding an automatic backup/restore around the wipe.
The dead end (for completeness)
A phone-control service without Supervision does almost nothing. The iPhone just ignores the rules you try to push to it. Supervision is the gate that unlocks the real controls, which is why every path above starts by turning it on.
Want the printable setup checklist?
The printable, step-by-step version, plus new dangerous-app alerts as I find them. No spam, unsubscribe anytime.