StarLabs Glossary / Business Laptop Repair Terms
Apple Activation Lock
Apple’s anti-theft lock that ties a Mac, iPhone or iPad to an Apple Account, and can lock your own company out.
Apple Activation Lock is a security feature that links an Apple device to the Apple Account that turned on Find My. After the device is erased, it cannot be set up again without that account’s password. Organisation-owned devices can instead be unlocked through Apple Business Manager or a device management (MDM) bypass code.
How it works
Activation Lock switches on automatically when someone turns on Find My on an iPhone, iPad or Mac. On a Mac it applies to models with Apple silicon or the Apple T2 Security Chip running macOS Catalina or later. It stays on as long as Find My stays on.
To remove it normally, the person signed in turns off Find My and enters their Apple Account password. If the device is offline, the owner can sign in at iCloud.com/find and remove it there.
The problem for businesses is simple. Staff often sign in with their personal Apple Account on a company device. When that person leaves, or the device is wiped, the company holds hardware it cannot set up. A repair shop cannot fix this either. Apple also warns that replacement parts on some newer devices can be locked to someone else’s account, so lock status matters during repair too.
The business route: Apple Business Manager and MDM
| Option | How it helps |
|---|---|
| Apple Business Manager | Admins can turn off Activation Lock for devices listed in the organisation’s account, even if the device is not enrolled in MDM. |
| MDM bypass code | The MDM stores a code for supervised devices that clears the lock. On iPhone and iPad it must be collected within 15 days of supervision. |
| Apple Support request | If there is no other way, Apple can review a removal request with proof of purchase. |
One catch: if a user turned on Activation Lock before the device was supervised, the MDM cannot turn it off. Enrol devices first, then hand them out.
What it means for your business
- Buy Apple devices through a channel that can add them to your Apple Business Manager account.
- Enrol every device in MDM before staff sign in.
- Keep invoices with serial numbers. They are your proof of ownership.
- Before a device goes for repair, trade-in or disposal, make sure Activation Lock is off.
- Make “sign out of Find My” part of every staff exit checklist.
Common questions
Can a repair shop remove Activation Lock?
No legitimate shop can. Only the account holder, your organisation’s Apple Business Manager or MDM, or Apple itself with proof of purchase can remove it. Anyone offering a quick unlock should be avoided.
A former employee’s Apple Account is on our company Mac. What do we do?
First ask them to remove the device at iCloud.com/find. If they will not or cannot, check whether the Mac is in your Apple Business Manager account. If it is not, collect the original invoice and submit an Activation Lock support request to Apple.
Does Activation Lock protect company data?
It stops a thief from reusing the device, but it is not encryption. Data protection comes from FileVault on Mac and a passcode on iPhone and iPad, plus remote wipe through your MDM.
Company Mac or iPhone needs repair?
We check lock status and ownership first, so the device comes back usable.
Sources: Apple Support: Activation Lock for Mac, Apple Platform Deployment: Activation Lock on organisation-owned devices, Apple Support: Turn off Find My
Reviewed by the StarLabs technical team · Last checked 18 October 2026
← Business Laptop Repair Terms · ← All terms · Common questions
