# Secure the Apple Activation Lock bypass before wiping a returned device

> What must be preserved before an Apple device is wiped for reassignment?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-589-secure-the-apple-activation-lock-bypass-before-wiping-a-returned-device/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:22:07+00:00
- Modified: 2026-09-10T02:14:32+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

What must be preserved before an Apple device is wiped for reassignment?

## Potentially affected

Confirm the device’s enrollment and Activation Lock configuration, the operator’s permissions, and the approved reassignment request. Do not assume every personally enrolled Apple device supports this managed recovery route.

## DSE recommendation

Add a bypass-code custody checkpoint before any approved wipe.

## Article

## Source facts

Intune can disable Activation Lock without the former user’s Apple credentials, or provide the stored bypass code. Microsoft warns that resetting before copying the code removes it from Intune. Launching Find My after the disable action re-enables the lock, so Microsoft directs administrators to take physical possession first. The action covers supervised iOS/iPadOS through ADE and ADE-enrolled macOS. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/device-management/actions/disable-activation-lock).

## Applicability

Confirm the device’s enrollment and Activation Lock configuration, the operator’s permissions, and the approved reassignment request. Do not assume every personally enrolled Apple device supports this managed recovery route.

## DSE recommendation

Add a bypass-code custody checkpoint before any approved wipe. Have the receiving technician verify the physical device against the managed record and place the code in an approved secret store, not the ordinary return ticket. Coordinate the lock-removal and reset window so the device remains under organizational control. Keep user-data preservation approval separate from authorization to clear the lock.

## Verification

Before erasure, verify that the intended device’s bypass material was actually retrieved and is accessible to the authorized technician. Use a designated test device to rehearse the documented platform-specific activation path. After the approved reset, confirm the device can proceed through activation for its next assignment. Record the result without recording the bypass value or asking the former user to disclose an Apple password.

## Official references

[Microsoft Learn: Device Action: Disable Activation Lock](https://learn.microsoft.com/en-us/intune/device-management/actions/disable-activation-lock).

## Primary reference

- Name: Device Action: Disable Activation Lock - Microsoft Intune | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/intune/device-management/actions/disable-activation-lock
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Secure the Apple Activation Lock bypass before wiping a returned device,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-589-secure-the-apple-activation-lock-bypass-before-wiping-a-returned-device/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.