Qwit Block

iPhone Setup

The iPhone is often the easiest loophole. The goal is to make the phone useful without leaving every distracting app one tap away.

1. Decide what the phone is for

Write down the jobs your phone must do: calls, messages, maps, banking, camera, travel, authentication, music, or work apps. Everything else should earn its place deliberately.

2. Enable supervised mode

Supervision is an Apple device mode intended for company and school phones. It allows restrictions that ordinary Screen Time cannot apply, and that is exactly what makes it useful here: the restrictions below only work on a supervised iPhone.

There are two routes, and the difference between them is large:

Afterwards, check Settings → General → About; a supervised phone says so near the top of the settings screen.

Tech Lockdown is a paid service — around $9.99 per month billed annually, with a free trial. Everything below depends on it. Screen Time and ScreenZen are free alternatives, but neither can enforce the network-level and profile-level restrictions described here.

3. Build the Content Policy

The Content Policy is the filtering layer, applied over DNS. You define what is blocked, who it applies to, and when, using rules such as Allow, Block, SafeSearch and YouTube Restricted mode. Because it works at the network level rather than inside one browser, it covers every app on the phone at once, and it is not defeated by switching browser.

The same policy can cover your computer as well, which is why it also appears in the Windows setup.

4. Install a configuration profile

A configuration profile is a settings file that iOS enforces with higher privileges than Screen Time. This is the part that closes the bypass routes. Tech Lockdown generates one from its Apple Config Generator, and the profile can enforce:

Generate the file from the Tech Lockdown dashboard, then install it on the phone the way iOS installs any profile — it appears under Settings → General → VPN & Device Management. Enable the option to prevent removal before you install it: once the profile is installed and protected with a passcode, the settings it enforces cannot be changed from the phone itself.

Configuration profiles do not update themselves. If you change a setting in the dashboard, you have to generate the file again and reinstall it. Expect to repeat this occasionally rather than set it once and forget it.

5. Add ScreenZen for daily friction

Download ScreenZen and use it as a second layer for apps and behaviors that need more flexible control. ScreenZen can add pauses, limits, and extra friction for apps that are not fully blocked but should not be opened reflexively.

This combination gives the setup two jobs: Tech Lockdown and supervised mode make the core restrictions difficult to bypass, while ScreenZen helps shape daily app use with softer limits.

Screen Time can still be disabled through the Settings app, which undermines any limits set through ScreenZen. See the blog post How to set up iPhone Screen Time so it can't be disabled for the workaround.

6. Lock Screen Time behind someone else's Apple ID

This is the step that decides whether the whole setup holds, and it is the one most guides get wrong.

A Screen Time passcode protects changes to your Screen Time settings. It does not lock the Settings app — iOS gives you no way to do that, and this setup does not try. Settings stays open; the restrictions behind it do not move without the passcode.

The real opening is the recovery route. Under Change Screen Time Passcode, a forgotten passcode can be reset by entering the Apple Account that was linked when the passcode was created. If that account is your own, you can always reset your own restrictions, and the passcode is a speed bump rather than a lock.

Apple allows the recovery account to be a different Apple Account from the one signed in on the phone. So the fix is to make the recovery account belong to someone else — a custodian. You keep using your own Apple ID on the device; only the Screen Time recovery account is theirs.

How to set it up

  1. The custodian creates a new Apple ID on their own device, using an email address only they can read. An alias is enough — a Gmail + address or a Proton alias delivers to their existing inbox but counts as a separate address, so no new mailbox is needed.
  2. They come to you, in person. This part cannot be done remotely or by forwarding an email. On your iPhone, under Settings → Screen Time, they type the Screen Time passcode without showing you, then enter their own Apple ID and password at the recovery prompt.
  3. Confirm before they leave that the restrictions you want are actually in place, because from this point you cannot change them.

Use exactly one account, and understand the failure mode. It is tempting to create several — one per restriction, or spares. Do not. Every additional account is another password and mailbox that has to stay alive for years, and the way this goes wrong is permanent: if the custodian becomes unreachable or the account is lost, you cannot change your own Screen Time settings again, and a full device reset is the only way out. One account, one custodian, and an explicit understanding between you about recovery.

Two practical notes. Your phone number can be a trusted number on more than one Apple Account, but creating several accounts quickly from one number or device can trigger extra verification — making one is unremarkable, making five in an afternoon may not be. And some Apple sign-up flows have handled + addresses inconsistently; if it refuses one, a plain separate address avoids the problem.

Skipping the recovery account entirely is the stricter option: with no Apple Account linked, there is no reset path at all. It is also the more dangerous one, because there is then no way back for anyone, including you. A custodian is the better trade for most people.

7. Review regularly

A strict setup should still be livable. Review it after a week, then monthly. Keep what works, remove what is theatrical, and close any loopholes you actually used.

Next

Would rather not do this yourself? Setup consulting is being built — a configuration designed around your devices and the loopholes you actually use. Register your interest; it takes one short email and there is no commitment.