---
title: "Unlock a Mac with Recovery Lock Passcode"
canonical: "https://support.meissa.net/space/CD/2352119815/Unlock%20a%20Mac%20with%20Recovery%20Lock%20Passcode"
format: markdown
---
> ℹ️ Accessing the recovery volume is not necessary or recommended to reset or restore a Mac. Please see the document below for guidance on how to quickly reset or restore a Mac.
> ℹ️ 
> ℹ️ [https://meissa.atlassian.net/wiki/spaces/CD/pages/2139553793](https://meissa.atlassian.net/wiki/spaces/CD/pages/2139553793)

The recovery volume on corporate macOS devices is typically restricted to prevent user or third party tampering with important system files and configurations. It also prevents software from loading unwanted kernel extensions.

On occasion a Mac may boot to recovery and become stuck. This could be caused by any of the following:

- Software that is attempting to load a Kernel Extension. Loading kernel extensions requires lowering the Security Policy of a Mac which can only be done from the Recovery Volume.
- A failed macOS update
- Startup disk issues
- Firmware corruption

In most cases you should be able to reboot out of Recovery Lock by holding the power button and restarting the device. If this fails, try unlocking the disk with the Recovery Lock passcode. See below for more information.

## Why is Recovery locked?

Recovery Lock is designed to prevent unauthorized access to the macOS recovery environment. It safeguards the system by protecting:

- The integrity of the macOS recovery volume
- Against the disabling of System Integrity Protection (SIP), even by administrator users
- Reinstallation of macOS without proper authorization
- Removal of an organization’s MDM enrollment and profiles
- Installation of unmonitored kernel extensions that bypass security tools

## Getting out of Recovery Lock

If a system has unexpectedly boot to recovery it may need to enter recovery in order to validate the startup disk. This requires entering the Recovery Lock passcode. 

## If You Don’t Have A Recovery Lock Passcode

Use Apple Configurator to Revive the Mac stuck in a recovery lock boot. A revive is not data destructive (unlike Restore which is data destructive). You can revive a Mac 

1. Connect

## Retrieving Recovery Lock Passcode with Slack

Simply open Slack and enter recoverylock: followed by the serial number of the device. Example:

```
recoverylock:Q7B3D9X6KF
```

Jamf Pro will respond with a request similar to the following:

![image](media://7fe3a3fc-f319-4b10-86e7-69fc591323f4)

## Retrieving Recovery Lock Passcode with Jamf Pro

In most cases a reboot will resolve the issue. If the user cannot boot to the normal macOS volume the Recovery Lock passcode can be accessed in Jamf Pro by:

|  |  |
| --- | --- |
| 1. Viewing the **Inventory Record** for the macOS device.
2. Select **Security**
3. Select **Show Password** | ![image](media://530781fc-6a7c-4fe5-bc97-c743cd911027) |

## Additional Information

- Apple - [Change security settings on the startup disk of a Mac with Apple silicon](https://support.apple.com/guide/mac-help/change-security-settings-startup-disk-a-mac-mchl768f7291/mac)
- Apple - [Use macOS Recovery on a Mac with Apple silicon](https://support.apple.com/guide/mac-help/macos-recovery-a-mac-apple-silicon-mchl82829c17/mac)