Apple Device Support cheat sheet

Recovery mode on Apple silicon: hold the power button until "Loading startup options" appears; on Intel, hold Command-R at startup.

Safe mode on Apple silicon: hold power button, select a startup disk, then hold Shift while clicking "Continue in Safe Mode"; on Intel, hold Shift at startup.

NVRAM reset applies only to Intel Macs (Option-Command-P-R at startup); Apple silicon Macs do not require it.

SMC reset applies only to Intel Macs; Apple silicon Macs handle equivalent functions in hardware and have no SMC reset procedure.

Startup key combos: T = Target Disk Mode, N = NetBoot, D = Apple Diagnostics, Option = startup manager, Command-R = Recovery.

FileVault full-disk encryption protects the startup volume; recovery key escrow options include Apple ID, institutional key, or a displayed key.

The Console app and "log show" in Terminal read unified logging; "log collect" gathers a sysdiagnose-style archive.

System Settings > General > Sharing controls Remote Login (SSH), Screen Sharing, and File Sharing; each service is toggled independently.

Migration Assistant moves user accounts, apps, and settings over Thunderbolt, Ethernet, or Wi-Fi, and requires the source Mac in Target Disk Mode or on the same network.

DFU mode requires a computer with Finder (macOS Catalina or later) or iTunes (Windows); Recovery mode restores via a simpler button sequence without a full firmware reload.

Force restart differs by model: on Face ID iPhones, press volume up, volume down, then hold the side button until the Apple logo appears.

Guided Access (Settings > Accessibility) locks the device to a single app and is enabled by triple-clicking the side or home button.

Supervised devices can enforce restrictions, defer software updates, and use MDM enrollment via Apple Business Manager or Apple School Manager.

iCloud Backup occurs automatically when the device is on Wi-Fi, connected to power, and locked; manual backup is available in Settings > [name] > iCloud > iCloud Backup.

Activation Lock ties the device to the owner's Apple ID and persists through erase; it is removed by signing out of iCloud or via MDM clear-activation-lock.

App Store and app updates require an Apple ID; enterprise apps can be distributed via MDM, Apple Business Manager custom apps, or TestFlight.

Screen Time restrictions (Settings > Screen Time > Content & Privacy) can limit app installs, in-app purchases, and web content independently of MDM.

Apple silicon Macs use unified memory shared between CPU and GPU; memory is not user-upgradeable after purchase.

Thunderbolt 3 and 4 use USB-C connectors; Thunderbolt 4 requires minimum 32 Gbps and supports up to two 4K displays or one 8K display.

MagSafe 3 on Mac laptops charges via a magnetic connector; USB-C charging also works on the same ports.

Apple Diagnostics (hold D at startup on Intel, or via Startup Options on Apple silicon) returns reference codes for hardware faults.

Battery health in System Settings reports Maximum Capacity and Cycle Count; Apple considers a battery consumed at 80% capacity under normal conditions.

Handoff and Continuity require Bluetooth and Wi-Fi enabled on both devices and the same Apple ID signed in with two-factor authentication.

Peripherals pairing: Bluetooth accessories pair via System Settings > Bluetooth; a Magic Keyboard or Mouse pairs automatically when connected by Lightning or USB-C cable.

Apple Pencil compatibility is model-specific: Pencil 1 works with iPad models using Lightning, Pencil 2 with magnetic-charging iPad models, and Pencil Pro with select newer iPads.

Private Wi-Fi Address (MAC randomization) is on by default for new networks in iOS, iPadOS, and macOS; it can be set to Fixed, Rotating, or Off per network.

iCloud Private Relay requires an iCloud+ subscription and encrypts DNS and web traffic in Safari; it is not a VPN and does not cover all app traffic.

Lockdown Mode reduces attack surface by limiting message attachments, web technologies, and wired connections; it is intended for high-risk users.

802.1X enterprise Wi-Fi authentication uses a RADIUS server; configuration profiles can distribute the required certificates and network settings.

Two-factor authentication for Apple ID uses a trusted device or phone number; a recovery key or account recovery contact provides additional recovery paths.

Activation Lock and Find My require "Find My [device]" enabled; Lost Mode can lock and locate a device and display a contact message.

Firewall settings in System Settings > Network > Firewall control incoming connections; Stealth Mode blocks unsolicited probe responses.

DNS proxy and content filter settings can be enforced via MDM; manual DNS is set in System Settings > Network > [interface] > Details > DNS.

VPN configurations on Apple devices can be added manually or via MDM; per-app VPN requires a managed configuration profile.