How to check Activation Lock status on a Mac#

Three ways to read Activation Lock status on a Mac you physically have: the System Information field in the GUI, system_profiler on the command line, and a live boot to the Setup Assistant with Wi-Fi connected. Only the third method actually authenticates against Apple's servers, which is why it is the gold standard for a Mac you are about to buy. The first two read local state cached by macOS, and the System Information field has been removed or hidden on some recent Apple silicon releases.

The right test depends on what you are doing. For your own Mac, the in-OS check is fine. For a used Mac at the point of purchase, the live boot is the only test that closes the gap between what the local OS reports and what Apple's activation servers actually have on file.

If you want a free, signed report of a Mac's Activation Lock state, Find My Mac status, iCloud account binding, and MDM enrollment, the Macfax Activation Lock check covers it.

Method 1: the System Information GUI#

The fastest in-OS check. Hold Option while opening the Apple menu (the "About This Mac" entry changes to "System Information" when you hold Option), open System Information, and look under Hardware. The field reads "Activation Lock Status: Enabled" or "Activation Lock Status: Disabled."

This is the path most users find first. It is convenient and familiar. But it has two caveats.

The first caveat: the field reads local state cached by macOS, not Apple's authoritative server-side state. The lock state actually lives on Apple's activation servers, keyed to the device's hardware identity. When macOS displays "Disabled" in this field, it is reporting what the last sync with Apple's servers told it. If the Mac has been offline for a long stretch, or if the install was done in a way that bypasses the activation check, the local value can lag the server value.

The second caveat: there are reports that the Activation Lock Status field has been removed or hidden on Apple silicon in some recent macOS versions. If you cannot find the field under Hardware, do not treat its absence as evidence of "Disabled." It may simply not be displayed in your build of macOS. The deeper reference for the lock and its server-side architecture is in Activation Lock on Mac: the complete guide.

The field is a strong signal where it is exposed, but not absolute proof.

Method 2: the command line#

The cleanest scriptable read:

system_profiler SPHardwareDataType

Returns Activation Lock Status alongside model, model identifier, chip, memory, serial number, and Hardware UUID. The output is plain text, grep-friendly:

$ system_profiler SPHardwareDataType | grep "Activation Lock"
      Activation Lock Status: Disabled

This is the cleanest single command for scripting checks across a fleet of Macs. A refurbisher running an intake queue can ssh into each Mac and pipe the result into a CSV. A homelab admin can do the same across a cluster.

The same caveat applies as in Method 1: this reads local state, not server state. The field can be missing on recent Apple silicon, in which case the command silently omits the line. A script that depends on this output should treat a missing field as "unknown," not "disabled."

Method 3: live boot to Setup Assistant#

The gold standard. The only method that actually authenticates against Apple's activation servers.

The sequence:

1. Sign out of iCloud (System Settings → [your name] → Sign Out), entering the Apple Account password. This part is only relevant if you are the owner; for a Mac you are checking before purchase, watch the seller do this.
2. Run Erase All Content and Settings (System Settings → General → Transfer or Reset → Erase All Content and Settings). Authenticate with the admin password and the Apple Account password. The Erase Assistant signs the user out of iCloud, turns off Find My and Activation Lock, destroys the per-device cryptographic keys, and restarts to the "Hello" Setup Assistant.
3. Watch the Mac restart all the way to the multilingual "Hello" Setup Assistant.
4. Connect to Wi-Fi during Setup Assistant. Your hotspot, the seller's network, or any other connection. The Mac contacts Apple's activation servers.
5. Observe what happens next. If Setup Assistant proceeds to Region → Keyboard → Wi-Fi → Data and Privacy with no Activation Lock screen and no Remote Management screen, the Mac is genuinely clear. If it halts at the "Activate Mac" screen, the Mac is bound to a previous owner's account.

This is the buyer-side verification in every reliable used-Mac purchase procedure for a reason. The full pre-purchase context is in the buyer-side Activation Lock verification guide and the 90-second buyer-stage version is in the 90-second Activation Lock check.

Why the live boot is the only test that closes the gap#

The first two methods can return "Disabled" on a Mac whose server-side record says otherwise. The classic case is the "pawn shop pitfall": a Mac appears fully cleared because the seller reinstalled macOS offline, or otherwise bypassed the activation check during setup. The local OS boots and logs in normally. The Activation Lock Status field reads "Disabled." But the hardware ID is still registered to the previous owner. If that owner later marks the Mac lost from iCloud.com/find, the Mac receives the command over the Find My network and locks instantly, leaving the buyer with a bricked machine.

The live boot to Setup Assistant catches this case because Wi-Fi during Setup Assistant forces the activation check against Apple's servers. The local state of the Mac is irrelevant to the test; only what Apple's servers say about the hardware identity matters. If Apple's servers say "this hardware is still bound to a Find My account," Setup Assistant halts at the Activation Lock screen, regardless of what the local OS reported a minute earlier.

The same gap explains why a static screenshot of "Activation Lock Status: Disabled" is not proof. The screenshot was taken at a moment that may not represent the Mac's actual server-side state, and even an honest screenshot can be undone by the seller turning Find My back on before shipment. The catalog of recurring "proof of unlock" forgeries is in Activation Lock screenshots and forged Mac proof.

Edge cases#

A few situations produce confusing output and deserve explicit handling.

Field missing on recent Apple silicon. As noted above, the Activation Lock Status field has been removed or hidden in some recent macOS versions on Apple silicon. The field's absence is not evidence the lock is off; it is evidence the OS is not displaying the field. Rely on the live boot instead.

Activation Lock Status shows "Enabled" on a Mac you legitimately own. This is the normal state for a Mac with Find My Mac on and your own Apple Account signed in. The field reports the lock is armed; the credential you hold is what makes the lock irrelevant to you. To clear the field for a sale, run EACS or sign out of iCloud through System Settings.

Mac stuck in "Activation in progress" during Setup Assistant. Sometimes the Wi-Fi network the Mac is on cannot reach Apple's activation servers (corporate proxy, captive portal, slow DNS). Switch to a known-good network (cellular hotspot is a clean test) and try again. The activation check times out fairly quickly if it cannot contact the server.

Two Activation Lock fields appearing in System Information. Rare, but possible if a Mac has multiple macOS installs across APFS volumes. Each volume can report state independently. The authoritative answer is the live boot.

What you can read remotely#

Apple retired its standalone serial-number Activation Lock status page in early 2017. checkcoverage.apple.com still exists but does not report Activation Lock state for Macs; it shows warranty and AppleCare coverage. As of 2026 there is no official Apple web tool that lets a stranger verify a Mac's lock state by serial number. The full story is in how to check Activation Lock by serial number and the related history is in the complete guide to Activation Lock on Mac.

Third-party "iCloud Activation Lock check by IMEI/serial" sites should be treated as commercial and advisory at best. Many return guesses, and many are upsells into "removal services" that do not work. The mechanics are in why iCloud unlock services do not work on Mac.

What this means for the reader#

For your own Mac, the System Information GUI or system_profiler is fine. You know the lock state because you set it; the in-OS check confirms what you expected.

For a used Mac at the point of purchase, the live boot to Setup Assistant is the only test that authenticates against Apple's servers, which is the only authoritative answer. The full buyer-side verification sequence in how to verify Activation Lock is off before a used-Mac purchase wraps the live boot in the rest of the safety procedure (serial check at checkcoverage.apple.com, watch the EACS, pay with chargeback-capable methods). Skipping the live boot in favor of a screenshot or a remote video call is the path that produces the "I bought a locked Mac" posts on every Apple forum.

For a free signed report covering Activation Lock, Find My Mac, iCloud account binding, and MDM enrollment in one check, the Macfax Activation Lock check is the easier alternative.