Overview

The Apple iOS/iPadOS Application Block Policy controls which apps users can open and install on supervised iPhones and iPads. You can:

Block specific apps by bundle ID, so they're hidden and can't be opened
Allow only listed apps, so the device shows and opens only the apps you choose, for kiosk-style setups
Remove the App Store only, so users can't get apps from it but can still install apps in other ways
Turn off app installation entirely, which removes the App Store and stops users from installing or updating apps themselves

A new policy with no changes doesn't block anything.

Important: This policy works only on supervised iPhones and iPads. Unsupervised devices ignore these settings. Devices are supervised when enrolled through Automated Device Enrollment or prepared with Apple Configurator.

Supported platforms and requirements

Item	Details
Platforms	iOS, iPadOS
Minimum OS	iOS 15.0, iPadOS 15.0
Device ownership	Company-owned devices
Supervision	Required
User Enrollment (BYOD)	Not supported. Apple doesn't allow these restrictions on User Enrollment.

This policy doesn't apply to Macs. To block apps on macOS, use the Apple Application Block Policy. To limit the Mac App Store, use the Apple App Store Policy.

Settings reference

Setting	What it does	Default
Blocked App Bundle IDs	Apps with these bundle IDs are hidden from the Home Screen and can't be opened. Add `com.apple.webapp` to block all web clips. Applies to App Store apps, marketplace apps, and apps installed with Apple Configurator or Xcode.	Empty
Allow Only Listed Apps	When on, the device shows and opens only the apps in Allowed App Bundle IDs. Every other app is hidden and can't be opened.	Off
Allowed App Bundle IDs	The apps the device shows and opens while Allow Only Listed Apps is on. Add `com.apple.webapp` to allow web clips. Shown when Allow Only Listed Apps is on.	Empty
Allow App Installation from App Store	When off, the App Store is turned off and its icon is removed. Users can still install and update apps with Apple Configurator or Xcode, or from alternative app marketplaces. Apps that Swif installs still install.	On
Allow App Installation	When off, the App Store is turned off and its icon is removed, and users can't install or update apps at all. This includes App Store apps, marketplace apps, and apps installed with Apple Configurator or Xcode. Apps that Swif installs still install, because MDM commands can override this restriction.	On

Allow Only Listed Apps

Use this to lock a device to a few apps, for example a frontline iPad that only runs your point-of-sale and Teams apps.

Every app not on the list is hidden, including App Store apps, marketplace apps, and apps installed with Apple Configurator or Xcode.
Swif Mobile is always allowed. Swif adds Swif Mobile (com.swif.mobile) to the list for you, so Swif keeps working on the device.
Web clips are hidden unless the list includes com.apple.webapp.
Check which Apple apps users need. Apple's built-in apps are apps too. Add any your users rely on, such as Settings or Camera, and test on a pilot device before a wider rollout.
Blocked apps stay blocked. On iOS and iPadOS 27 and later, an app in both lists stays blocked.

Test before you roll out Allow Only Listed Apps. A missing bundle ID hides that app on every assigned device. Start with a small pilot group.

Choosing between the two installation settings

Goal	Turn off
Remove the App Store, but still allow apps from Configurator, Xcode, or alternative marketplaces	Allow App Installation from App Store
Stop users from installing or updating any apps themselves	Allow App Installation

Allow App Installation covers everything Allow App Installation from App Store does, and more. If it's off, you don't need to turn off the App Store setting as well.

What blocking an app does

Blocked apps stay installed. They're hidden and can't be opened, but they aren't deleted. They come back when you remove them from the list.
Blocking a system app can affect other features. For example, blocking the App Store app can stop users from accepting the terms for user-based Volume Purchase Program (VPP) apps.
Removing the App Store also stops App Store updates. With either installation setting off, users can't update App Store apps themselves. Keep apps current through Swif.

Finding bundle IDs

Each app has a unique bundle ID. Some common ones:

App	Bundle ID
Safari	`com.apple.mobilesafari`
App Store	`com.apple.AppStore`
Messages	`com.apple.MobileSMS`
FaceTime	`com.apple.facetime`
YouTube	`com.google.ios.youtube`
Instagram	`com.burbn.instagram`
TikTok	`com.zhiliaoapp.musically`
All web clips	`com.apple.webapp`

For other Apple apps, see Apple's bundle IDs for iPhone and iPad apps. For third-party apps, ask the developer or look up the app's bundle ID before you add it. Bundle IDs must match exactly.

About iOS and iPadOS 27

In iOS and iPadOS 27, Apple deprecated the restrictions behind Blocked App Bundle IDs and Allow Only Listed Apps, in favor of declarative app settings. Both still work.

On devices running iOS and iPadOS 27 or later, Swif also sends your lists as declarative app settings:

Setting	Sent on iOS and iPadOS 27 as
Blocked App Bundle IDs	Denied Apps
Allowed App Bundle IDs	Allowed Apps

You don't need to change anything. Swif sends both, so the policy works on every supported version.

Before you start

Check that devices are supervised.
Collect the bundle IDs of the apps you want to block or allow. For Allow Only Listed Apps, include every app users need, including Apple apps.
Plan how users will get apps. If you turn off either installation setting, deploy every needed app through Swif.
Check for VPP dependencies before blocking the App Store.

Create the policy

In Swif, go to Device Management > Policies, then select Create new policy > Configure a Policy.
Select Apple iOS/iPadOS Application Block Policy.
Enter a clear name, such as iPhone – Block Social Apps.
Add bundle IDs to Blocked App Bundle IDs, one per entry. Or, turn on Allow Only Listed Apps, and add the allowed apps to Allowed App Bundle IDs.
Set Allow App Installation from App Store and Allow App Installation.
Save the policy.
Assign it to a device group of supervised iPhones and iPads.
Test on a few devices before a wider rollout.

Example configurations

Example 1: Block social media on company iPhones

Setting	Value
Blocked App Bundle IDs	`com.burbn.instagram`, `com.zhiliaoapp.musically`, `com.google.ios.youtube`
Allow App Installation	On

Users can still install other apps, but the listed apps are hidden and can't be opened.

Example 2: Locked-down frontline iPads

Setting	Value
Blocked App Bundle IDs	`com.apple.webapp`
Allow App Installation	Off

The App Store is removed, users can't install apps, and web clips are blocked. Swif deploys and updates all required apps.

Example 3: Single-purpose kiosk iPads

Setting	Value
Allow Only Listed Apps	On
Allowed App Bundle IDs	Your point-of-sale app's bundle ID, `com.microsoft.skype.teams`
Allow App Installation	Off

Only the point-of-sale app, Microsoft Teams, and Swif Mobile appear. Users can't install other apps.

Example 4: Developer test iPads

Setting	Value
Blocked App Bundle IDs	Empty
Allow App Installation from App Store	Off
Allow App Installation	On

The App Store is removed, but developers can still install test builds with Xcode or Apple Configurator.

Verify the policy

On the iPhone or iPad:

Go to Settings > General > VPN & Device Management, open the Swif profile, and confirm that it lists Restrictions.
Check that blocked apps no longer appear on the Home Screen or in the App Library.
If Allow Only Listed Apps is on, confirm that only the listed apps and Swif Mobile appear.
If either installation setting is off, confirm that the App Store icon is gone.
Deploy a test app from Swif and confirm that it still installs.

In Swif, open the device and confirm that the policy shows as applied.

Troubleshooting

An app disappeared after I turned on Allow Only Listed Apps

It isn't in Allowed App Bundle IDs. Add its bundle ID, including Apple apps such as Settings or Camera, if users need them.

Web clips disappeared

Allow Only Listed Apps is on, and the list doesn't include com.apple.webapp. Add it to allow web clips.

An app in Allowed App Bundle IDs is still hidden

On iOS and iPadOS 27 and later, an app that's also in Blocked App Bundle IDs stays blocked. Remove it from the blocked list.

Blocked apps still open

Check that the device is supervised.
Check that the bundle ID is exact.
Check that the device runs iOS/iPadOS 15 or later.

Users can still install apps

Check that the device is supervised.
If only Allow App Installation from App Store is off, this is expected. Users can still install apps with Configurator, Xcode, or alternative marketplaces. Turn off Allow App Installation to block those too.

Apps deployed by Swif don't install

Check that the app is assigned to the device in Swif.
Check that it isn't on Blocked App Bundle IDs.

Users can't accept VPP terms

The App Store is blocked. Allow it temporarily so users can accept, or assign VPP apps to devices instead of users.

Apps aren't updating

With either installation setting off, users can't update App Store apps. Update them through Swif.

Nothing applies on a personal device

User Enrollment doesn't support these restrictions.

Related resources

Swif

Apple