← Help centre

What is the Lock, and should I use it?

This article is written for the person setting up and managing Scam SafeGuard on someone else's device — usually an adult child looking after a parent's protection.

The Lock (called "Caregiver Lock" in settings) stops the protection settings on someone's device from being switched off without a 4-digit PIN that only you know.

Why this matters

A common scam script goes like this: someone rings, claims to be from a bank or a computer company, and talks the person through turning off their own protection — "your security software is interfering, just go to settings and switch it off." Once that's done, the scam can go ahead unhindered.

The Lock exists specifically to stop that script from working. If protection settings are locked, the person on the phone can talk all they like — nothing on the device will change without the 4-digit PIN, and the person being coached doesn't have it.

What the Lock actually does

• Requires your PIN before any protection setting can be turned down or off.
• Requires your PIN before the protection level can be lowered (for example, from Maximum Protection back to Standard).
• Never requires a PIN to turn something on, or to raise protection to a stronger level — only to weaken it.

The trade-offs — read this before you turn it on

Being honest about what the Lock changes matters more than making it sound simple.

1. While the Lock is on, "I trust this site — don't ask me again" is hidden everywhere — on the warning screen, in the popup, and on the report page — for everyone using the device, including you. There is no PIN prompt for it, and no way to permanently trust a site while the Lock is on.

   If you need to add one, you have to remove the Lock first (which does require your PIN), trust the site, then set the Lock up again with a new PIN. Be aware that while the Lock is off, anyone using the device can change protection settings and trust sites themselves.

2. With the Lock on, there is no option to continue past the red "This site is dangerous" screen. Not "harder to get past" — there is no continue option, for anyone, including you, unless you change the setting first. This is deliberate, not a fault. If a red screen turns out to be wrong, see "A website is blocked and I think that's wrong".
3. If the PIN is forgotten, the only fix is to uninstall and reinstall the extension. There is deliberately no "forgot PIN" reset option — any reset mechanism would itself become something a scammer could try to talk someone through. Write your PIN down somewhere safe. There is no way to recover a forgotten PIN. The only fix is uninstalling and reinstalling.

If you'd like to go ahead, see "How to turn the Lock on" for the exact steps.