LockDown Browser Accessibility Permission on Mac - When Required

Accessibility permission is the most powerful TCC grant on macOS - it lets the holding app monitor every keystroke, click, and intercept system shortcuts. LDB requests it only when your university's Respondus Dashboard explicitly enables enhanced kiosk mode. Below: what Accessibility actually grants, why some institutions request it, and what to do if you're uncomfortable.

What Accessibility permission allows

Apple's Accessibility framework was originally designed for assistive technology - apps like VoiceOver that need to read screen content programmatically. The TCC permission grants the holding app:

This is significantly more invasive than Camera or Microphone - it's essentially "remote control plus keylogging" capability.

When LDB requests it

LDB asks for Accessibility only when the institution's Respondus Dashboard configuration enables "Enhanced kiosk enforcement". Most institutions do not enable this - Camera + Microphone + Screen Recording is sufficient for typical proctoring. Enhanced enforcement is more common in:

Granting Accessibility for LDB

  1. System Settings → Privacy & Security → Accessibility.
  2. Click the (+) plus button.
  3. Navigate to /Applications and select LockDown Browser.app.
  4. Authenticate with admin password (Sonoma 14.4+).
  5. Toggle LockDown Browser on.
  6. Quit and relaunch LDB.

What if I'm uncomfortable with Accessibility?

You have legitimate options:

  1. Email your instructor. Most accept that some students will choose alternative arrangements. Common offers: take the exam in person on a university computer, take it without Monitor, or use a different proctoring tool.
  2. Document your concerns. If your concern is privacy-grounded (vs. attempting to evade legitimate enforcement), put it in writing. Many universities have a process where the dean of students or the registrar mediates between the instructor's integrity requirements and the student's privacy preferences.
  3. Take the exam on a borrowed Mac. Granting Accessibility on a Mac you only use for the exam window limits the privacy surface to that session.

What LDB cannot do with Accessibility (despite the broad grant)

Accessibility is a capability, not a behavior. LDB's actual use of it during the exam is:

LDB does not use Accessibility to: read your other applications' content, log all your keystrokes outside the exam, or send synthetic events to other apps.

Revoking Accessibility after the exam

System Settings → Privacy & Security → Accessibility → toggle LockDown Browser off. The next exam that requires it will prompt fresh; you can grant or refuse based on your assessment of that specific exam.

Frequently asked questions

Can I take the exam without granting Accessibility?

Only if Enhanced kiosk enforcement is not required by your specific course's Respondus Dashboard config. If the prompt appears, the requirement is set; you cannot bypass it from the Mac side.

Is Accessibility permission permanent?

No - you can revoke it any time via System Settings. The permission is also subject to the same 30-day re-confirmation rules as Screen Recording on Sequoia 15.3+.

Does LDB read my keyboard input outside the exam?

In principle the permission allows it. In practice, LDB's observed behaviour during the exam (per traffic and file-system tracing) is limited to detecting kiosk-mode-escaping keystrokes. Outside the exam window, LDB's process is not running.