LockDown Browser Accessibility Permission on Mac - When Required
What Accessibility permission allows
Apple's Accessibility framework was originally designed for assistive technology - apps like VoiceOver that need to read screen content programmatically. The TCC permission grants the holding app:
- Read every UI element on every window in every application (not just its own).
- Send synthetic keyboard events to any application.
- Send synthetic mouse events to any application.
- Monitor every keystroke globally.
- Intercept system keyboard shortcuts (⌘+Tab, Mission Control, Spotlight).
This is significantly more invasive than Camera or Microphone - it's essentially "remote control plus keylogging" capability.
When LDB requests it
LDB asks for Accessibility only when the institution's Respondus Dashboard configuration enables "Enhanced kiosk enforcement". Most institutions do not enable this - Camera + Microphone + Screen Recording is sufficient for typical proctoring. Enhanced enforcement is more common in:
- High-stakes professional certification exams (NCLEX prep, bar review courses).
- Computer science / programming courses where students often have unusual keyboard shortcuts active.
- Institutions with documented past attempts at evasion via assistive-technology workarounds.
Granting Accessibility for LDB
- System Settings → Privacy & Security → Accessibility.
- Click the (+) plus button.
- Navigate to /Applications and select LockDown Browser.app.
- Authenticate with admin password (Sonoma 14.4+).
- Toggle LockDown Browser on.
- Quit and relaunch LDB.
What if I'm uncomfortable with Accessibility?
You have legitimate options:
- Email your instructor. Most accept that some students will choose alternative arrangements. Common offers: take the exam in person on a university computer, take it without Monitor, or use a different proctoring tool.
- Document your concerns. If your concern is privacy-grounded (vs. attempting to evade legitimate enforcement), put it in writing. Many universities have a process where the dean of students or the registrar mediates between the instructor's integrity requirements and the student's privacy preferences.
- Take the exam on a borrowed Mac. Granting Accessibility on a Mac you only use for the exam window limits the privacy surface to that session.
What LDB cannot do with Accessibility (despite the broad grant)
Accessibility is a capability, not a behavior. LDB's actual use of it during the exam is:
- Detect global keystroke shortcuts that try to switch out of kiosk mode (Cmd-Tab, Mission Control). It logs the attempt.
- Block synthetic events from automation tools (UI Browser, Karabiner, etc.).
- Verify no other Accessibility-using app is active during the exam.
LDB does not use Accessibility to: read your other applications' content, log all your keystrokes outside the exam, or send synthetic events to other apps.
Revoking Accessibility after the exam
System Settings → Privacy & Security → Accessibility → toggle LockDown Browser off. The next exam that requires it will prompt fresh; you can grant or refuse based on your assessment of that specific exam.
Frequently asked questions
Can I take the exam without granting Accessibility?
Only if Enhanced kiosk enforcement is not required by your specific course's Respondus Dashboard config. If the prompt appears, the requirement is set; you cannot bypass it from the Mac side.
Is Accessibility permission permanent?
No - you can revoke it any time via System Settings. The permission is also subject to the same 30-day re-confirmation rules as Screen Recording on Sequoia 15.3+.
Does LDB read my keyboard input outside the exam?
In principle the permission allows it. In practice, LDB's observed behaviour during the exam (per traffic and file-system tracing) is limited to detecting kiosk-mode-escaping keystrokes. Outside the exam window, LDB's process is not running.