You can delete every risky app on an iPhone and still lose the same night, because the App Store quietly refills them. A blocked browser gets replaced with a fresh one, a VPN arrives to tunnel past the filter, and switching the Apple Account opens an entirely different download history. The store is not a one-time cleanup, it is a standing door, which is why locking it matters as much as the blocks themselves. The durable answer pairs two things: lock installs and account changes behind a passcode you do not hold, and run a blocker like TKO’T whose system-level coverage means a freshly downloaded app inherits the block anyway, free. Defense-only: this closes the store, it does not teach a way through it.
Why the store is a loophole, not a one-time chore
The relapse logic is simple and patient. Block the browser, and a craving downloads another one. Pin the DNS, and a craving installs a VPN to route around it. The store turns every block into a temporary measure unless the store itself is closed. Worse, the Apple Account is swappable: sign into a different account and you get its apps, its history, a clean slate the filter never met. So “lock the App Store” really means two locks, the install action and the account identity, because either one left open reopens the whole phone.
The two locks
Both live in Screen Time’s content and privacy restrictions, and both are only as strong as who holds the passcode.
Lock installs. Under iTunes & App Store Purchases, set installing apps to Don’t Allow. New downloads stop, which closes the download-a-fresh-browser-or-VPN route in one switch, the same install lock that breaks the delete-and-reinstall cycle.
Lock account changes. Under the Account Changes restriction, set it to Don’t Allow, so the signed-in Apple Account cannot be switched to a different one with its own apps. Without this, the install lock is half a wall: block downloads on this account, and someone just signs into another.
Hold the passcode elsewhere. Both restrictions sit behind the Screen Time passcode, so the entire thing rests on that code being one you do not have. Have someone you trust set it, the single move that turns Screen Time from a reminder into a wall. A passcode you know is a store you can reopen in ten seconds.
Why you still want a system-level blocker underneath
Locking the store is necessary but not sufficient, because not every route runs through a new download. Apps already on the phone, in-app browsers, translated and cached pages all deliver content without installing anything. That is why the store lock is one layer of the full iPhone setup rather than the whole thing. A system-level blocker covers the gap from the other direction: even if an app does get installed, its traffic hits the DNS layer and its content hits the screen layer, so a freshly downloaded browser is just another window that gets closed. Store lock stops the supply; the blocker neutralizes whatever slips through.
Frequently asked questions
How do I lock my Apple Account settings so I can’t switch accounts to download apps?
In Screen Time’s Content & Privacy Restrictions, set Account Changes to Don’t Allow, then set installing apps to Don’t Allow under iTunes & App Store Purchases, and have someone you trust hold the Screen Time passcode. Together those stop both swapping to a different Apple Account and downloading new apps, so the store cannot be reopened without a conversation. TKO’T covers anything already installed at the system level.
How do I stop myself from downloading a new browser or VPN to bypass my blocker?
Lock installs: set installing apps to Don’t Allow in Screen Time, with the passcode held by someone else, so a fresh browser or VPN cannot be downloaded in a weak moment. Pair it with a system-level blocker so that even if an app does arrive, its traffic and content are filtered anyway, which closes the route from both the supply side and the delivery side.
Is locking the App Store enough on its own?
No, it is necessary but partial. Locking installs and account changes closes the download-a-new-app route, but apps already on the phone, in-app browsers, and translated or cached pages deliver content without any new download. Treat the store lock as one layer of a full setup that also includes DNS filtering and screen-level detection for everything that does not run through the store.
Why does switching my Apple Account reopen everything?
Because a different Apple Account brings its own purchase and download history and its own app entitlements, effectively a clean slate the filter never configured. That is why locking installs alone leaves a gap: block downloads on one account and the account can simply be switched. Setting Account Changes to Don’t Allow closes that second door so the identity, not just the action, is pinned.
Can a determined person still get around an App Store lock?
The locks make it slow and witnessed rather than impossible: with the Screen Time passcode held elsewhere, reopening installs or switching accounts needs the person who holds it. A determined user could attempt a full device reset, which is why a system-level blocker that survives more than the store lock matters, and why the goal, as always, is a bypass slower than the urge, not an unbreakable cage.