How to Screenshot the Login Screen, Lock Screen & Recovery Mode on Mac

Why this is harder than a normal screenshot

When your Mac is at the login screen or lock screen, you're not logged into a user session. That means screenshot shortcuts like ⌘ + Shift + 3 don't work — there's no active user session to capture from, and no running apps to process the screenshot. The screencapture command-line tool also isn't available because Terminal requires a logged-in session.

This is a common frustration for IT administrators writing setup guides, developers documenting onboarding flows, and anyone who needs to show what the Mac login experience looks like. Here are the workarounds that actually work.

Method 1: Screen recording before locking

The simplest approach is to start a screen recording before you lock your Mac:

1. Press ⌘ + Shift + 5 to open the screenshot toolbar.
2. Select Record Entire Screen and click Record.
3. Lock your Mac: press ⌃ + ⌘ + Q (or close the lid briefly).
4. The lock screen appears. Wait a moment, then unlock your Mac.
5. Stop the recording by clicking the stop button in the menu bar.
6. Open the recording in QuickTime and use Edit > Split Clip or scrub to the lock screen frame.
7. Take a screenshot of the video at the lock screen frame, or export the frame.

This works because the screen recording continues running in your logged-in session, even while the lock screen is displayed. The recording captures exactly what the display shows, including the lock screen.

Note: On macOS Sonoma and later, the screen recording may show a black frame when the lock screen appears if the system uses a secure screen saver. If this happens, try disabling the screen saver temporarily in System Settings before recording.

Method 2: QuickTime remote recording from another Mac

If you have two Macs, you can record one Mac's screen from the other:

1. Connect both Macs with a USB or USB-C cable.
2. On the second Mac, open QuickTime Player.
3. Go to File > New Movie Recording.
4. Click the dropdown arrow next to the record button and select the first Mac as the camera source.
5. The first Mac's screen now appears in QuickTime on the second Mac.
6. Lock the first Mac and capture the lock screen from QuickTime on the second Mac.

This method captures the actual screen output, so it works at the login screen, FileVault pre-boot screen, and even during macOS installation.

Method 3: Virtual machine

The most reliable way to capture login and lock screen screenshots is to run macOS in a virtual machine:

1. Set up macOS in a VM using UTM (free, open source) or Parallels Desktop.
2. Boot the VM and let it reach the login screen.
3. Take a screenshot of the VM window from your host Mac using ⌘ + Shift + 4.

With a VM, you can capture every macOS screen state: the initial setup assistant, FileVault unlock, login screen, user switching, and lock screen. This is the go-to method for Apple documentation teams and IT departments that need clean, repeatable screenshots of the entire login flow.

On Apple Silicon Macs, UTM uses Apple's Virtualization framework to run macOS VMs natively with near-native performance. You can create a macOS VM in about 15 minutes.

Method 4: SSH and screencapture

If you have SSH access to the Mac (Remote Login enabled in System Settings > General > Sharing), you can capture the login window remotely:

# SSH into the Mac from another computer
ssh username@mac-ip-address

# Capture the current screen to a file
screencapture -x /tmp/loginscreen.png

The -x flag suppresses the screenshot sound. This command captures whatever is currently on the display, even if the Mac is at the login window. The catch: SSH requires that at least one user account is already logged in at the system level (the SSH daemon runs in the user context), so this works for the lock screen but not always for the initial login screen after a fresh reboot.

To retrieve the screenshot:

# From the other computer, copy the file over
scp username@mac-ip-address:/tmp/loginscreen.png ~/Desktop/

Method 5: Apple Remote Desktop

If you manage multiple Macs with Apple Remote Desktop (ARD), you can observe and capture any Mac's screen regardless of login state:

1. Open Apple Remote Desktop on your admin Mac.
2. Select the target Mac in the computer list.
3. Use Interact > Observe to see the target Mac's screen.
4. Take a screenshot of the ARD window showing the login screen.

ARD connects at a system level, so it shows the actual display output including the login window, FileVault screen, and any pre-boot screens (on Intel Macs with NetBoot).

Capturing the FileVault pre-boot screen

If your Mac uses FileVault (full-disk encryption), there's an additional screen before the login window: the FileVault unlock screen where you enter your password to decrypt the disk. This screen runs before macOS fully loads.

You cannot capture this screen from software running on the same Mac because the operating system hasn't booted yet. Your options are:

• Use a second Mac with QuickTime recording via USB (Method 2 above).
• Use a hardware capture device like an Elgato HD60 or similar HDMI capture card. Connect the Mac's display output to the capture device, and record the screen externally.
• Use a virtual machine with FileVault enabled (Method 3 above).
• Take a photo of the screen with a phone or camera. Sometimes the simplest solution is the right one.

Capturing Recovery Mode and macOS installer

Recovery Mode (⌘ + R at boot on Intel, or long-press power button on Apple Silicon) is another pre-boot environment where standard screenshot tools don't work.

Recovery Mode does have a limited version of Terminal available at Utilities > Terminal. However, the screencapture command may not be available in the Recovery environment.

Reliable approaches:

• Hardware HDMI capture — the only method that works for every screen, every time.
• VM with Recovery Mode — boot a macOS VM into Recovery and screenshot the VM window.
• Phone camera — for one-off documentation needs, a well-lit photo cropped to the screen is perfectly acceptable. Use your phone's document scanning feature for a cleaner result.

Quick reference

Tips for clean login screen captures

• Hide user accounts you don't want visible. In System Settings > Users & Groups, you can hide specific user accounts from the login window using Terminal: sudo dscl . create /Users/username IsHidden 1.
• Set a clean wallpaper. The login screen uses the wallpaper of the last logged-in user. Set it to something neutral before capturing.
• Remove the password hint. If you're publishing the screenshot, make sure no password hints or personal account details are visible.
• Use a test account. Create a temporary user account with a generic name for documentation screenshots, then delete it when you're done.

Once you're logged in, capture everything else instantly

Login and lock screen captures are edge cases that require workarounds. But once you're past the login screen, everything else should be fast. LazyScreenshots lets you capture any part of your screen, annotate it with arrows and labels, and share it instantly — no saving to Desktop, no opening Preview, no manual cropping.