UK What Android kiosk mode does
Android kiosk mode is a way of locking an Android device so it runs only the app, or apps, chosen by its owner. The home and recent apps buttons stop working, the status bar and notifications are hidden or limited, and the user cannot open settings, install apps or exit to the launcher. When the device restarts, it goes straight back into the approved app.
The aim is a device with one job. A self-service check-in screen, a menu board, a machine HMI or a delivery driver’s tablet should only ever show its own application. Kiosk mode stops users wandering off into other apps, prevents settings being changed by accident or on purpose, and keeps the screen in the state support teams expect.
Android does not have a single setting called kiosk mode. The term covers several features, from a simple user setting to a fully managed lockdown, and the right one depends on how locked down the device must be.
Ways to put Android into kiosk mode
The table compares the main approaches, from the weakest lock to the strongest.
| Method | Set up by | Lock strength | Typical use |
|---|---|---|---|
| Screen pinning (app pinning) | The user, in Settings > Security | Light: a gesture and PIN unpin it | Handing a phone to someone, demos |
| Custom home app (launcher) | A developer or integrator | Medium: needs extra hardening | Simple kiosks without device management |
| Lock task mode, single app | A device policy controller as device owner | Strong: user cannot exit | Self-service kiosks, HMIs, signage |
| Lock task mode, multi-app | MDM / EMM policy | Strong, with an approved app list | Field tablets, shared devices |
| Locked system image | The manufacturer or integrator | Strong: lockdown built into the firmware | Dedicated industrial devices |
Screen pinning has been built into Android since version 5.0 and costs nothing, but it is meant for short, supervised use. For anything left unattended, use lock task mode.
Lock task mode and dedicated devices
Lock task mode is the Android feature behind most commercial kiosks. Google’s Android Enterprise programme calls these locked, single-purpose devices dedicated devices. Only an app that is the device owner, known as a device policy controller (DPC), can allow other apps to enter lock task mode. In practice the DPC is usually the agent of a mobile device management (MDM) or enterprise mobility management (EMM) service.
Device owner status can only be set on a freshly reset device, normally during setup by scanning a QR code, tapping an NFC tag or using zero-touch enrolment. Developers can set it for testing over adb. Once it is in place, the DPC lists the apps allowed to lock, and from Android 9 it can choose which system features stay available, such as the status bar clock, notifications, the power menu or the home button. It can also set the kiosk app as the home screen so the device boots straight into it.
Setting up a kiosk with an MDM
Most organisations run Android kiosks through an MDM so they can manage many devices remotely. A typical setup covers:
-
//
Enrolment. Factory reset the device and enrol it as a fully managed or dedicated device so the MDM becomes device owner.
-
//
Kiosk policy. Pick single-app or multi-app mode, add the approved apps and choose which system buttons and notifications to allow.
-
//
Hardening. Block USB debugging, safe mode boot, factory reset and unknown app sources, and set the screen timeout and lock screen behaviour.
-
//
Updates. Control when app and system updates install, so a kiosk does not restart for an update in the middle of trading hours.
-
//
Recovery. Keep a remote way to exit kiosk mode, reboot the device and push fixes without a site visit.
Choosing hardware for an Android kiosk
Kiosk software can only do so much if the hardware is not suited to running all day. Consumer tablets are built for a few hours of use and a battery that drains, while a kiosk needs to stay on, recover from power cuts and survive the public. Points to check:
-
//
Power behaviour. Panel PCs that power on automatically when mains is restored, and a hardware watchdog, bring a kiosk back without staff.
-
//
Android version and updates. A recent version, such as Android 13 or later, supports current lock task features, and the manufacturer’s board support package decides how long security updates continue.
-
//
Device management support. Check that your MDM supports the device. Some management features depend on Google Mobile Services, and devices running open-source Android without them may need an MDM with specific support.
-
//
Mounting and sealing. VESA or panel mounting, an IP65 front where it may be wiped or splashed, and a touch screen that copes with heavy use.
Quick answers on Android kiosk mode
Android kiosk mode: common questions
How do I put an Android tablet into kiosk mode?
Use screen pinning for a quick lock, or an MDM for a proper one. Screen pinning is under Settings > Security and pins the current app. For an unattended kiosk, enrol the tablet in an MDM and apply a single-app kiosk policy.
Is there a free Android kiosk mode?
Yes, screen pinning. It is built into Android and free, but a user who knows the gesture and PIN can leave it. Several MDMs also offer free tiers for small fleets.
Do I need an MDM for kiosk mode?
For a secure kiosk, usually. Lock task mode needs a device owner app. An MDM provides one, along with remote updates and recovery. A developer can write their own device owner app instead.
How do I exit Android kiosk mode?
It depends on the method. Screen pinning exits with a button or gesture combination, such as holding Back and Overview, followed by the device PIN. A managed kiosk exits through the MDM console or an administrator PIN set in the policy.
Can Android kiosk mode run a website?
Yes. Lock a kiosk browser or a web-view app to a single URL, with navigation outside the allowed site blocked.
Our Android panel PCs include Android 13 models on the MediaTek Genio 510 from 7″ to 23.8″ (7 inch to 23.8 inch), with front IP65 and fully sealed IP67 versions, plus NXP i.MX 8M in-vehicle models, and our Android rugged tablets use MediaTek Genio and Qualcomm QCS6490 processors. For Windows-based kiosks, Windows IoT Enterprise offers equivalent lockdown features. We configure the operating system, power-on behaviour and mounting for each kiosk as standard.