A warehouse worker picks up a tablet to scan incoming shipments. Instead of the scanner app, they see YouTube, Gmail, and a half-finished Candy Crush game from the night shift. The tablet is supposed to be a business tool, but without restrictions, it's a shared entertainment device that happens to have a barcode scanner installed.
Kiosk mode solves this by locking a device to one app (or a small set of apps). The user sees only what they need. No home screen, no settings, no distractions. Here's how it works on Android and iOS, and when to use it.
What Is Kiosk Mode?
Kiosk mode is a device lockdown feature that restricts a mobile device to a single application or a curated set of applications. The user can't access the home screen, system settings, notifications, or any app outside the allowed list.
The term comes from physical kiosks: self-service terminals in airports, hotels, and retail stores. But modern kiosk mode extends far beyond public terminals. Warehouses, hospitals, restaurants, construction sites, and schools use kiosk mode to turn tablets and phones into dedicated business tools.
Kiosk mode is configured and enforced through an MDM solution. The MDM pushes the kiosk policy to the device, locks it down, and monitors compliance. If someone tries to exit the kiosk app, the device bounces them right back.
Single-App vs Multi-App Kiosk Mode
Single-app kiosk mode locks the device to exactly one application. The device boots directly into that app. There's no way out without the admin passcode. This is perfect for:
- Point-of-sale terminals (one POS app)
- Digital signage (one display app)
- Self-check-in kiosks (one check-in app)
- Inventory scanners (one scanning app)
Multi-app kiosk mode allows a small set of approved applications, presented in a custom launcher. The user can switch between approved apps but nothing else. Use this when workers need 2-3 tools: a scanner, a messaging app, and a CRM, for example.
Appaloosa supports both modes on Android and iOS. You configure the allowed apps, customize the launcher appearance, and deploy the kiosk profile to device groups from a single console.
Kiosk Mode on Android
Android provides kiosk mode through the Android Enterprise framework, specifically the "dedicated device" mode (also called COSU: Corporate-Owned, Single Use).
When you set up a device as fully managed via zero-touch enrollment or QR code, you can then apply a kiosk policy that:
- Pins one or more apps to the screen
- Hides the navigation bar (back, home, recent apps)
- Disables the notification shade
- Blocks the power button menu (preventing factory reset)
- Auto-launches the kiosk app on boot
Samsung devices offer extra kiosk capabilities through Samsung Knox: custom boot animations, hardware button lockdown, and a more polished kiosk launcher. If your fleet is Samsung-heavy, Knox integration is worth checking during your MDM evaluation.
For devices running Android 9+, the lock task mode API provides system-level lockdown that's extremely hard to bypass. Combined with factory reset protection, your kiosk devices stay locked even after a reboot or attempted reset.
Kiosk Mode on iOS and iPadOS
Apple calls it "Single App Mode" (for one app) or "Autonomous Single App Mode" (ASAM, where the app controls when to lock and unlock itself). Both require the device to be supervised, which means enrollment through Apple Business Manager (ADE).
On a supervised iPad in Single App Mode:
- The device shows only the selected app
- The home button is disabled
- Touch gestures (swipe up, swipe down) are blocked
- The lock screen is bypassed (device goes straight to the app)
For iPads used as reception kiosks or retail displays, you can also enable Guided Access as a lighter alternative. But for enterprise deployments, MDM-managed Single App Mode is more reliable and doesn't require manual setup on each device.
One iOS limitation: multi-app kiosk mode isn't natively supported the way it is on Android. You can use the Allowed Apps restriction to limit which apps appear, but you can't create a custom launcher. Some MDM providers (including Appaloosa) work around this with web-based launchers or app-level restrictions.
Common Kiosk Mode Use Cases
Retail and hospitality. Self-service ordering tablets in restaurants, product catalog browsers in stores, check-in kiosks at hotels. The tablet runs one app and customers interact with it without risk of accessing other functions.
Logistics and warehousing. Barcode scanners, inventory management apps, shipping label printers. Workers grab a device, scan items, put it back. No training needed on how to navigate the device itself.
Healthcare. Patient check-in tablets in waiting rooms, medical record access terminals for nurses, medication tracking devices. HIPAA compliance often requires that these devices can't be used for anything outside the approved workflow.
Education. Exam tablets locked to a testing app, classroom tablets restricted to educational content, library catalog terminals. Schools need to prevent students from accessing social media and games during school hours.
Field operations. Construction site tablets for safety checklists, delivery driver devices running route planning, utility technician tablets for work orders. Kiosk mode keeps the device focused on the job.
Setting Up Kiosk Mode with Appaloosa
The setup takes about 10 minutes per device group:
- Enroll your devices via zero-touch (Android) or ADE (Apple). This gives you full management control, including kiosk capabilities.
- Create a device group for your kiosk devices (e.g., "Warehouse scanners", "Reception tablets").
- Configure the kiosk policy: select single-app or multi-app mode, choose the allowed app(s), set wallpaper and branding, configure Wi-Fi and any other settings.
- Deploy the policy to the group. Devices lock down automatically.
If a device needs maintenance, admins can temporarily exit kiosk mode from the remote support console without physically touching the device.
Try Appaloosa's kiosk mode free for 14 days. Set up your first kiosk device in under 15 minutes.