Skip to main content

Glossary

Kiosk mode

Kiosk mode locks a device to a single app or a small set of approved apps, hiding the rest of the operating system. The user can't leave the app, change settings or install anything. It's the standard configuration for shared tablets, digital signage, point-of-sale terminals and dedicated field devices.

How it works

Each platform has its own primitive. Android uses lock task mode, available since Android 5.0 and formalized as the "dedicated device" setup in Android Enterprise: the MDM pins one or more apps and disables the home button, notifications and the status bar. iOS and iPadOS use Single App Mode, which requires a supervised device, or a restricted home screen layout when several apps are needed. Windows calls it Assigned Access.

A multi-app kiosk typically replaces the launcher with a custom one showing only approved icons. Settings like Wi-Fi or brightness can be exposed selectively.

Exiting the kiosk requires an admin action: a PIN, an MDM command or a specific gesture defined in the policy.

Why it matters for a fleet

Kiosk mode removes the two biggest sources of helpdesk tickets on shared devices: users changing things and users installing things. A retail tablet locked to the catalog app doesn't end up on YouTube during a shift.

It's also a security boundary. A device that runs one app has a small attack surface, and a customer-facing screen can't be used to browse the corporate network.

The trade-off is flexibility. When the field app needs a companion (a scanner utility, a PDF viewer), you'll move from single-app to multi-app kiosk, and each addition should be deliberate. Also plan for updates: the pinned app still needs to receive new versions, ideally silently during off hours.

Battery and screen timeout settings matter more than usual. A signage tablet that sleeps after 30 seconds is a broken sign.

How Appaloosa handles it

Appaloosa configures single-app and multi-app kiosk mode on Android and on supervised iOS and iPadOS devices, from the same MDM console used for enrollment and security policies. Approved apps come from the enterprise app store, so the kiosk app itself updates silently, and remote support through TeamViewer lets an admin see the screen when a device is stuck. Kiosk devices are typically enrolled via zero-touch so a reset returns them to the locked state.

Explore

See the full platform

Enrollment, apps, security, remote support: all in one place.

Explore Appaloosa →

Ready to try Appaloosa? Start free

Frequently asked questions

Can a user exit kiosk mode?
Not without authorization. Exiting requires an admin PIN entered on the device or a command from the MDM console. Even a reboot brings the device back into the pinned app. On Android, the recent apps, home and back buttons are disabled while lock task mode is active.
Does kiosk mode work on iPhones and iPads?
Yes, provided the device is supervised, which means it was enrolled through Apple Business Manager or Apple Configurator. Single App Mode locks to one app; for several apps, a restricted home screen layout with disabled Settings and App Store gives a similar result.
How do I update the app running in kiosk mode?
Through the MDM's app management. On Android, managed Google Play updates the app silently in the background; the same applies to VPP apps on supervised iOS devices. Schedule updates outside operating hours to avoid interrupting a shift, and test the new version on one device first.