How to Lock an Android Tablet to One App (Kiosk Mode Guide)
Turn a company Android tablet into a single-purpose device: what kiosk mode locks down, how to set it up, and the three settings people forget.
Kiosk mode turns a company-owned Android tablet into a single-purpose device. The home screen is replaced, the app you choose opens automatically and stays open, the settings menu is out of reach, and there is no way to browse to anything else. Somebody can use the tablet for the job it exists for and nothing else.
In NounDesk you set this up in kiosk mode, with no app to install on the tablet: a four-step wizard picks single-app or multi-app, the Home button, brightness and stay-awake, settings access and volume lock. This guide covers when to use it and the settings people forget.
It is the most immediately satisfying thing you can do with device management, because the before and after is so obvious. A counter tablet that was slowly filling with games becomes a tablet that shows your ordering app and only your ordering app.
When kiosk is the right answer
Kiosk suits devices that belong to a place rather than a person.
A tablet on a counter taking orders. A screen at reception for sign-in. A scanner in a warehouse. A display showing a schedule. A device in a vehicle running one job app. Shared training tablets that pass between people.
The common thread is that nobody signs in as themselves and nobody needs the device to be general purpose. If one named employee uses a device for varied work, kiosk is the wrong mode and you want a fully managed device with a restricted app list instead.
What kiosk actually locks
Understanding this properly saves you from expecting the wrong things.
The launcher is replaced. There is no home screen full of icons. The device shows your app, or a small menu if you allow more than one.
Navigation is restricted. Home and recent-apps buttons do not take the user out to the system. There is nothing to swipe back to.
Settings are blocked. The user cannot change wifi, add accounts, or reach developer options. You decide whether a few specific settings, like screen brightness or volume, stay available.
The screen can be kept awake. A counter tablet that sleeps every thirty seconds is worse than useless, so kiosk devices are usually configured to stay on while powered.
Other apps do not exist. Only what you have approved is installed, and only the kiosk app is reachable.
Setting one up
The sequence is the same as any company-owned device, with a kiosk policy instead of a standard one.
First, decide the app. Be specific: the exact app, not “the ordering system”. If your provider has a dedicated kiosk or point-of-sale build, use that one.
Second, create a kiosk policy. Choose the app that will run, decide whether to allow more than one, and set the screen behaviour. Decide which physical controls remain available.
Third, enroll the tablet. It needs to be factory reset, then six taps on the welcome screen and scan the QR code, exactly as in our ten-minute setup guide. The device applies the kiosk policy and boots into the app.
Fourth, test it properly before it goes on the counter. Try to get out. Press everything. Reboot it and check it comes back into the app by itself, because a kiosk that needs an administrator after every power cut is not a kiosk.
The three settings people forget
Screen timeout. The single most common complaint about a new kiosk is that it keeps going dark. Set it to stay awake while charging, and make sure it is actually charging.
Automatic restart behaviour. The device will lose power at some point. It must return to the kiosk app on its own, with no taps and no password.
An exit route for you. You need a way in for updates and troubleshooting. Know what yours is before you deploy, and do not write it on a sticker on the back of the tablet.
Multi-app kiosk
You can allow a small set of apps rather than one. A restaurant tablet might need the ordering app and a payment app; a warehouse device might need a scanner and a messaging tool.
The trade-off is real. Every additional app is another surface and another way to end up somewhere unintended. Two or three is fine. Once you are past five, you are building a general purpose device with extra steps, and a fully managed phone with a restricted app list is the more honest configuration.
Where kiosk gets used most
The pattern repeats across very different businesses. Restaurants put order and payment tablets on counters. Clinics use front-desk tablets for check-in, where the privacy argument for locking the device is as strong as the productivity one. Warehouses and delivery operations use scanners that must not become anything else. Schools hand round shared tablets that need to be identical every morning. Security firms deploy guard phones running a single patrol app.
We have industry-specific walkthroughs coming later in this series for several of those.
What to do this week
- Pick the most abused shared device you own. Everybody has one. That is your first kiosk.
- Name the exact app it should run. If you cannot name one app, kiosk is probably not what that device needs.
- Test the power cut. Set it up, then pull the plug and watch what happens when it boots. That single test catches most bad kiosk deployments.
FAQ
Can I lock a phone into one app, not just a tablet?
Yes. Kiosk mode is a device mode, not a form factor. It works on company-owned Android phones running Android 8 or newer, which is common for delivery and patrol devices.
Can the user get out of kiosk mode?
Not through normal use. The launcher is replaced and settings are unavailable. Leaving kiosk requires an administrator action or a factory reset, and a reset keeps the device enrolled in your organisation.
Does kiosk mode work offline?
The device stays in kiosk mode without a connection, because the policy is applied locally. Whether your kiosk app works offline depends on the app.
Can I change the kiosk app later?
Yes. Update the policy and the devices pick it up at their next check-in. You do not need to touch the hardware or re-enroll.
What about software updates on a kiosk device?
Apps update through Managed Google Play as normal. Operating system updates follow your update policy and the manufacturer’s rollout; there is no button that forces an OS update immediately, on any Android device.
A tablet locked to one app stops being something people fiddle with and becomes a tool. That is usually worth more than the security argument.
See how kiosk mode works, or start a free trial and lock down one device.