kiosk-mode

Android Kiosk Mode

Kiosk mode is one of the most commonly used features for deploying dedicated Android devices. It allows IT administrators to lock down a device to a single application or a curated set of apps, preventing users from accessing anything outside of what the organization has defined — no home screen, no app drawer, no system navigation unless explicitly allowed.

Applivery provides three distinct kiosk modes for Android, each designed for different use cases and levels of customization.

Requirements: Kiosk mode is only available on Fully Managed devices. See Android management options for more information on enrollment types.

Available Kiosk Modes

Note: The Advanced Launcher is only available on certain billing plans. See Device Management pricing for details.

Single App Kiosk Mode

Single App kiosk mode locks the device to one specific application. Users cannot exit the app, access the home screen, or reach any other part of the device unless the administrator explicitly allows it. This is the go-to mode for point-of-sale terminals, self-service kiosks, digital signage, data collection devices, and any other single-purpose deployment.

How to Configure Single App Kiosk Mode

Single App kiosk mode is configured at the Policy level in Applivery.

1. Go to Device Management > Policies and open or create the policy you want to configure.
2. From the left-hand menu, click Kiosk.
3. Select the Single App option.
4. Choose the app to lock the device to from the dropdown. If no apps are listed, go to the Apps section of the policy and add at least one Force Installed app first.
5. Configure the lockdown behavior options (described below).
6. Save the policy to deploy it to all associated devices.

Single App Lockdown Options

We strongly recommend enabling the Network Escape Hatch in all kiosk modes. Without it, a device that fails to connect to the network at boot — for example because the last known network is no longer available — may become stuck and unable to receive policy updates, especially when booting directly into a locked app.

Preparing Your App for Single App Kiosk Mode

To correctly lock down a custom application in Single App kiosk mode, the app's AndroidManifest.xml must declare the correct intent filters on the activity that should run in kiosk mode.

Add the following intent-filter to the target activity:

<intent-filter>
    <action android:name="android.intent.action.VIEW" />
    <action android:name="android.intent.action.MAIN" />

    <category android:name="android.intent.category.HOME" />
    <category android:name="android.intent.category.DEFAULT" />
</intent-filter>

Important: Declaring android.intent.category.HOME in your app's main activity intent filter may prevent certain kiosk settings — such as system navigation restrictions or status bar control — from being applied correctly on some devices. Test thoroughly on your target hardware before deploying.

Basic Launcher (Multi-App Kiosk Mode)

The Basic Launcher allows administrators to define a list of allowed applications displayed in a locked home screen UI. It is built on Android's native Device Policy Controller (DPC) and provides a solid foundation for multi-app kiosk deployments without requiring additional licensing.

How to Configure the Basic Launcher

Step 1 — Add apps to the policy

1. Inside the policy, go to the Apps section.
2. Click + Add App and add each application you want to make available in the kiosk launcher.

Key rules for app visibility in the Basic Launcher:

• Only apps set to Force Installed will appear in the launcher interface.
• All system apps are hidden by default — if you need a system app visible (e.g. Phone, Camera, Chrome), you must add it explicitly.

Step 2 — Enable the Basic Launcher

1. From the left-hand menu, click Kiosk.
2. Select the Launcher option.
3. Configure the lockdown behavior options (same options as Single App mode — see the table above).
4. Save the policy.

Advanced Launcher (Multi-App Kiosk Mode)

The Advanced Launcher is Applivery's custom-built kiosk launcher that extends Android's native DPC capabilities with additional visual customization, access controls, and display management options. It is the recommended choice for deployments where a polished, branded, or highly controlled user experience is required.

To enable it, go to Kiosk in the policy menu and switch to the Advanced Launcher tab.

Visual and Display Configuration

The Advanced Launcher provides full control over the visual presentation of the kiosk interface:

• Wallpaper — Set a custom background image for the kiosk launcher.
• Icon size — Adjust the size of app icons displayed in the launcher.
• App layout — Organize the arrangement of apps on the screen.
• Folders — Group apps into folders for a cleaner layout.
• Screen always on — Keep the display permanently active, preventing it from sleeping. Useful for digital signage or always-on terminals.

Startup app: By tapping on a specific app in the Advanced Launcher configuration, you can mark it as the startup app. This causes the app to launch automatically the first time it is installed on the device — particularly useful for applications that require an initial setup or onboarding flow to run before anything else.

Settings App Access Control

The Advanced Launcher gives granular control over how — or whether — users can access the device Settings:

• Restrict access entirely — Prevent the Settings app from opening.
• Configure the landing view — Choose which Settings screen opens when the user taps Settings, rather than showing the full Settings menu.
• Password-protect Settings — Require a password to access the Settings app, ensuring that only authorized users (such as technicians or store managers) can make system-level changes on the device.

Header and Footer Customization

The launcher interface supports a customizable header and footer bar, allowing organizations to display contextual information directly on the kiosk screen:

• Custom text — Add a title, instruction, or message in the header or footer.
• Text size — Adjust the size of the displayed text.
• Dynamic variables — Include device-specific information automatically using dynamic variables such as:
  • Device display name
  • User email address
  • Other managed configuration variables

This is particularly useful for shared devices deployed across multiple locations, where displaying the device name or assigned user helps with identification and support.

Display Settings

The Advanced Launcher also exposes device display settings that can be configured and locked through the MDM policy:

Choosing the Right Kiosk Mode