Get fresh insights, pro tips, and thought starters–only the best of posts for you.
The quickest way to enable iPad kiosk mode is via Apple’s built-in Guided Access. Go to Settings > Accessibility > Guided Access and toggle it on. Open your target app and triple-click the Side button. This locks the screen immediately. However, businesses should use a Unified Endpoint Management solution instead. It allows you to enforce lock settings remotely across many devices.
Guided Access works best for temporary situations, like locking an iPad for a child or a quick, one-off presentation.
Guided Access is an accessibility feature, not an enterprise security control. Apple officially requires the Guided Access passcode, Face ID, or Touch ID to end the session. IT admins must physically touch every device to enable it, which is impossible for large fleets. You also cannot update the app or change settings remotely without physically unlocking the device first.
For a centrally managed lock, administrators can remotely associate a Hexnode iOS kiosk policy with supervised devices to configure Single App Mode.
Hexnode Pro Tip: iOS kiosk mode requires a supervised device. In Single App Mode, the device remains restricted to the configured app, including after a reboot, subject to device, app, network, and policy conditions.
Single App Kiosk: Locks the iPad to one application, perfect for POS terminals.
Multi-App Kiosk: Allows access to a specific set of apps while hiding the rest, great for employee-facing devices.
Web App Kiosk: Restricts the iPad to approved web apps via Safari or Hexnode Browser Lite, where admins can allowlist permitted external URLs.
Autonomous Single App Mode: An app locks itself for a specific task (like an exam) and releases when finished.
Guided Access provides a locally configured single-app experience, while Hexnode UEM enables administrators to centrally configure and manage Single App Kiosk deployments on supervised iPads.
Guided Access is designed for temporary, local device restriction rather than enterprise security. It requires the configured passcode, Face ID, or Touch ID to exit under normal operation, which is why organizations typically use centrally managed kiosk solutions.
UEM-enforced Single App Mode requires a supervised iPad. Administrators can configure the device so users cannot leave the designated app, while hardware button behavior depends on the applied restrictions.
Yes. Hexnode Web App Kiosk can provision approved web apps through Safari or restrict the device to a single web app using Hexnode Browser Lite. With Hexnode Browser Lite, administrators can allowlist required external URLs while blocking access to other websites.