Manage Android Private Space from Hexnode UEM

What is private space on Android?

Private space is a feature on Android devices that enables users to create a secure and isolated environment to manage sensitive apps and data exclusively. It acts as a digital safe within the device, allowing users to keep certain apps and their data separate within a different Android profile.

Key features of private space

1. Separate Environment: Private space creates an isolated environment distinct from the main space. Apps in private space are treated as new installations, with no data shared to/from the main space.
2. Enhanced Security: Users can set up a separate lock for private space, providing an additional layer of authentication.
3. Hidden Applications: Apps and data within Private space are hidden from Recents view, notifications, settings, and other apps when the space is locked.
4. User Content Separation: User-generated or downloaded content, as well as user accounts, remain segregated between private space and the main space.
5. App Independence: Apps in private space function as separate entities, with no access to the data or accounts in the main space.

Setting up private space

1. Open your device’s Settings app.
2. Tap Security & privacy > Private space.

   

3. Authenticate using the device screen lock or set one up if not already configured.
4. Tap Set up and then Got it.

   

5. Optionally, sign in with a different Google Account to enhance data separation.
6. Set a new lock for private space or use the device’s screen lock.

   

7. Confirm the setup by selecting a lock type (e.g., pattern, PIN, or password).
8. Tap Done.

Using private space

Locking and unlocking

1. Swipe up from the bottom of your home screen (or tap the App Drawer icon) to open All Apps.
2. Scroll down and select Private space at the bottom of the list.
3. Tap Private space to access it.
4. To unlock:
   1. Authenticate using your private space lock.
   2. If no specific private space lock was set up, your device’s screen lock will be used as the default.
5. Once you’re finished, tap the lock icon in the top-right corner of the private space screen to lock it.

   

Accessing apps and content

• Apps and content in private space are accessible only when unlocked.
• Locked private space hides all associated apps and data from system UI elements like the launcher, quick search, and Recents view.

Installing apps

• Apps can be installed directly within private space through the Play Store or alternative installers.
• Installed apps in private space are independent from those in the main space.

Managing private space

Hiding and unhiding private space

You can hide private space in the All Apps menu to enhance your privacy.

1. Go to Settings > Security & privacy > Private space.
2. Authenticate using your private space lock.
3. Under the Hide section, select Hide private space.
4. Enable the toggle for Hide Private Space when it’s locked.
5. Private space won’t be hidden immediately. It will be hidden the next time you lock it.

Accessing hidden private space

1. Use the device’s search bar to look for “private space”.
2. Tap Private space from the search results and authenticate to unlock it.

Deleting private space

1. Open Settings > Security & privacy > Private space.
2. Authenticate with the private space lock.
3. Tap Delete private space and confirm.

Why use private space?

Private space is ideal for:

• Hiding sensitive apps and data from prying eyes.
• Securely manage personal files, photos, and documents in a dedicated space.
• Use separate user accounts or app instances to maintain a clear boundary between personal and private activities.

Compatibility with Hexnode UEM

Hexnode UEM supports enrolling and managing devices with private space, but its behavior varies depending on the enrollment type and configuration. Below are the scenarios:

1. Legacy Enrollment

   Private space can be enrolled in Hexnode UEM using the Legacy Enrollment method.

   1. Open the Google Play Store and download the Hexnode UEM app.
   2. Launch the app and enter the server name (e.g., .hexnodemdm.com).
   3. Complete the remaining steps of the enrollment process. For additional guidance, check out our help documentation.

   In this case:

   • Private space operates independently of the main space.
   • Actions and policies applied through Hexnode will affect only the private space, leaving the main space unaffected.
   • Only the apps installed within private space are visible in the Applications subtab in Hexnode UEM console.

   If the Hexnode UEM app is installed outside of private space (on the main space), the behavior is the opposite:

   • Policies and actions applied through Hexnode will affect only the main space, leaving private space unaffected.
   • Apps installed within the main space are the only ones visible in the Applications subtab in the Hexnode UEM console.
2. Android Enterprise as Device Owner

   In this scenario:

   • Private space cannot be set up on devices enrolled in Android Enterprise as Device Owner.
   • Attempting to set up private space results in an error message: “Couldn’t set up private space“.

     

3. Android Enterprise as Work Profile on Company-Owned Device

   In this scenario:

   • Private space can be set up on devices enrolled in Android Enterprise as Work Profile on Company-Owned Device.
   • However, enrolling private space in Hexnode is not supported. The Hexnode app (Hexnode UEM or Hexnode For Work) will crash when opened within private space.
4. Android Enterprise as Profile Owner

   In this case:

   • Private space cannot be set up on devices enrolled in Android Enterprise as Profile Owner.
   • Attempting to set up private space results in an error message: “Can’t add work profile“.

     

Supported Remote Actions for private space

When private space is enrolled in Hexnode UEM via Legacy Enrollment, actions such as Scan Device, Scan Device Location, Lock Device, Change Owner, Install Application, and Remote App Launch are supported. However, not all actions may function as expected and some could experience delays.

Remote View and Remote Control

Remote View is supported in private space and works as expected.

Deleting private space enrolled in Hexnode

Private space can be deleted even when enrolled in Hexnode UEM. Deleting it removes all apps and data within, including the Hexnode UEM app. Once deleted, Hexnode no longer manages the private space.