MDM Kiosk Mode. Lock Devices to Single-App or Multi-App Mode

MDM kiosk mode locks a device to a single application or a curated set of approved applications - on Android (COSU), iOS (Single App Mode), or Windows (Assigned Access). Bento MDM configures and manages kiosk devices across all three platforms from one console.

Trusted by

Why Businesses Choose Bento Kiosk Software Solutions

Cross-Platform Kiosk Modes

Manage iOS, Android, and Windows kiosks from one console.

Scalable Rollouts

Configure thousands of devices remotely with zero-touch workflows.

Simple Admin Experience

Non-technical managers can enforce kiosk policies quickly.

Affordable at Scale

Starts at just €1/device with volume pricing for enterprise kiosk deployments.

100+
customers
1,000,000+
managed devices
20+
years of experience

MDM Kiosk Mode by Platform

Standardize kiosk experiences across Apple, Android, and Windows devices to reduce downtime and IT tickets.

MDM Apple Kiosk Mode

Lock iPads and iPhones into single-app or multi-app kiosk for retail, education, or healthcare.

MDM Android Kiosk Mode

Restrict Android tablets and rugged devices to business-critical apps with status bar and hardware button controls disabled.

Windows Kiosk Software

Configure Windows tablets and PCs for single-use or digital signage with ease.

Multi-App Kiosk Configurations

Allow a limited set of apps for frontline workflows and hybrid tasks.

Custom Branding & UX

Display your logo, wallpapers, and kiosk screens for a professional user experience.

Remote Kiosk Actions

Push updates, reboot, or exit kiosk remotely without physical access.

Ready to simplify enterprise mobility management?

Replace scattered tools with policy automation, remote fixes, and audit-ready evidence, without extra headcount.

Ensamble of devices running Bento MDM

Core Features of Bento MDM Kiosk Mode

Control kiosk fleets at scale with centralized MDM policies, real-time visibility, and automation.

Single-App Mode

Lock devices into one dedicated app for POS, surveys, or training.

Multi-App Mode

Limit access to only pre-approved apps for flexible kiosk workflows.

Web Kiosk Mode

Lock devices into a single website or web app for secure browsing.

Content & App Whitelisting

Restrict access to only business-approved resources.

Custom Branding

Set wallpapers, company logos, and kiosk layouts for a consistent look.

Remote Monitoring & Support

Track kiosk uptime, push updates, and resolve issues without site visits.

Compliance Dashboards

Real-time reporting on device health, usage, and policy adherence.

Exit & Recovery Controls

Authorized users can exit kiosk securely with PIN or QR code.

Hear from Customers of Bento MDM Kiosk Mode

"With Bento MDM and FSM, we efficiently manage over 700 devices, automate workflows, and improve communication between field teams."

5 stars

“Our collaboration with Bento on migrating over 2,000 DPD devices was exceptional. Their openness, flexibility, and constant support stood out throughout the project. Their quick adaptation to challenges and solution-oriented approach made all the difference, a truly reliable and professional partner.”

5 stars

"Bento Field Service Management and Mobile Device Management helped us streamline field interventions, secure mobile devices, and increase operational transparency."

5 stars

Security at the Core of MDM Kiosk Mode

Harden kiosk devices against misuse, tampering, or data leaks.

Certificate-Based Authentication

Assign per-device PKI certificates to enable trusted access.

Disk Encryption Management

Centrally manage BitLocker and FileVault to protect sensitive data.

Per-App VPN Tunneling

Route corporate app traffic through secure VPN channels while keeping personal traffic private.

Remote Wipe & Lockdown

Instantly disable or erase lost and non-compliant endpoints to prevent data loss.

Root/Jailbreak Detection

Automatically detects compromised devices and alerts IT teams immediately.

Tamper Protection

Prevent unauthorized attempts to exit kiosk mode.

Award-winning MDM Software: Recognized, Certified, and Trusted.

Built-in security and 99.98% uptime make Bento MDM the platform teams trust to run Linux fleets alongside the rest of their devices.

BentoMDM GDPR Compliant

GDPR

Compliant

BentoMDM 99,9% uptime

99.9%

Uptime

BentoMDM SOC 2 Type 2
BentoMDM ISO 27001 Compliant

ISO 27001

Compliant

BentoMDM HIPAA Compliant

HIPAA

Compliant

MDM Kiosk Mode Use Cases by Industry

MDM kiosk mode serves retail, healthcare, field service, education, and digital signage, each with distinct lockdown and compliance requirements.

Retail & POS Terminals

MDM kiosk mode locks Android tablets and iPads to the POS application for checkout, payment processing, and inventory lookup. Self-checkout stations use a single-app kiosk with content filtering to block everything except the payment server URL. Factory reset protection prevents staff or customers from resetting the device.

Education & Testing

MDM kiosk mode locks devices to a lockdown browser for standardized testing, students cannot switch apps, access notes, or take screenshots. Schedule-based kiosk mode activates during testing hours and deactivates for general classroom use. Content filtering runs continuously blocking inappropriate content during testing and instruction.

Healthcare, Check-In & Wayfinding

MDM kiosk mode locks tablets to patient check-in, collect insurance information, verify identity, and capture signatures in healthcare. Check-in kiosks require HIPAA-compliant encryption with kiosk lockdown because the collected data qualifies as ePHI. Wayfinding kiosks displaying maps without collecting patient data need single-app lockdown with content filtering.

Field Services

MDM kiosk mode uses multi-app configuration to give technicians access to a curated set of tools: a diagnostic app, a camera, a barcode scanner, and a reporting app. Bento MDM’s Offline QR Commands let IT push policy updates to field kiosks without a network connection, extending kiosk management to locations where no other MDM solution can operate.

Hospitality & Travel

MDM kiosk mode locks tablets in hotel self-check-in, airline check-in at airports, restaurant ordering, and car rental kiosks. Single-app kiosk presents only the guest interaction interface: credit card capture, ID scanning, room selection, order placement, without exposing the operating system underneath. Custom branding maintains property or brand identity across every guest touchpoint.

Digital Signage

MDM kiosk mode locks devices to a signage player application that runs content on a continuous loop, menu boards in restaurants, departure screens in airports, promotional displays in retail. No user interaction occurs. Remote view lets IT verify what the screen displays without visiting the physical location.

Beyond Kiosk Software: Features and Solutions for Every Fleet

Extend kiosk device management into full mobile device management and unified endpoint management.

Frequently Asked Questions

What is kiosk software?

Kiosk software locks devices into single-app, multi-app, or web kiosk mode for controlled use.

Does Bento support MDM Android kiosk mode?

Yes—Android devices can run in kiosk mode for POS, retail, or field operations.

Does Bento support Windows kiosk software?

Yes—Windows devices can be configured as kiosks for signage, retail, or shared desktops.

What industries use kiosk management software?

Retail, education, healthcare, logistics, hospitality, and field services.

What is kiosk mode in MDM?

MDM kiosk mode is a mobile device management capability that locks a device to a single application or a curated set of approved applications. The home screen, settings menu, and navigation controls are disabled. The user interacts only with the approved app. When the app closes or crashes, the device automatically restarts it. MDM kiosk mode applies to Android (COSU dedicated device mode), iOS (Single App Mode), and Windows (Assigned Access).

What is the difference between single-app and multi-app kiosk mode?

Single-app kiosk mode locks the device to one application — a POS terminal running only the payment app, a check-in tablet running only the registration app. Multi-app kiosk mode locks the device to a curated set of applications selected by IT — a field service device with a diagnostic app, a camera, a barcode scanner, and a reporting tool. Single-app is for public-facing and single-function devices. Multi-app is for worker devices that need multiple tools but no personal access.

How do I update apps on a device that is in kiosk mode?

MDM pushes OS and app updates to kiosk devices over the air, the same way it updates any enrolled device. Configure automated patching with a maintenance window during off-hours so the device can restart for updates without interrupting its kiosk function. The kiosk app relaunches automatically after the update completes. If the device operates without connectivity, Bento MDM’s Offline QR Commands can push the update via a locally scanned QR code.

How do I exit kiosk mode remotely?

IT administrators can exit kiosk mode remotely from the Bento MDM admin console by removing or modifying the kiosk policy assigned to the device or device group. The device exits kiosk mode and returns to the standard managed home screen. On-device, authorized users can exit kiosk mode using a PIN or QR code configured by IT. Bento MDM also supports remote view and control, allowing IT to interact with the kiosk screen directly for troubleshooting.

Can I set up kiosk mode without MDM?

Limited kiosk functionality is possible without MDM. On iOS, Guided Access locks the device to one app temporarily — but it is user-initiated, requires a passcode to exit, and does not survive restarts. On Android, Screen Pinning locks the current app but can be exited by the user. On Windows, Assigned Access can be configured locally. None of these approaches offer persistent, centrally managed kiosk lockdown. For production kiosk deployments — where devices must stay locked, auto-restart on crash, receive remote updates, and prevent factory resets — MDM is required.

What MDM solution can help manage kiosk devices?

An MDM solution for kiosk devices should support single-app and multi-app kiosk mode across Android, iOS, and Windows from one console. It should include factory reset protection (to prevent unauthorized resets), content filtering (to block network access outside the kiosk app), automated patching (to keep unattended devices current), and remote view (to troubleshoot without site visits). Bento MDM includes all of these capabilities at $1/device with no enterprise tier gating.

Does Bento MDM support kiosk mode for macOS?

Yes. Bento MDM supports macOS single-app mode for Mac devices, allowing IT to lock a Mac into one application using MDM profiles. This is useful for digital signage, self-service terminals, and dedicated-purpose Mac workstations. macOS kiosk mode requires the device to be enrolled and supervised via Apple Automated Device Enrollment.

Ready to Secure and Streamline Your Mobile Fleet?

Manage every phone, tablet, and workstation from one console, across healthcare and beyond, with Bento MDM.

Ensamble of devices running Bento MDM