How to put iPad in Kiosk Mode?

Start your free 30-day trial

-

Key takeaways

  • iPad Kiosk Mode — Apple calls it Single App Mode — locks a supervised iPad to one app or a controlled set of apps. The Home button, Settings, and all other apps are disabled.
  • Two setup paths: Guided Access is built into every iPad and takes a couple of minutes, but it can only be controlled on the device itself and breaks easily at scale. MDM Single App Mode is configured remotely, tamper-proof, and built for fleets — it requires supervision through Apple Business Manager or Apple Configurator.
  • MDM supports three kiosk types: Single App, Multi-App, and Autonomous Single App (where the app itself enters and exits kiosk mode based on a task or session).
  • Common deployments include POS terminals, restaurant menus, airline and conference check-in counters, classroom iPads, hospital bedside devices, hotel guest devices, donation stations, and digital signage.
  • IT admins can exit, switch, or push updated kiosk profiles to any device remotely from the MDM console — no physical access needed.

iPad Kiosk Mode locks an iPad to one app — or a curated set of apps — so the device does exactly what it was put there to do and nothing else. Whether you're running self-checkout counters in a retail store, check-in tablets at a hotel lobby, or shared iPads in a classroom, kiosk mode keeps users on task and keeps your data off-limits.

There are two ways to get there. Guided Access is Apple's built-in option: you set it up on the device itself in under five minutes. It works fine for a single iPad, but it doesn't scale and it's easy to exit accidentally. The other path is MDM Single App Mode — configured remotely through a mobile device management solution like ManageEngine MDM Plus — which is what most IT teams use when they're managing more than a handful of devices.

This guide covers both, plus multi-app kiosk, web kiosk, prerequisites, remote management, and troubleshooting.

What is iPad Kiosk Mode?

iPad Kiosk Mode — Apple's official name for it is Single App Mode — is a supervised device state where an iPad is restricted to one specific app, or in multi-app configurations, to a controlled group of apps. Everything else is locked out: the Home button, Settings, Safari, the App Store, and any other app the user might otherwise reach.

When a device is in Single App Mode, the user can only interact with what you've put in front of them. Hardware buttons like volume controls and the side button can be disabled individually. Screen rotation, auto-lock, and touch input can all be configured or blocked.

With a mobile device management solution like Mobile Device Manager Plus, that also doubles up as iPad Kiosk software, it is possible to lock down iPadOS devices to Kiosk mode, and have them run only the required app(s), control their device settings, and even restrict the hardware buttons on them. Furthermore, a large number of iPads can be remotely provisioned into iPad Kiosk Mode with single app or multi-app Kiosk Mode, from a central point of control using the iPad Kiosk software/app.

iPad Kiosk Mode requires the device to be supervised — more on that in the Prerequisites section below. Once supervised, you can push a kiosk profile to one iPad or ten thousand from the same MDM console, and change it any time without touching the device.

The steps in this guide apply to iPadOS 17 and iPadOS 18.

This iPad Kiosk Mode guide covers the following

Pre-requisites to configure iPad Kiosk Mode

To configure iPad Kiosk Mode using an MDM solution like Mobile Device Manager Plus or an iPad Kiosk app/software, ensure the following pre-requisites are met:

NOTE: As the support for Device Enrollment Program is discontinued by Apple from December 1, 2019, migrate to Apple Business Manager to continue managing devices.

There are two ways to supervise an iPad:

Option 1 — Apple Business Manager (ABM)
ABM is the standard path for organizations buying iPads in any volume. Devices purchased through Apple or an authorized reseller can be enrolled in ABM automatically. Once the device powers on and connects to the internet, it enrolls into your MDM automatically — no manual setup, no user intervention. This is what zero-touch deployment looks like in practice. To get started, your organization needs an ABM account (free at business.apple.com), and your MDM solution needs to be connected to it as the MDM server.

Option 2 — Apple Configurator 2
If you have iPads that weren't purchased through ABM, or devices you need to supervise manually, Apple Configurator 2 (free on the Mac App Store) handles this over USB. Connect the iPad, prepare it through Configurator, and it comes out supervised and enrolled in MDM.

How to setup Kiosk Mode on iPads?

To setup iPad Kiosk Mode using an iPad Kiosk software, follow the steps given below:

Step 1: On the MDM console, navigate to Device Mgmt->Profiles->Create Profile dropdown and choose iOS/iPadOS.

Creating iPad Kiosk Mode Profile

Step 2: Provide a reference name and if required, a description and click on Continue.

Providing a name to iPad Kiosk Mode Profile

Step 3: Click on Kiosk from the list of policies. Choose the Kiosk type as Single App Mode to provision the device with a single app, or choose Multi App Mode, to enable iPad Kiosk Mode with multiple apps, or Autonomous App(s) if you wish to lock the device to single app kiosk mode temporarily, and in the next field specify the iPad Kiosk app(s). Configure the device settings, and restrict the hardware buttons as required. If Single App Mode has been selected, you'll be able to configure the device settings, and restrict the hardware buttons as required under the Settings section.

iPad Kiosk Mode Profile configuration

Step 4: Click on Edit Screen Layout and select iPad to configure the device screen layout. In case the iPad is provisioned with a single app, the selected app will open in full screen mode. However, in the case of multi app kiosk mode, the admin will be able to configure the layout of the added apps on the home screen or pin them to the dock for easier access.

iPad Kiosk Mode Layout Configuration

Step 5: Click on Save and Publish the profile.

Step 6: Distribute the Kiosk profile to a single device to test it, before deploying it to your production environment.

While enabling Kiosk Mode on iPad:

  • Ensure the app(s) to be provisioned on the device, are available in the App Repository.
  • Both Store apps and enterprise apps can be provisioned in iPad Kiosk Mode.
  • To silently install the iPad Kiosk app(s) on the devices in Kiosk mode, Store apps need to be purchased from Apple Business Manager. In the case of enterprise apps, the .ipa file has to be uploaded to MDM after which the apps can be silently deployed on the Kiosk devices, without requiring an account with Apple Business Manager. This also ensures the updates to these apps are managed easily.
  • App updates can be tested on specific devices before deployment to the iPads in the production environment, which eliminates productivity and security issues that might arise due to bugs in the updates.

Guided Access vs MDM Kiosk Mode: Which one should you use?

Both Guided Access and MDM Single App Mode lock an iPad to one app, but they work very differently and suit different situations.

Guided AccessMDM Single App Mode
SetupOn the device, manuallyRemote, from MDM console
Supervision required?NoYes (ABM or Apple Configurator)
Exit methodTriple-click + passcode, on the deviceRemote command from MDM console
ScaleOne device at a timeAny number of devices simultaneously
Tamper resistanceLow — passcode can be forgotten or bypassedHigh — only MDM admin can exit
App switchingNo — single app onlyYes — switch profiles or apps remotely
Best forOne-off demos, classrooms, short sessionsDeployed fleets, public-facing kiosks, retail, healthcare

If you manage more than a few iPads, MDM Single App Mode is the right choice. Guided Access has no remote management capability — if a user exits it or the passcode gets lost, someone has to physically pick up the device. With MDM, you push the fix from your desk.

Types of iPad Kiosk Mode (Single App, Multi-App, Autonomous Single App)

ManageEngine MDM Plus supports three kiosk configurations for iPads:

  • Single App Mode

    The iPad is locked to one specific app. Everything else — Settings, Safari, the Home screen — is inaccessible. This is the standard setup for POS terminals, check-in kiosks, and information displays where one app covers the entire use case.

  • Multi-App Mode

    The iPad is locked to a defined set of apps. The home screen is configured by the admin, and users can only see and open the apps in that set. Useful in situations where users need access to a few tools — for example, a frontline worker who needs a messaging app, a task app, and a scanner app, but nothing else.

  • Autonomous Single App Mode

    The app itself enters and exits kiosk mode based on what's happening in the session. A payment app might lock the device to a transaction screen while a payment is in progress, then release it once the transaction is complete. This mode is configured by the app developer using Apple's Autonomous Single App Mode API.

Need for iPad Kiosk software

iPad Kiosk Mode allows organizations to turn iPads into Kiosks by locking them to a single app or multiple apps. iPad Kiosk Mode enabled devices are finding extensive use in various sectors such as retail, education and healthcare among others. Here's how iPad Kiosk Mode plays an important role

  • Retail

    Retail stores are increasingly adopting self check-out counters as they reduce the chances of human error and provide better customer service. Devices provisioned in iPad Kiosk Mode are the perfect solution. The devices can be locked down to a single app to avoid misuse and features like Auto Lock and Screen Rotation disabled to allow better user experience.

  • Education

    Schools are integrating with Apple School Manager and are adopting iPads to conduct classes and exams. In such cases, putting iPads into Kiosk Mode is the obvious answer. Kiosk Mode can ensure students don't access browser, calculator and other apps that may cause distractions during classes.

  • Healthcare

    In hospitals, iPad Kiosks are used extensively for patient bedside monitoring, employee attendance, and even during surgeries. To ensure these devices are not misused and are used only for specified purposes, these devices are locked down into Kiosk Mode.

  • Restaurants and Food Service

    Digital menu displays, table-side ordering kiosks, and payment terminals. Single App Mode keeps the ordering app front and center and prevents staff from using the device for anything else.

  • Airlines and Conference Venues

    Passenger check-in counters, boarding pass scanning stations, and event registration kiosks. These environments often require profile switching — the same iPads may be used for different events or flight segments, and MDM makes that switch remotely.

  • Hotels and Hospitality

    Guest-facing kiosks in lobbies for check-in, concierge services, and local information. These iPads often run a web-based portal, making the web kiosk setup (Single App Mode with a managed browser) the most practical option.

  • Donation Stations and Nonprofits

    iPads set up as donation kiosks at events or in permanent locations. Single App Mode with a payment app keeps the experience clean and ensures no one accidentally — or intentionally — navigates away from the donation screen.

  • Digital Signage

    Information displays in corporate lobbies, waiting rooms, and public spaces. Autonomous Single App Mode works well here — the signage app controls when it occupies the full screen and when other functions might be accessible.

In these sectors, with a huge number of devices in use, it might be an arduous task to manually configure kiosk mode on each device. Instead, if an iPad Kiosk software is used, multiple devices can locked down into kiosk mode within a few minutes. Moreover, it will also be possible to monitor device health and execute remote commands at any time.

Benefits of using an iPad Kiosk Software

Using an iPad Kiosk software/app such as Mobile Device Manager Plus (MDM), that also functions as Apple MDM, to lock down Apple iPads in to Kiosk Mode provides additional control and has the following benefits over the built-in Guided Access capabilities

  • iPads can be locked down into iPad Kiosk Mode with multiple apps instead of just a single app.
  • Multiple devices can be configured remotely without any user intervention
  • Web resources can be distributed as Web shortcuts and added to Kiosk Mode.
  • Temporarily lock the device into a specific app, preventing users from accessing other apps for a particular duration
  • Automate the installation of the apps not available on the device, when provisioned in Kiosk Mode.
  • Pre-configure various settings like Auto Lock, Screen Rotation, Volume Buttons etc., while provisioning devices into Kiosk Mode.
  • Provide access to basic settings like Wi-Fi and prevent users from modifying other settings on devices.
  • With home screen customization, define the apps' position on the home screen and add frequently accessed apps to the Dock, restricting users from rearranging or removing the app icons.
  • Bulk enroll and provision iPads as kiosks across multiple locations simultaneously. Whether you're setting up 10 devices in one store or 500 across hotel properties in different cities, the process is the same from the MDM console.
  • Manage app updates without disrupting active kiosk sessions. Test updates on a staging device first, then push to production iPads during off-hours — no downtime, no surprises on the floor.

Check out how to customize your iPad's home screen by using Mobile Device Manager Plus as your iPad kiosk software in this short demo video.

How to lock an iPad to a single website (Web Kiosk)

If your kiosk use case is browser-based — a self-service portal, a booking form, a digital menu — you don't need to lock the iPad to an app. You can lock it to a single URL instead.

There are two ways to do this in ManageEngine MDM Plus:

Option 1 — Single App Mode with a managed browser
Push a managed browser app (such as a kiosk browser) to the iPad via MDM, configure the allowed URL in the browser's app configuration, then set that browser as the kiosk app in your Single App Mode profile. The iPad opens directly to your URL and the user can't navigate away.

Option 2 — Web Clips (Web Shortcuts)
Web Clips are MDM-pushed shortcuts that open a URL in a full-screen browser view. Add the Web Clip to a Multi-App kiosk profile along with a locked-down browser. Users see only the web shortcut on the home screen and can't access anything outside the URL you've defined.

Either way, combine with restrictions on Safari and the App Store so the user can't bypass the kiosk setup through the browser's address bar or by downloading another app.

 

How to setup Kiosk Mode on iPads in an Organization?

Kiosk Mode is a powerful feature that allows IT teams to lock iPads into a specific app or set of apps, ensuring employees only use the device for its intended purpose. This is especially useful in sectors like retail, education, logistics, or frontline services.

Using ManageEngine Mobile Device Manager Plus, you can configure Kiosk Mode across all employee iPads from a single, centralized console. Here's how it helps:

  • Remotely lock down devices into single or multi-app Kiosk Mode
  • Push configurations instantly to multiple iPads
  • Restrict access to system settings, browser, or unauthorized apps
  • Apply policies consistently across devices to maintain compliance and control

This setup eliminates the need for manual device handling, making large-scale deployments quick, secure, and hassle-free.

To manually enable iPad Kiosk Mode, follow the below steps:

Step 1: Enabling Guided Access

  • On the iPad to be provisioned in Kiosk Mode, navigate to Settings -> Accessibility -> Guided Access.

Enabling Guided Access for iPad Kiosk Mode

  • Enable Guided Access and tap on Passcode Settings to set a passcode to be provided while entering or exiting Guided Access

Providing a Passcode for iPad Kiosk Mode

Step 2: Configuring app in Guided Access

  • Open the app to be locked into iPad Kiosk Mode using Guided Access
  • Triple click the Home button and select Guided Access.

Manually adding an app into iPad Kiosk Mode

  • Select the areas of the screen to be disabled, and device functionalities to be disabled. Click on Start to initiate the Guided Access session.

Disabling device functionalities in iPad Kiosk Mode

Step 3: Exiting Guided Access Mode

  • Triple click on the Home button
  • Enter the Guided Access password or authorise the exit using TouchID or FaceID, if configured.

Disabling iPad Kiosk Mode

  • The Guided Access session will be ended.

Ended iPad Kiosk Mode

How to exit or switch iPad Kiosk mode remotely

One of the main advantages of MDM-managed kiosk mode over Guided Access is that you never have to physically touch the device to make changes. Here's how the common scenarios work:

  • Exiting kiosk mode on a single device

    From the MDM console, select the device and remove or deactivate the kiosk profile. The iPad exits kiosk mode immediately and returns to its normal supervised state. No passcode, no physical access needed.

  • Switching between kiosk profiles

    If you run events, retail promotions, or rotate use cases on your iPads, you can maintain separate kiosk profiles in MDM and switch between them remotely. Remove the active profile and push the new one — the device updates within seconds. This is especially useful for conference check-in iPads that need to switch between different apps or URLs for different events.

  • Bulk profile updates across a fleet

    When you need to update the kiosk app, change the allowed URLs, or modify any device restrictions across a large number of iPads, you push the updated profile to a device group from the MDM console. All devices in the group receive the update simultaneously — no manual device handling.

  • Temporary kiosk exit for maintenance

    If a technician needs to access a kiosk iPad for a software update or hardware check, an admin can remotely suspend the kiosk profile, allow the work to be done, and re-enable kiosk mode — all from the MDM console without visiting the device.

How ManageEngine MDM Plus can help you with Kiosk Modes on iOS, iPadOS, macOS, Android, Windows devices?

ManageEngine MDM Plus handles the full kiosk lifecycle for iPad fleets of any size — from initial enrollment through day-to-day management and eventual decommission.

  • Bulk enrollment and zero-touch deployment

    Connect MDM Plus to Apple Business Manager and iPads enroll automatically the first time they're powered on. No manual setup per device. Define the kiosk profile in MDM and it's pushed to the device as part of the enrollment flow — devices come out of the box kiosk-ready.

  • Remote profile management

    Switch an iPad between kiosk profiles, update the allowed apps, change the kiosk URL, or exit kiosk mode entirely — all from the MDM console, without touching the device. Profiles can be assigned to individual devices or to groups, making fleet-wide changes a single operation.

  • Cross-platform kiosk management

    If your organization runs a mix of iPads, Android tablets, Windows devices, or macOS machines as kiosks, MDM Plus manages kiosk mode across all of them from the same console. No separate tool needed for Android kiosk mode or Windows assigned access.

  • App lifecycle management

    Push new kiosk apps silently, manage updates with a test-before-deploy workflow, and handle App Store licensing through Apple Business Manager — all from MDM Plus. Enterprise apps (.ipa files) can be uploaded directly and deployed without requiring an ABM account.

  • Device health monitoring

    MDM Plus monitors enrolled devices continuously. Get alerts when a kiosk device goes offline, runs low on storage, or falls out of compliance with your kiosk profile. Run remote commands — lock, wipe, restart — on any device from the console.

Start managing your mobile devices in minutes with a free 30-day trial!

iPad Kiosk Mode FAQs

  • 1. How do you put an iPad in kiosk mode?

    There are two methods. The quick way is Guided Access: go to Settings > Accessibility > Guided Access, enable it, open the app you want to lock, triple-click the Home or Side button, and tap Start. The iPad locks to that app until you triple-click again and enter your passcode.

    The managed way is MDM Single App Mode. In MDM Plus, create an iOS/iPadOS profile, add the Kiosk policy, set the type to Single App Mode, specify the app, configure your hardware and screen restrictions, then push the profile to the device. Once the profile lands, the iPad locks to that app remotely — no physical access needed.

  • 2. What is the difference between Guided Access and MDM Kiosk Mode on iPad?

    Guided Access is set up and exited on the device itself. It doesn't require supervision, works on any iPad, and takes under a minute to configure. The downside is that it can only be controlled locally — there's no remote management, no centralized view of which devices are in kiosk mode, and no way to exit it without the passcode on the device.

    MDM Single App Mode is configured and managed remotely. It requires a supervised device and an MDM solution, but in return you get remote exit, remote profile switching, fleet-wide deployment, and tamper resistance that Guided Access can't match.

  • 3. Can I lock an iPad to multiple apps, not just one?

    Yes. Multi-App Kiosk Mode in MDM Plus lets you define a set of apps that appear on a locked home screen. Users can switch between the apps you've allowed, but they can't access anything outside that set — no Settings, no App Store, no other apps. You can also customize the home screen layout, pinning apps to specific positions and adding frequently used apps to the Dock.

  • 4. How do I lock an iPad to a single website?

    The most reliable approach is to push a managed kiosk browser app to the iPad via MDM, configure the browser's app settings to restrict it to your URL, and then lock the iPad to that browser using Single App Mode. The device opens directly to your website and the address bar, back button, or any navigation that could take the user off your page is blocked.

    Alternatively, you can use Web Clips — MDM-pushed shortcuts that open a URL in full-screen mode — in a Multi-App kiosk profile alongside a restricted browser.

  • 5. How do I exit iPad Kiosk Mode remotely?

    If the device is managed by MDM, open the MDM console, find the device or device group, and remove or deactivate the kiosk profile. The device exits kiosk mode and returns to its normal supervised state immediately — no passcode, no physical access required.

    If the device is in Guided Access (not MDM kiosk mode), you must exit locally by triple-clicking the Home or Side button and entering the Guided Access passcode.

  • 6. How do I switch iPads between kiosk profiles for different events?

    Create a separate kiosk profile in MDM Plus for each event, app configuration, or use case. When you need to switch, remove the active profile from the device or device group and push the new one. The change takes effect within seconds. For regularly rotating use cases, you can group devices logically in MDM so that bulk profile switches take a few clicks.

  • 7. How do I bulk-enroll iPads as kiosks across multiple locations?

    Connect MDM Plus to Apple Business Manager. Add your MDM server in ABM and assign the iPads you've purchased to it. Create a kiosk profile and an enrollment configuration in MDM that automatically applies the kiosk profile on enrollment. When the iPads are powered on at any location, they connect to the internet, enroll automatically, and come out of setup with the kiosk profile already applied. No local IT presence needed at each site.

  • 8. How do I block notification pop-ups on an iPad in kiosk mode?

    In MDM Plus, create or edit the Restrictions profile assigned to your kiosk devices and disable notifications globally, or disable them for all apps except the kiosk app. Also configure the Kiosk profile to block status bar notifications. For devices in Single App Mode, you can suppress all system notifications in the hardware restrictions settings within the kiosk profile itself.

  • 9. What apps can I use in iPad Kiosk Mode?

    Any App Store app or enterprise app can run in iPad Kiosk Mode, provided it's been added to the MDM app repository first. App Store apps need to be purchased through Apple Business Manager for silent installation — purchased licenses are assigned to devices, not user accounts, so apps install without any App Store sign-in on the kiosk device. Enterprise apps are uploaded to MDM directly as .ipa files and installed silently without any ABM requirement.

  • 10. Can I use one MDM to manage iPad, Android, and Windows kiosks together?

    Yes. ManageEngine MDM Plus supports kiosk mode across iOS/iPadOS, Android, Windows, macOS, and ChromeOS from a single console. iPad Kiosk Mode uses Apple's Single App Mode mechanism, Android kiosk mode uses dedicated device policies or kiosk launcher configurations, and Windows uses Assigned Access — but all three are configured and managed from the same MDM interface. This makes it practical for organizations that run a mixed fleet rather than maintaining separate management tools per platform.