Managing the Kiosk Unlock Icon and Passcode

Managing the Kiosk Unlock Icon and Passcode

The Unlock Icon (a lock symbol located at the bottom-left of the device screen) provides authorized personnel with a way to exit the restricted Kiosk environment for maintenance or troubleshooting. For enhanced security, administrators can hide this icon and rely on remote commands or a hidden bypass sequence to regain device access.



1. Controlling Icon Visibility

Administrators can choose to show or hide the unlock icon depending on the specific security needs of the deployment.

Note: This option is exclusively available for Kiosk-type policies and does not apply to other policy types.

  1. Log in to the WeGuard Console.

  2. Navigate to Policy Groups and select the desired Kiosk policy.

  3. Under the General settings tab, locate the option "Show Unlock icon in Home page".

  4. To Show: Select 'Show Unlock icon' from the dropdown menu.

  5. To Hide: Select 'Hide Unlock icon' from the dropdown menu.

  6. Click SAVE AND CONTINUE to push the update to the devices.


2. Managing the Kiosk Unlock Password

A custom passcode prevents unauthorized users from exiting the managed environment, even if the icon is visible.

  1. In the Policy Groups editor, navigate to the Security tab.

  2. Locate the field labeled “KIOSK UNLOCK PASSWORD”.

  3. Enter a unique passcode (e.g., a 6-digit numeric code).

  4. Click SAVE AND CONTINUE.


3. Alternative Access Methods (When Icon is Hidden)

If the icon is hidden to prevent user tampering, the device can still be unlocked using the following two methods:

Remote Unlock via Console

  1. Navigate to the Devices section in the WeGuard Console.

  2. Select the specific device to open its Device Details page.

  3. Click on the Unkiosk or Remote Unlock action.

  4. The device will immediately exit Kiosk mode.


4. Setting Up Security Alerts

To ensure you are notified of any security bypasses, configure automated alerts:

  1. Go to Alerts & Notifications > Configuration.

  2. Select the "Kiosk Mode Exited" event trigger.

  3. Enter the administrator Email addresses to receive instant notifications.

  4. Link the rule to your Policy Group and click Apply.


Summary of Exit Methods

MethodAccess RequirementBest Use Case
On-Device IconLock Icon + Admin PINOn-site staff maintenance.
Remote UnlockConsole AccessRemote IT troubleshooting.


We hope this article was helpful. For additional support:


    • Related Articles

    • How Do I Lock/Unlock the Device?

      With WeGuard, administrators may put their employees' devices in kiosk mode and give them a distraction-free work environment. However, IT managers might want to examine settings and app data when diagnosing or debugging a problem. There are several ...
    • Managing Device Password Policies and Enforced Resets on Android Devices

      WeGuard provides administrators with two levels of password management: Restrictions, which define the rules for user-created passwords, and Enforcement, which allows an administrator to push a specific password to all devices in a policy group. This ...
    • Security - Security Settings

      Hello and Welcome to WeGuard Enterprise Visual Knowledge-base Series. In this KB article, We will explain about security settings available on WeGuard Enterprise Portal. Security settings, In this section, you have a wide variety of security setting ...
    • Managing Bluetooth Settings via WeGuard Policy

      Controlling Bluetooth connectivity is essential for maintaining both security and operational efficiency. Unrestricted Bluetooth can pose data leakage risks or allow unauthorized peripheral connections. WeGuard enables administrators to enforce ...
    • Managing Device Display: Configuring Screen Rotation Settings

      The Android screen rotation feature automatically adjusts the display orientation (Portrait or Landscape) based on how the device is held. Within the WeGuard Console, administrators can lock or unlock this behavior to ensure a consistent user ...