Require a PIN code to access application settings and other security features

[varanu5]

Hello,

I was wondering if it might be possible to add an option to protect access to the application settings with a custom PIN code. This would help prevent unauthorized modifications and enhance overall security.

I’m referring not to the device-level PIN set in the phone’s settings, but to a custom PIN built into the application itself.

[nktnet1]

Hey @varanu5,

Thank you for the suggestion. Just so I understand better, what's your circumstance for needing this feature?

Is your device credentials shared with others, and you want to protect the settings of this specific app?

Also, a few considerations that may need to be ironed out:

1. If people have access to your device credentials, they can clear the app data (or uninstall/reinstall) to wipe the custom pin and associated settings. Is this acceptable?
2. What happens when you forget your custom pin? Clear data/uninstall?

[varanu5]

Hey @varanu5,

Thank you for the suggestion. Just so I understand better, what's your circumstance for needing this feature?

Is your device credentials shared with others, and you want to protect the settings of this specific app?

Also, a few considerations that may need to be ironed out:

1. If people have access to your device credentials, they can clear the app data (or uninstall/reinstall) to wipe the custom pin and associated settings. Is this acceptable?
2. What happens when you forget your custom pin? Clear data/uninstall?

Exactly. The device is shared with other users. You also asked some very good and thought-provoking questions. Let me share my experience after testing your app, as I’ve tried many paid and open-source alternatives.

My idea is to achieve the most restricted kiosk mode possible. When I set the app as the launcher, it works very well overall. However, if I swipe down from the top to open notifications, I can still see the settings (cogwheel) icon and access the phone’s system settings. From there, a user could uninstall the app or change the home launcher, which is not ideal.

If the app is set as a launcher, it should prevent access to all other apps — including the system settings — unless they are explicitly whitelisted. It might be useful to have a dedicated button (similar to bookmarks) that opens a list of whitelisted apps, such as a remote support app, gallery, or camera.

Additionally, when the app is used as a home launcher, the Kiosk Control Panel should include an Exit button to close the launcher. I noticed it’s currently possible to access the Control Panel by tapping multiple times on the left side of the screen. To exit, the app should prompt for a custom PIN. I also think the Settings option should appear in the Control Panel but be protected by the same PIN.

Now, to answer your questions:
1. Users should not be able to access system settings if the app is set as the launcher — as described above.
2. If the PIN is forgotten, there should be a recovery option, such as a security question (e.g., “What is your father’s birthday?”).

I’m just brainstorming here, and I understand that my ideas may not fully align with your vision. Please take them simply as suggestions. You’ve already done an excellent and impressive job with your app — thank you for sharing it with us.

[nktnet1]

However, if I swipe down from the top to open notifications, I can still see the settings (cogwheel) icon and access the phone’s system settings.

Did you use the "Lock" feature? This shouldn't be possible if you did (click the floating wrench icon and click "lock").

If the app is set as a launcher, it should prevent access to all other apps — including the system settings

Same as above - you need to enter "lock" (kiosk) mode for your status bar to be protected.

For better security, you should look into either granting "lock task permitted" or setting Webview Kiosk as the device owner - more details here:

• https://webviewkiosk.nktnet.uk/docs/security/

I noticed it’s currently possible to access the Control Panel by tapping multiple times on the left side of the screen

This can be turned off under Web Browsing -> Kiosk Control Panel Region. Please see the documentation below:

• https://webviewkiosk.nktnet.uk/docs/settings/web-browsing/

I also think the Settings option should appear in the Control Panel but be protected by the same PIN.

The Settings option will be visible if you set Appearance -> Floating Toolbar Mode to Hidden. Documentation:

• https://webviewkiosk.nktnet.uk/docs/settings/appearance/

I’ve tried many paid and open-source alternatives.

Out of curiosity, could you list the open-source alternatives? (specifically interested in the FOSS ones only, not paid solutions).

[nktnet1]

Resolved by #103 and released in v0.24.28.

Feel free to continue the discussion in the other thread though :).