Website Whitelisting
- Allow access only to approved websites and domains
- Everything outside the allowlist stays unreachable
Secure kiosk browser
Secure browser for Android that keeps users on approved websites
Turn Android smartphones and tablets into secure web kiosks. Allow approved websites, block unwanted URLs and restrict browser controls remotely from LimaxLock.
- 14-day free trial
- No credit card required
- Android Enterprise ready
- Google EMM Partner
Secure browsing
What is a secure kiosk browser?
A secure kiosk browser restricts Android devices to approved websites and web applications, while preventing access to unauthorized URLs, browser settings and the device functions around them.
The secure browser is the web side of device lockdown: it pairs with kiosk lockdown and full Android MDM, works alongside mobile application management, and turns POS and frontline devices into single-purpose web terminals.
Browser controls
Everything you need to control web access
The allowlist, the browser interface and the way it behaves are all part of one profile — set once in the console, enforced on every device that carries it.
Website Blocking
- Block the sites you do not want users reaching
- Blocked requests stop cold — no warning to click through
Full-Screen Browsing
- Run web apps edge to edge, without browser chrome
- The website becomes the whole device experience
Navigation Control
- Decide whether back, forward and refresh are available
- Users stay inside the flow you approved
Address Bar Control
- Show, hide or lock the address bar per profile
- No typing a new address to leave the allowlist
Download Restrictions
- Control whether users can download files at all
- Keeps unmanaged files off shared devices
Browser Settings Lockdown
- Users cannot change the browser's configuration
- Other browsers are blocked at app level
Remote URL Management
- Add or remove approved websites from the console
- Devices pick up the change over the air
Website whitelisting
Allow only the websites your users need
Website whitelisting on Android is allow-by-exception: you list the sites that are permitted and everything else is denied by default. Add a URL, choose whether subdomains come with it, and apply the list to a device group.
Access control
Unauthorized websites stop here
Same device, same browser, two very different outcomes. An approved address opens your web application; anything outside the allowlist never loads at all.
Web kiosk mode
Lock Android devices to a website or web application
Point the device at the URL that does the job, and let the browser own the screen. The site launches on boot, fills the display and comes back on its own after a reboot or a power cut.
- Auto-launch website
- Full screen
- Prevent exit
- Relaunch after reboot
Browser experience
Decide exactly how the browser behaves
Every control is a policy setting, not a device setting — so what an admin configures in the console is precisely what the user gets on the device.
Centralized control
Manage browser policies across every device
Which device runs which browser profile, pointed at which website, and whether it is online right now — the whole browsing estate in one table.
- Update URLs remotelyChange the approved list and devices pick it up over the air.
- Apply policies in bulkPush one browser profile to a group, a site or the whole fleet.
- Monitor devicesSee which devices are online and which policy each one runs.
- Change configurationAdjust browser behaviour without touching a single device.
Web app deployment
Turn any business web app into a dedicated Android experience
Your web app is already the product. Give it a URL, a browser configuration and a device group, and it ships to the fleet as a dedicated Android experience — no native build required.
Secure browsing
Keep users inside the browsing experience you define
A locked-down device is only as closed as its browser. These are the restrictions that keep the open web from being the exit door.
Block Unauthorized URLs
Every navigation is resolved against the allowlist. Anything outside it never loads.
Prevent Browser Exit
Paired with kiosk mode, the browser is the session — leaving it takes an admin.
Restrict Downloads
Stop files landing on shared devices you did not put there.
Lock Browser Settings
Configuration is set by policy, not by whoever is holding the device.
Control Navigation
Back, forward, refresh and outbound links are available only if you allow them.
Block Other Browsers
Chrome and any other installed browser are blocked, so there is one way to the web.
Built for business
Secure browser software for dedicated Android use cases
The same secure browser, pointed at a different address — that is usually the only difference between one deployment and the next.
Retail & POS
pos.company.com
Product catalogues, web-based POS and customer-facing portals on the shop floor.
Restaurants
order.restaurant.com
Self-service ordering and digital menus that never wander off the ordering page.
Healthcare
checkin.clinic.com
Patient check-in and approved clinical web portals on shared waiting-room tablets.
Education
exams.school.edu
Exam portals and a short list of approved learning sites — nothing else opens.
Warehousing
inventory.company.com
Browser-based inventory and logistics apps on rugged handhelds and scanners.
Hospitality
guest.hotel.com
Guest check-in and self-service portals in lobbies and on room tablets.
Quick access
Give users one-tap access to approved web apps
Approved websites can sit on the device like apps. Users tap the one they need and land straight in it — no address to type, and nowhere else to go.
Why LimaxLock
Browser control without managing devices one by one
Android-First
Built around managed Android deployments, not a desktop tool ported sideways.
Remote Configuration
Change approved websites and browser behaviour without touching a device.
Built for Kiosk Use
Secure browsing and dedicated-device lockdown are the same product, not two.
One Management Console
Browsers sit beside apps, kiosk profiles and devices in a single dashboard.
Ready to lock browsing to your approved sites?
Start your 14-day free trial — no credit card required.
How it works
From Android device to secure web kiosk in four steps
- 01
Add websites
Enter the approved URLs or web application the device should be able to reach.
- 02
Configure browser
Choose full-screen, address bar, navigation and download behaviour for the profile.
- 03
Select devices
Apply the browser profile to a device, a group or the whole fleet.
- 04
Deploy remotely
Push the secure browsing experience over the air and manage it from the console.
Related solutions
Explore more LimaxLock solutions
FAQ
Common questions about secure kiosk browsers
What is a secure kiosk browser?
A secure kiosk browser is a locked-down web browser for managed devices. It opens only the websites on an admin-defined allowlist, runs full-screen with browser controls hidden, and is configured remotely — turning a device into a single-purpose web terminal instead of an open window onto the internet.
What is an Android kiosk browser?
An Android kiosk browser is the same idea applied to Android phones, tablets, rugged handhelds and POS terminals. LimaxLock's kiosk browser runs on enrolled Android devices, enforces the website allowlist on the device itself, and is managed from the same console as the rest of your Android fleet.
How do I restrict Android devices to specific websites?
Enroll the device in LimaxLock, add the approved URLs to the browser profile, and apply that profile to the device or group. The secure browser then resolves every navigation against the allowlist: approved sites load, everything else is blocked. Changing the list later is a console edit, not a site visit.
What is website whitelisting on Android?
Website whitelisting is an allow-by-exception model: instead of listing the sites to block, you list the sites that are permitted and everything else is denied by default. It is the safer model for dedicated devices, because a site nobody anticipated is blocked automatically rather than reachable until someone notices.
Can I block websites on managed Android devices?
Yes. You can block specific websites outright, or use the allowlist so that anything not explicitly approved is already blocked. Because other browsers are blocked at app level, there is no second browser to fall back on.
Can I lock an Android tablet to one website?
Yes. Single-website kiosk mode boots the tablet straight into one URL, full-screen, and reloads it after a crash or a power cut — the web equivalent of single-app kiosk mode, and the usual setup for check-in pages, dashboards and digital signage.
Can a kiosk browser run in full-screen mode?
Yes. Full-screen mode renders the page edge to edge with no address bar, tabs or menus, so a web application looks and behaves like a native kiosk app rather than a website someone opened in a browser.
Can users exit the LimaxLock kiosk browser?
Not on their own. Running the secure browser as the kiosk app means the browser is the session: the home and recents keys, the status bar and Android settings are all blocked, and leaving kiosk mode requires an admin password or a one-time exit code.
Can I remotely change allowed websites?
Yes. Add or remove URLs in the browser profile and the change rolls out over the air to every device on that profile. No recall, no re-enrollment and no hands on the hardware.
Can I hide the address bar in kiosk mode?
Yes. The address bar can be shown, hidden or locked per profile. Hiding it removes the most obvious way off the allowlist and makes the device read as a purpose-built terminal instead of a browser.
Can I use a web application in Android kiosk mode?
Yes — that is one of the most common reasons to use it. Point the browser profile at your web app, turn on full-screen, hide the address bar and restrict navigation, and the app becomes a dedicated Android experience without anyone building a native app.
What is the difference between kiosk mode and a kiosk browser?
Kiosk mode locks the device — it decides which apps can run and blocks the launcher, settings and system keys. A kiosk browser locks the web — it decides which websites can load and which browser controls exist. Most dedicated web deployments use both: kiosk mode makes the browser the only app, and the browser allowlist decides where it may go.
Lock Android devices to the web content that matters
Create secure web kiosks, control website access and manage browser policies remotely with LimaxLock — start your 14-day free trial, no credit card required.
14-day free trial•No credit card required•Set up in minutes
