Android Kiosk Browser
A customizable locked-down browser for Android kiosk and digital signage deployments.
Features
Core (v1.0)
- Fullscreen WebView — Immersive mode, no address bar or browser chrome
- URL Whitelist — Only allow configured domains with proper boundary matching
- Lock Task Mode — Disables home/back/recent buttons
- Admin PIN Exit — PIN-protected escape from kiosk mode (triple-tap top-left)
- Auto-launch on Boot — Starts automatically when device powers on
- Idle Timeout — Returns to homepage after inactivity
Security (v1.1)
- PIN Hashing 🔐 — PINs stored as salted SHA-256 hashes, not plain text
- Whitelist Bypass Protection — Proper domain boundary checking
Remote Management (v1.1)
- Remote Configuration 📡 — Fetch settings from a JSON endpoint (polls every 5 min)
- Digital Signage Mode 🖼️ — Auto-rotate through multiple URLs at configurable intervals
- Usage Analytics 📊 — Track page views, sessions, and admin access (local SQLite)
UX
- Error Handling — Graceful network error pages with retry button
- Loading Indicator — Progress bar during page loads
Tech Stack
- Kotlin
- Android WebView
- Lock Task Mode (API 21+)
- DataStore Preferences
- Room Database (analytics)
- Material Design 3
Requirements
- Android 5.0+ (API 21)
- For Lock Task Mode: Device Owner provisioning
Building
./gradlew assembleDebug
APK output: app/build/outputs/apk/debug/app-debug.apk
Device Setup
To enable Lock Task Mode (full kiosk lockdown):
adb shell dpm set-device-owner farm.hobbs.kioskbrowser/.KioskDeviceAdminReceiver
Admin Access
Triple-tap the top-left corner of the screen to access admin settings.
Default PIN: 1234 (change this after setup!)
Configuration
Local Settings (Admin Panel)
| Section | Settings |
|---|---|
| Basic | Homepage URL, allowed domains, idle timeout |
| Remote Config | Config URL, poll interval |
| Digital Signage | Enable, URL list, rotation interval |
| Security | Change admin PIN |
| Analytics | View/export/clear usage data |
Remote Configuration (JSON)
Host a JSON file at a URL and point the kiosk to it:
{
"homepage": "https://example.com",
"whitelist": "example.com,*.example.com",
"idle_timeout": "300",
"signage_urls": [
"https://example.com/slide1",
"https://example.com/slide2"
],
"signage_interval": "30"
}
Testing
Run unit tests:
./gradlew test
See TESTING.md for the full QA checklist.
Documentation
- CHANGELOG.md — Version history
- TESTING.md — QA checklist
- CONTRIBUTING.md — Development guidelines
- IMPROVEMENTS.md — Code review notes
Roadmap
- MVP (whitelist, admin PIN, idle timeout)
- PIN hashing (SHA-256)
- Remote configuration
- Digital signage mode
- Usage analytics
- Scheduled content (time-based configs)
- Multiple device profiles
- Fleet management dashboard
- OTA updates
- Custom branding
License
MIT License — hobbs.farm
Built by the hobbs.farm team: Pluto 🪐, Spirit 👻, Margaret 🌸