Free
Permanently usable web kiosk without advertising and time limits. The visible free watermark remains active.
Grundlagen
So ist KioskPilot aufgebaut.
KioskPilot deliberately separates local kiosk operations from accounts and cloud. A single device can start without an account. A portal account organizes people, devices, and billing; it is not a device license itself.
Pro – per device
Removes the watermark and activates professional local functions for exactly one device or a bound installation.
Fleet Cloud
Separate offering for central administration, teams, groups, health, rollouts and support. It does not replace a Pro device license.
Customer portal
Manages multiple users, devices, free and assigned license seats, billing addresses and documents.
Merksatz: Users manage devices. Licenses apply per device. Fleet manages the fleet.
In drei Schritten
First setup.
To start locally, all you need is your landing page, a sensible security limit and an admin PIN.
- Startseite festlegen. Use HTTPS or a private LAN HTTP address. Public HTTP destinations are not accepted.
- Domains erlauben. The homepage host must be included. Only add additional hosts if the website really needs them for navigation.
- Choose PIN and behavior. Set admin PIN, keep awake, reload, orientation and optional display times. Then test the site and start the kiosk.
Home URL
The fixed page that Home, Autopilot, and Offline Restore return to.
Domain-Allowlist
Checks main navigation, pop-ups, scanner, NFC and launcher web destinations.
Admin-PIN
Protects local settings. It should not be kept visible on publicly accessible devices.
Verbindungstest
Helps detect DNS, network, certificate and allowlist issues before kiosk launch.
Web-Inhalte
Browser & Navigation.
The Kiosk Browser is not a general browser: it shows your configured application and limits unexpected escapes.
User-Agent & Zoom
Choose mobile, desktop or your own browser profile as well as page and text zoom. Only use Custom User Agent when the target page needs it.
Pop-ups
Only after a user gesture and only for permitted hosts. Allowed targets are redirected to the main window in a controlled manner.
Datei-Uploads
Use the system file selection and can be disabled via policy.
Web-Berechtigungen
Camera, microphone and location are separate, off by default and only available to allowed hosts.
Cookies & Mixed Content
Third-party cookies and LAN mixed content are separate compatibility options, disabled by default.
Basic Auth
Username can be configured; the password is encrypted in the Android Keystore or Apple Keychain and is missing in exports.
Cannot be overridden: SSL certificate errors and safe browsing/fraud warnings are never ignored.
Gerät & Anzeige
Display, Screensaver & Launcher.
Wachhalten & Ausrichtung
Keeps the display active during kiosk operation and fixes portrait, landscape or system orientation as the platform allows.
Helligkeit & Nachtplan
Defines day and night brightness with start and end times. The operating system can specify hard minimum values.
Pixel Shift
Shifts static content minimally and reversibly to distribute sustained load more evenly.
Screensaver
Black, clock or own message after inactivity. One touch returns to the kiosk.
Universal Launcher
Shows shared websites and apps as tiles. Web targets remain bound to the allowlist.
Scanner & NFC
QR, barcodes and NDEF targets are read, validated and only then opened. Supported formats vary by device.
KioskPilot Intelligence
Autopilot, Offline Rescue & Schutz.
Kiosk Autopilot
Monitors loading, network and renderer. Escalation: Reload, Home, WebView restart, offline rescue and – for Fleet – technical diagnostic status.
Offline Rescue
Local replacement page with understandable message. As soon as the home page is accessible, the controlled return takes place.
Privacy mode
After inactivity, deletes cookies, web storage, forms and browser history and starts a fresh session.
Accessibility Check
Locally checks touch targets, captions, overflow, scaling, and basic contrast and font indicators.
Display-Schutz
Combines pixel shift, brightness plan and technical temperature and battery information as far as the device provides them.
Temporary support
One-off, short-lived code; visible consent on the device; limited rights; automatic end and audit entry.
Datensparsam: Accessibility and autopilot analysis run locally. Fleet only receives technical states and counters, not DOM content or form inputs.
Smart Home
Home Assistant & Integrationen.
KioskPilot can directly find and professionally integrate a local home assistant dashboard.
- Start quick setup. KioskPilot sucht `_home-assistant._tcp.local.` im lokalen Netz.
- Select instance. The internal address found is adopted as the home page and the host allows it.
- Optional Pro integrieren. Enable local API or TLS-MQTT and publish Home Assistant Discovery.
Local API · Pro
Private networks, random bearer token. Read status and trigger reload, home, privacy reset, launcher and brightness.
TLS-MQTT · Pro
Just `ssl://`/`mqtts://`. Publishes minimized status and accepts defined commands. Password is not exported.
Discovery
Can automatically make online sensors and actions such as Reload or Home known in Home Assistant.
LAN-Sicherheit
The HTTP LAN API protects via token, but does not encrypt. Use TLS-MQTT or Fleet on untrusted networks.
Lizenzierung
Free, Pro & Lizenzstatus.
Pro applies exactly to the activated device or cryptographically bound installation. The portal shows free and assigned places; it does not turn a user license into a multi-device license.
Free
- Lokaler Web-Kiosk
- Grundlegender Autopilot
- Offline Rescue
- Quick setup and accessibility check
- Sichtbares Watermark
Pro
- No watermark
- Advanced autopilot/privacy features
- Local API and TLS MQTT
- Device Owner / Managed Policies
- One license per device
Restore purchases
Asks the store again for active purchases and restores local entitlement.
Fully sync
Flushes conflicting local license caches and rebuilds state from store and control plane. The purchase itself will not be deleted.
Store-Grenze: Portal license seats and store purchases are technically separate. A new portal association does not automatically move a store purchase to a different installation.
Plattformen
Android and iOS/iPadOS.
Android · normal installiert
Immersive full screen mode and screen pinning, but with system limits. Depending on the device, a user can leave the system's own kiosk.
Android · Device Owner
Dedicated device operation with lock task, enterprise policies and more reliable boot behavior. Requires correct provisioning.
iPhone/iPad · privat
Guided Access is the viable single-app route. A normal app is not allowed to completely lock the device itself or start it after a restart.
iPhone/iPad · betreut
Apple Configurator or MDM can deploy Single App Mode/App Lock and Managed Configuration for supervised devices.
Funktionsgleich bedeutet gleiche Produktwirkung: Android uses Device Owner; Apple uses Guided Access or MDM. Operating system security mechanisms are not bypassed.
Central administration
Fleet Cockpit & Kundenportal.
- Organization and users. Owner, Admin, Operator and Read-only share clearly limited rights.
- Pair device. Generate a short-lived pairing code in the portal and confirm it visibly in the app.
- Assign license. Assign a free Pro slot to exactly one of your own devices. Release makes it available again.
- Organize operations. Name, group, monitor devices and roll out configuration revisions in a controlled manner.
Overview
Number of devices, online status, warnings, license occupancy and central needs for action.
Devices
Pairing, start URL, allowlist, technical details, revision, support code and revocation.
Licenses
Total, assigned and free. Every assignment remains device-specific.
Billing
Versioned billing addresses, unchangeable direct invoices and separate store receipts.
Team
Invitations are one-time and valid for 48 hours. The member chooses his or her own password.
Account
Password, TOTP MFA, recovery codes, active sessions and logout.
Safe operation
Health, Incidents & Rollouts.
Fleet Health
Evaluates heartbeat, error status and technical signals based on configurable thresholds. Alerts can be acknowledged and automatically resolved.
Device actions
Reload, home and configuration synchronization are reversible, logged actions - manual or rule-based with cooldown.
Incidents
Correlates alerts, responsible parties, comments and actions; calculates MTTD/MTTR and exports a technical report.
Schedules
One-time or weekly secure promotions with a fixed time zone.
Maintenance windows
Suppress expected organization, group, or device alerts without deleting real data.
Gestufte Rollouts
Start small, observe applied revision and health, promote controlled or roll back to previous configuration.
Noch nicht produktiv freigeschaltet: external alert webhooks, independent availability monitoring, push via APNs/FCM and Stripe live checkout remain hidden until final configuration.
Local-first
Sicherheit & Datenschutz.
Inhalte bleiben lokal
Website content, form entries and browser history are not transferred to the control plane.
Minimierte Telemetrie
For Fleet: device ID, platform, version, heartbeat, revision and technical diagnostic counters.
Portal-Sitzung
Backend token remains server side. The browser receives a Secure, HttpOnly and SameSite Strict cookie.
MFA & Recovery
TOTP secret encrypted; ten unique recovery codes only visible upon activation; Sessions can be revoked individually.
Konfigurations-Export
Does not contain PIN, API tokens, MQTT, Basic Auth or other passwords.
Support-Sitzung
Off by default, visibly confirmed, time-limited and auditable.
Diagnose
Fehler systematisch beheben.
Page doesn't load
- Test network and URL
- Check allowlist
- DNS/TLS kontrollieren
- Reload and Home
- Restart WebView
Device offline
- Check local kiosk status
- Check internet and system time
- Pairingstatus kontrollieren
- Check app/OS power saving
- Bei Bedarf neu koppeln
License is missing
- Check correct store account
- Restore purchases
- Check portal assignment
- Full sync
- Support mit App-Version kontaktieren
Portal-Login
- Check email
- Passwort-Reset verwenden
- Cookies zulassen
- Nach Passwortwechsel neu anmelden
- Rate-Limit abwarten
Helpful for a support request: Platform, device model, operating system, KioskPilot version, approximate timing and exact error message. Never send password, API token, recovery code or full billing information.
Antwort nicht gefunden?
The FAQ answers short individual questions. If there is a specific error, the platform, app version and a precise description will help you quickly isolate it.
Fundamentals
How KioskPilot is structured.
KioskPilot deliberately separates local kiosk operation from accounts and cloud services. A device can start without an account. A portal account organizes people, devices, and billing; it is not itself a device license.
Free
A permanent web kiosk with no ads or time limit. The visible Free watermark remains active.
Pro – per device
Removes the watermark and enables professional local features for exactly one device or bound installation.
Fleet Cloud
A separate offering for central management, teams, groups, health, rollouts, and support. It does not replace a Pro device license.
Customer portal
Manages users, devices, available and assigned license seats, billing addresses, and documents.
Remember: Users manage devices. Licenses apply per device. Fleet manages the fleet.
Three steps
Initial setup.
To start locally, you only need a target page, a sensible security boundary, and an admin PIN.
- Set the home page. Use HTTPS or a private LAN HTTP address. Public HTTP targets are rejected.
- Allow domains. Include the home-page host and add others only when required for navigation.
- Choose PIN and behavior. Set admin PIN, keep-awake, reload, orientation, and optional display schedules. Test, then start the kiosk.
Home URL
The fixed page used by Home, Autopilot, and offline recovery.
Domain allowlist
Checks main navigation, pop-ups, scanner, NFC, and launcher web targets.
Admin PIN
Protects local settings. Never display it near a publicly accessible device.
Connection test
Finds DNS, network, certificate, and allowlist issues before kiosk start.
Web content
Browser & navigation.
The kiosk browser is not a general-purpose browser: it displays your configured application and limits unexpected exits.
User agent & zoom
Choose mobile, desktop, or custom profiles plus page and text zoom. Use a custom user agent only when required.
Pop-ups
Only after a user gesture and for allowed hosts. Valid targets are redirected into the checked main window.
File uploads
Use the system file picker and can be disabled by policy.
Web permissions
Camera, microphone, and location are separate, off by default, and limited to allowed hosts.
Cookies & mixed content
Third-party cookies and LAN mixed content are separate compatibility options, disabled by default.
Basic Auth
The password is encrypted in Android Keystore or Apple Keychain and omitted from exports.
Never bypassed: TLS certificate failures and Safe Browsing or fraud warnings.
Device & screen
Display, screen saver & launcher.
Keep awake & orientation
Keeps the display active and selects portrait, landscape, or system orientation where supported.
Brightness & night plan
Defines day/night brightness and times. The OS may enforce hard minimums.
Pixel Shift
Moves static content minimally and reversibly to distribute long-term load.
Screen saver
Black, clock, or message after inactivity. A touch returns to the kiosk.
Universal Launcher
Shows approved websites and apps as tiles. Web targets remain allowlist-bound.
Scanner & NFC
QR, barcode, and NDEF targets are read, validated, then opened. Formats vary by device.
KioskPilot Intelligence
Autopilot, Offline Rescue & protection.
Kiosk Autopilot
Monitors loading, network, and renderer. Escalation: reload, home, rebuild web view, Offline Rescue, and technical Fleet diagnostics.
Offline Rescue
A local fallback with a clear message and controlled return when the home page recovers.
Privacy mode
Clears cookies, web storage, forms, and history after inactivity and starts a fresh session.
Accessibility Check
Locally checks touch targets, labels, overflow, scaling, and basic contrast/font indicators.
Display protection
Combines pixel shift, brightness plans, and technical thermal/battery signals where available.
Temporary support
Single-use short-lived code, visible consent, limited rights, automatic end, and audit entry.
Data-minimized: Accessibility and Autopilot run locally. Fleet receives technical state and counters, never DOM content or form entries.
Smart home
Home Assistant & integrations.
KioskPilot can discover a local Home Assistant dashboard and integrate it professionally.
- Start Quick Setup. KioskPilot searches for `_home-assistant._tcp.local.` on the LAN.
- Select an instance. The internal address becomes the home page and its host is allowed.
- Optionally integrate Pro. Enable local API or TLS MQTT and publish Home Assistant Discovery.
Local API · Pro
Private networks, random bearer token. Read status and trigger reload, home, privacy reset, launcher, or brightness.
TLS MQTT · Pro
Only `ssl://`/`mqtts://`. Publishes minimized state and accepts defined commands. Passwords are never exported.
Discovery
Can register online sensors and actions such as Reload or Home in Home Assistant.
LAN security
The HTTP LAN API uses a token but not encryption. Use TLS MQTT or Fleet on untrusted networks.
Licensing
Free, Pro & license status.
Pro applies to the activated device or cryptographically bound installation. The portal shows available and assigned seats; a user account never becomes a multi-device license.
Free
- Local web kiosk
- Basic Autopilot
- Offline Rescue
- Quick Setup and Accessibility Check
- Visible watermark
Pro
- No watermark
- Advanced Autopilot/privacy
- Local API and TLS MQTT
- Device Owner/managed policies
- One license per device
Restore purchases
Asks the store again for active purchases and restores the local entitlement.
Full synchronization
Clears inconsistent local license caches and rebuilds state from store and control plane. The purchase is not deleted.
Store boundary: Portal seats and store purchases are separate. Reassigning a portal seat does not automatically move a store purchase.
Platforms
Android and iOS/iPadOS.
Android · regular install
Immersive full screen and screen pinning with OS limits.
Android · Device Owner
Dedicated Device with Lock Task, enterprise policies, and more reliable startup. Requires proper provisioning.
iPhone/iPad · personal
Guided Access is the practical single-app option. A regular app cannot fully lock the device or auto-start.
iPhone/iPad · supervised
Apple Configurator or MDM can provide Single App Mode and managed configuration.
Feature parity means equivalent product effect: Android uses Device Owner; Apple uses Guided Access or MDM. OS security mechanisms are never bypassed.
Central management
Fleet Cockpit & customer portal.
- Organization and users. Owner, Admin, Operator, and Read-only have clearly bounded rights.
- Pair a device. Create a short-lived code in the portal and visibly confirm it in the app.
- Assign a license. Assign one available Pro seat to exactly one owned device.
- Organize operations. Name, group, monitor, and safely roll out configuration revisions.
Overview
Device count, online state, alerts, license use, and key actions.
Devices
Pairing, home URL, allowlist, technical details, revision, support code, and revoke.
Licenses
Total, assigned, and available. Every assignment remains device-bound.
Billing
Versioned billing addresses, immutable direct invoices, and separate store receipts.
Team
Invitations are single-use and valid for 48 hours. Members choose their own passwords.
Account
Password, TOTP MFA, recovery codes, active sessions, and sign-out.
Safe operations
Health, incidents & rollouts.
Fleet Health
Evaluates heartbeat, errors, and technical signals against configurable thresholds.
Device actions
Reload, Home, and config sync are reversible, audited actions with optional cooldown.
Incidents
Correlates alerts, owners, comments, and actions; calculates MTTD/MTTR and exports reports.
Schedules
One-time or weekly safe actions in a fixed time zone.
Maintenance windows
Suppress expected alerts for organization, group, or device without deleting data.
Staged rollouts
Start small, observe revision and health, promote safely, or roll back.
Not yet production-enabled: external alert webhooks, independent availability monitoring, APNs/FCM push, and Stripe live checkout remain hidden until final configuration.
Local-first
Security & privacy.
Content stays local
Website content, form entries, and browsing history are not sent to the control plane.
Minimized telemetry
Fleet receives device ID, platform, version, heartbeat, revision, and technical counters.
Portal session
The backend token stays server-side; the browser gets a Secure, HttpOnly, SameSite-Strict cookie.
MFA & recovery
Encrypted TOTP secret, ten one-time recovery codes, and revocable sessions.
Configuration export
Never includes PIN, API token, MQTT, Basic Auth, or other passwords.
Support session
Off by default, visibly approved, time-limited, and audited.
Diagnostics
Troubleshoot systematically.
Page will not load
- Test network and URL
- Check allowlist
- Check DNS/TLS
- Reload and Home
- Restart web view
Device offline
- Check local kiosk
- Check internet and time
- Check pairing
- Check OS power saving
- Pair again if needed
License missing
- Check store account
- Restore purchases
- Check portal assignment
- Run full sync
- Contact support with app version
Portal sign-in
- Check email
- Use password reset
- Allow cookies
- Sign in after password change
- Wait for rate limit
Useful for support: platform, device model, OS, KioskPilot version, approximate time, and exact error. Never send passwords, API tokens, recovery codes, or complete billing data.
Could not find the answer?
The FAQ covers short questions. For a specific issue, platform, app version, and an exact description help us narrow it down quickly.