Kiosk mode is a restricted operating mode that starts one approved app, browser session, or workflow and hides most of the normal operating system. It is common on shared endpoints such as sign-in stations, classroom devices, digital signage, and self-service terminals. By limiting what a user can open, kiosk mode reduces the attack surface and helps defenders enforce a simple, consistent use case.
In cyber security, kiosk mode matters because it changes both trust and risk. A well-managed kiosk can block file access, settings changes, and unnecessary apps, making malware delivery and misuse harder. But weak configuration, outdated software, or physical access can still be abused to escape the session, replace the allowed app, or capture credentials. When platforms change kiosk support, administrators must verify that the replacement workflow still enforces the same controls and does not expose a broader path for abuse.