Leaving a tablet out as a self-checkout raises a question that stops a lot of people before they start: what stops a customer from just... swiping out of my checkout app? Closing it, opening the browser, digging into settings, changing the Wi-Fi, or walking off with the whole tablet tucked under an arm?
It's the right worry. An open tablet is a general-purpose computer, and a self-checkout only works if, for the customer, it behaves like a single-purpose machine. The tool that makes that happen is kiosk mode — locking the device to one app so there's nothing else to reach. Here's what kiosk mode actually is, how to switch it on for the tablet you already own, and — just as important — what it does and doesn't protect against.
What "kiosk mode" actually means
Strip away the jargon and kiosk mode is one idea: the device can only run the one app you chose, and the usual ways out are disabled. No Home button escape, no app switcher, no swipe-to-close, no address bar. A customer sees your checkout and nothing else.
Every major tablet OS has this built in — it's just buried under a name you'd never search for:
- Android calls it screen pinning (sometimes "app pinning").
- iPad calls it Guided Access, under Accessibility.
- Windows calls it Assigned Access, or "set up a kiosk."
You do not need enterprise device-management software, a wiped-and-reprovisioned tablet, or a developer cable to use these. They ship with the device. What a checkout app like TallyTill adds is the layer on top: entering that locked state automatically, hardening the exits, and giving you a fast, private way back in.
How TallyTill locks an Android tablet — one time, then it stays
TallyTill's Android app is built to pin itself. You don't hunt through settings hoping you enabled the right toggle; you turn kiosk mode on and the app takes over the screen. The one-time setup is a short, guided checklist.
Two things about this are worth calling out, because they're where cheaper setups fall down.
It survives a nudge. Once pinned with "require PIN to unpin" on, the standard Android escape — holding Back and Overview together — asks for your device PIN before it'll let go. A curious customer, or a kid poking the screen, hits a wall, not your settings.
It cleans up after each sale. Between customers, the till's idle timeout clears the cart, so the next person doesn't walk up to someone else's half-finished order. Kiosk mode keeps them in the app; the idle reset keeps the app tidy.
iPad and Windows: use the OS lock, not a second app
TallyTill runs on Android as an installed app and on the web in a browser — which is how you'd run it on an iPad or a Windows tablet. On those, the OS's own kiosk lock does the pinning, and it works well:
- iPad — Guided Access. Turn it on at Settings › Accessibility › Guided Access, set a passcode, open TallyTill in Safari, then triple-click the side button to lock the screen to that one browser session. Triple-click again and enter the passcode to exit. This disables the Home gesture and app switcher for anyone but you.
- Windows tablet — Assigned Access. Under Settings › Accounts › Other users › Set up a kiosk, point a kiosk account at Microsoft Edge and your checkout URL. Edge also has a built-in
--kioskmode you can launch directly. The machine boots into the checkout and nothing else.
On the browser, TallyTill still does its part — it disables the right-click context menu, so there's no menu route to "back," "reload as," or "view source." But the browser window itself is pinned by the OS, not by the web page. That's a real distinction, and it's the honest reason the native Android app is the tighter setup of the three.
| Device | Built-in lock | What you set up once | Who does the pinning |
|---|---|---|---|
| Android tablet | Screen pinning | Kiosk QR + the "Secure your kiosk" checklist | The TallyTill app |
| iPad | Guided Access | Passcode; open TallyTill in Safari; triple-click | iOS |
| Windows tablet | Assigned Access | Kiosk account pointed at Edge + your checkout URL | Windows |
Getting back in — the part people forget to plan
A lock is only useful if you can get past it without a scene. The failure mode isn't a customer breaking in; it's an owner standing at their own stand, unable to reach the settings, holding buttons and hoping. TallyTill gives you three deliberate ways back into a pinned Android till, so one always fits the moment:
- Five taps on the logo, then your admin PIN. The everyday route. Nothing on screen advertises it, so a customer never stumbles into it, but you can open admin in a couple of seconds.
- A manager QR. Scan a code to unlock — handy when you'd rather not type a PIN in front of a line, or when a staff member needs in without knowing the PIN.
- From the portal, remotely. Turn kiosk mode off from your account and the tablet follows. Kiosk state syncs both ways: flip it in the portal and the device changes; the badge on the device reflects the truth. If a tablet is ever lost or stolen and you revoke it from the portal, it drops out of kiosk mode on its own rather than sitting there as a working, locked-open till.
What kiosk mode does not do (read this part)
Honesty here saves you a bad assumption. Screen pinning is the right tool for the real, everyday risks — wandering fingers, accidental exits, a customer poking around out of boredom. It is not a vault, and anyone who sells it to you as one is overselling.
| Kiosk mode reliably stops | Kiosk mode does not stop |
|---|---|
| Swiping or Home-buttoning out of the checkout | Someone physically walking off with the tablet |
| Opening another app or the app switcher | A full factory reset by a determined person with time alone |
| Reaching the browser address bar or right-click menu | Cutting power or the internet to the device |
| A customer changing your settings or Wi-Fi | A hardware-level attack on a stolen device |
The current lock is screen pinning — Android's standard single-app mode, no special device-owner provisioning required, which is exactly why you can set it up on a tablet you already own without wiping it. The trade-off is that screen pinning can, in principle, be cleared by a factory reset. A tamper-proof "device owner" tier — the kind that resists even a reset — is a known future upgrade, not something shipping today, and we'd rather tell you that than let you believe your $150 tablet is a bank safe.
So pair the software lock with the boring physical stuff that actually addresses theft: mount or tether the tablet, put it where a camera or passers-by can see it, and don't leave anything on the device worth stealing. The card data never lives on the tablet in the first place — it goes straight to the payment processor — so a stolen tablet is a hardware loss, not a data breach. (We go deeper on that in whether it's safe to leave a card-taking tablet unattended, and on the weatherproofing side in leaving a tablet running in an outdoor farm stand.)
Which tablet, and how locked-down do you really need to be?
Match the lock to the setting. A tablet on a manned market table that you pack up each night barely needs more than the app open and an eye on it. A tablet bolted inside an unattended fridge in a lobby that's open at 2 a.m. wants the full Android setup: pinned, PIN-to-unpin, mounted, and in view of a camera. Most stands sit somewhere between, and the good news is the same free software covers all of it — you're choosing how many layers to switch on, not paying for a different product.
If you're still deciding on hardware, what tablet do you need for a self-checkout kiosk covers the specs that actually matter (screen-pinning support among them), and turning a phone or tablet you already own into a self-checkout covers starting with what's in the drawer.
The bottom line
A tablet becomes a self-checkout the moment a customer can only do one thing with it: ring up their items. Kiosk mode is what draws that boundary. On Android, TallyTill pins itself and walks you through hardening the exits once; on an iPad or Windows tablet, the OS's own Guided Access or Assigned Access does the pinning and the app locks down the browser menu. All of it guards against the real, daily risk — someone wandering out of the app — while being honest that no software lock replaces a mount, a camera, and a sensible spot to put the thing.
Kiosk mode is part of TallyTill on every plan, including the free one. Create your free TallyTill account — the Stand plan has no monthly seat cost and doesn't ask for a card to start — set up your checkout, and lock it to the one screen your customers ever need to see.