iPad Guided Access: The Complete Setup Guide for Visitor Sign-In

Three seconds. That’s how long it takes a visitor to walk past an unlocked iPad at your reception desk. They see the home screen instead of a sign-in form — so they walk straight to whoever’s sitting behind the desk anyway.

iPad Guided Access fixes that without an MDM subscription, a corporate Apple Business Manager enrollment, or an IT ticket. You enable one setting, set a passcode, and triple-click to lock the iPad to your sign-in app. Most offices are done in under two minutes.

This guide covers the full setup — including two things Apple’s own documentation skips: how to manage the passcode so it doesn’t cause problems later, and what actually happens to your kiosk when the iPad reboots overnight. If you already know you need MDM-grade reliability across multiple devices, jump straight to our iPad Single App Mode guide.

What Guided Access Actually Does

Guided Access is an accessibility feature Apple ships with every iPad. When you start a session, the iPad locks to whichever app is open in the foreground. The Home bar and app switcher disappear from the visitor’s view. They can only interact with that one app.

Exiting requires a triple-click of the Side button (Face ID iPads) or the Home button (older models), followed by the Guided Access passcode. No network connection, no MDM command — the check happens entirely on the device.

That on-device simplicity is also the limit. A Guided Access session runs locally, so a reboot ends it.

How to Enable Guided Access (Step by Step)

Everything starts in Settings → Accessibility → Guided Access. Toggle it on.

1. Set a dedicated passcode. Tap Passcode Settings → Set Guided Access Passcode. Use a 4- or 6-digit code that’s different from the iPad’s unlock PIN. Note it somewhere your team can reach — losing it is recoverable but annoying.

2. Decide on biometrics. Below the passcode option, you can enable Face ID or Touch ID as an alternate exit method. Convenient on a staffed desk; for an unattended kiosk, stick to numeric-only.

3. Open your sign-in app. Launch the visitor sign-in app and navigate to the visitor-facing check-in view — not the admin settings screen. What’s on screen when you triple-click is what visitors will see.

4. Triple-click to start. Triple-click the Side button or Home button. A setup screen appears where you can optionally disable specific screen regions or hardware buttons. For visitor sign-in you’ll almost always skip straight to Start.

The iPad is now in Guided Access. Visitors see only the sign-in flow.

Passcode Hygiene — The Part Apple’s Docs Skip

The Guided Access passcode lives in Settings → Accessibility → Guided Access → Passcode Settings. Here’s what most setup guides leave out: that screen opens with your device passcode, not the Guided Access passcode. Anyone who knows the iPad’s unlock PIN can change or remove the GA passcode without entering the old one.

That creates two real problems:

Staff turnover. When someone with access to both passcodes leaves, change the GA passcode immediately. Device PINs usually rotate during offboarding. The Guided Access passcode won’t follow automatically.

Shared admin access. On a team where multiple people know the device PIN, any of them can silently change the GA passcode. That’s rarely the intent. If that’s a concern, MDM Single App Mode is a cleaner model — the lock lives at the MDM level, not in a Settings screen.

One more thing: don’t set the Guided Access passcode to the same digits as the device unlock PIN. If a visitor watches a receptionist triple-click out of a session, they’ve just seen both codes at once.

Time Limits in Guided Access

When you triple-click to start a session, there’s an Options button in the lower-left corner of the setup screen. Tap it to reveal a time limit toggle — a countdown after which the Guided Access session ends automatically.

For a permanent reception kiosk, time limits are almost never the right choice. A lobby kiosk should stay locked as long as the office is open, which doesn’t map to a fixed countdown.

Time limits make sense in two scenarios:

• Event check-ins — you want the kiosk locked for a two-hour registration window, then automatically released
• Shared-use stations — a tablet that should return to a neutral state after a period of inactivity

For a standard desk setup, skip time limits and make starting and ending Guided Access part of your open/close routine instead.

What Survives a Reboot — and What Doesn’t

This is the most important thing to understand before depending on Guided Access for a reception kiosk.

If the iPad reboots overnight — someone unplugged it, a power outage, an automatic iOS update — you’ll walk in the next morning to a sign-in app sitting unlocked on the home screen. Any visitor who arrives before your first staff member can access the full device.

For most offices with a staffed front desk, this is fine. A receptionist arrives, triple-clicks, and the kiosk is running before the first visitor of the day. For a 24/7 lobby, an unmanned building entry, or any setup where the iPad needs to recover from a reboot without human intervention, Guided Access isn’t the right tool. That’s the job for iPad Single App Mode. If your organization already runs Microsoft 365, the Intune iPad kiosk setup for M365 admins covers that path without an extra MDM subscription.

FAQ

Does Guided Access survive a reboot?

No. When the iPad loses power or restarts, the active session ends and the device returns to the home screen. The Guided Access setting stays on in Settings, but a staff member has to triple-click to start a new session. MDM Single App Mode survives reboots because the MDM server re-enforces the restriction automatically when the device reconnects.

What happens if I forget the Guided Access passcode?

Settings → Accessibility → Guided Access → Passcode Settings opens with your regular device unlock PIN — not the GA passcode — so if you know your device PIN you can change the GA passcode without entering the old one. If you’re stuck inside an active session and can’t enter the GA passcode, recovery mode is the only exit, and it erases the iPad.

Can I use Face ID or Touch ID to exit?

Yes. Enable it in Passcode Settings. That’s convenient on a staffed desk. For an unattended kiosk, a numeric passcode is harder to accidentally trigger.

Does Guided Access work on every iPad?

Yes. Apple introduced Guided Access with iOS 6 and it runs on every iPad that supports a current version of iPadOS. No special hardware is required.

What’s the difference between Guided Access and Single App Mode?

Guided Access is free and on-device — fast to set up, no MDM required, but doesn’t survive reboots. Single App Mode is enforced by an MDM server, survives reboots, and can’t be bypassed without an MDM command. The tradeoff is that Single App Mode requires a supervised iPad and an MDM subscription. Our iPad kiosk mode guide maps both methods side by side with honest tradeoffs.

Try InstaCheckin for Free

InstaCheckin’s iPad app is built for the Guided Access pattern. Open the app in kiosk mode, triple-click to lock it, and visitors see only the sign-in flow — photo capture, NDA or waiver signature, and a host notification sent the moment they check in. Start a free trial to see how it works on your existing iPad and front-desk setup.