Skip to content

ipad

How to Turn Off iPad Kiosk Mode (Every Method, 2026)

Turn off iPad kiosk mode fast: Guided Access, Single App Mode, MDM, ASAM, and the force-restart fallback for a forgotten passcode. Step-by-step per method.

By InstaCheckin Team Updated June 24, 2026

How to Turn Off iPad Kiosk Mode (Every Method, 2026)

A panicked iPad locked into a single app. A visitor is waiting, the badge printer needs reconfiguration, and no one wrote the passcode down.

This is the quick-reference for every way to turn off iPad kiosk mode — Guided Access, Single App Mode via Apple Configurator, Single App Mode via MDM, and Autonomous Single App Mode (ASAM) — plus the force-restart fallback for a forgotten passcode. Pick the section that matches how the iPad was locked. For the full setup story see the iPad kiosk mode pillar guide.

The four locks behave differently, and the difference decides what you can and can’t do. Here are all four on one screen:

Lock typeSurvives a reboot?How you turn it offNeeds the iPad in hand?
Guided AccessNoTriple-click + passcode, or force-restartYes
Single App Mode (Apple Configurator)YesStop it from the Mac that locked itYes (USB)
Single App Mode (MDM)YesUn-scope the profile in the MDM consoleNo
Autonomous Single App Mode (ASAM)YesIn-app unlock, or remove the allowlist profileNo (if MDM-managed)

Is your iPad supervised? Check this first

Before you try anything, find out whether the iPad is supervised. Supervision is the on/off switch that decides whether Single App Mode and MDM kiosk locks are even possible — an unsupervised iPad can only run Guided Access.

Open Settings → General → VPN & Device Management. A supervised iPad shows a banner: “This iPad is supervised and managed by [your organization].” Apple documents what that state means in If you have a supervised iPhone, iPad, Mac, or Apple Vision Pro.

  • Banner present, management profile listed → an MDM is in charge. Jump to the MDM section; you can release the lock from the console without touching the iPad.
  • No banner, but the iPad still boots back into one app after a reboot → Single App Mode was set from Apple Configurator on a Mac. You need that Mac.
  • No banner, triple-click ends the session → plain Guided Access. Start there.

Supervision can’t switch itself on by accident. It’s set either by erasing and re-enrolling the iPad or by assigning it through Apple Business Manager, so if the banner is there, someone in your org put it there on purpose. Apple’s device supervision overview covers the enrollment paths.

Exit Guided Access

Guided Access is the per-session lock most small offices use. To end it:

  1. Triple-click the side button (or the Home button on older iPads).
  2. Enter the Guided Access passcode.
  3. Tap End in the top-left.

If Face ID or Touch ID is enabled for Guided Access, double-click the side button and authenticate instead. Guided Access uses its own passcode, not the device unlock passcode. Apple’s official walkthrough is in Use Guided Access on iPhone or iPad.

Exit Single App Mode (Apple Configurator)

Single App Mode pushed from Apple Configurator 2 on a Mac is persistent — the iPad reboots back into the locked app every time. It cannot be ended from the iPad itself.

  1. Connect the iPad to the Mac running Apple Configurator 2 via USB.
  2. Click the iPad in the Configurator window.
  3. Choose Actions → Advanced → Stop Single App Mode.

The iPad relaunches to the Home Screen within seconds. If the Stop Single App Mode action is greyed out, the iPad is supervised by an MDM rather than by this Mac — Configurator no longer has authority over the lock, so release it from the MDM (next section). Apple documents the start/stop flow in Set Single App Mode in Apple Configurator for Mac.

Exit MDM-deployed kiosk mode

For fleet deployments, the Single App Mode Configuration Profile is pushed over the air by Jamf, Microsoft Intune, Mosyle, Kandji, or ManageEngine. To release a single iPad or the whole fleet, the admin un-scopes the profile.

  • Microsoft Intune: Devices → iOS/iPadOS → Configuration → open the Single App Mode profile → Assignments → remove the device or group. The kiosk (app lock) settings live under the Apple device-restrictions template — see Microsoft’s Apple device restriction settings reference.
  • Jamf Pro: Mobile Devices → Configuration Profiles → open the Single App Mode profile → Scope → remove the smart group or specific device.
  • Mosyle Manager: Profiles → iOS/iPadOS → open the Single App Mode profile → Assignment → remove.
  • Kandji: Library → Single App Mode item → remove the Blueprint assignment.
  • ManageEngine MDM: Profiles → Apple → open the iOS Profile → remove from group.

The iPad relaunches to the Home Screen on the next check-in (typically within a few minutes). If the iPad is offline, the change applies the next time it phones home. To turn the lock back on later, re-scope the profile — no on-device action needed.

If the kiosk profile rides alongside a Restrictions payload that blocks screenshots, AirDrop, or AirPrint, those restrictions stay until the Restrictions profile is also removed. Remove both if you want the iPad fully unmanaged.

Exit Autonomous Single App Mode (ASAM)

ASAM is app-controlled. The kiosk app calls UIAccessibility.requestGuidedAccessSession(enabled: false) from its own admin or settings flow to release the lock. Most purpose-built kiosk apps — InstaCheckin’s iPad app included — expose this through an admin login or a long-press unlock gesture.

If the app is stuck in ASAM and the in-app unlock is unreachable:

  1. Force-quit the kiosk app, or kill it from the multitasking switcher if accessible.
  2. Restart the iPad. ASAM does not persist across an app crash plus restart cleanly — the next launch typically opens unlocked.
  3. Remove the com.apple.app.lock allowlist profile from the MDM. Without the allowlist entry, the app cannot re-enter ASAM, so the iPad behaves normally on the next launch.

If you need the app to support ASAM again later, push the allowlist profile back. The bundle ID list is the only state ASAM relies on.

Force-restart the iPad (last resort)

When Guided Access has eaten the passcode and the front desk is locked out, force-restart is the fastest way out. The exact button sequence depends on the model — Apple documents both in Force restart iPad.

iPads with Face ID (no Home button):

  1. Press and release Volume Up.
  2. Press and release Volume Down.
  3. Press and hold the top button until the Apple logo appears, then let go.

iPads with a Home button:

  1. Press and hold the Home button and the top (or side) button simultaneously.
  2. Keep holding both until the Apple logo appears.

The iPad reboots out of any active Guided Access session. Single App Mode, MDM-deployed kiosk lock, and ASAM all survive a force-restart — those need the admin actions in the earlier sections.

After the reboot — reset the Guided Access passcode:

  1. Open Settings → Accessibility → Guided Access.
  2. Tap Passcode Settings → Set Guided Access Passcode.
  3. Enter a new 6-digit passcode and confirm. Store it in a shared password manager so the next person on shift can find it.
  4. (Recommended) Toggle Face ID or Touch ID on so authorized staff can end sessions without typing the passcode at all.

If the same iPad keeps losing its passcode, the underlying problem is usually that the passcode lives in someone’s head instead of in 1Password / Bitwarden / your IT runbook. Move it.

Which method are you actually using?

If you are not sure which kiosk-mode mechanism is engaged, look at the symptoms:

  • Triple-click does something → Guided Access. Use the passcode or biometrics.
  • Triple-click does nothing, the iPad survives reboots in the locked app, no MDM profile is visible in Settings → General → VPN & Device Management → Single App Mode pushed by Apple Configurator. Connect to the Mac that originally locked it.
  • A management profile is listed in Settings → General → VPN & Device Management → MDM-deployed Single App Mode. Release it from the MDM console.
  • The locked app has its own admin login that unlocks the iPad → ASAM. Use the in-app unlock.

For the full setup-side counterpart of this guide, see the iPad kiosk mode pillar, the Guided Access setup walkthrough, or the Single App Mode deep dive.

Frequently asked questions

How do I exit iPad kiosk mode without a passcode?
If you forgot the Guided Access passcode, force-restart the iPad. On Face ID iPads, press and release Volume Up, press and release Volume Down, then hold the top button until the Apple logo appears. On Home button iPads, hold the Home button and the top button together until the Apple logo appears. The reboot ends the Guided Access session, after which you can disable Guided Access in Settings and set a new passcode. For Single App Mode (Apple Configurator or MDM), there is no on-device way out — the admin must remove or update the configuration profile.
Will force-restarting the iPad turn off kiosk mode?
Only for Guided Access. A force-restart ends Guided Access because the session lives in memory and does not survive a reboot. Single App Mode (Apple Configurator or MDM-deployed) and Autonomous Single App Mode survive reboots, OS updates, and battery drain — the iPad will boot directly back into the locked app. Those require an admin action to release.
How do I turn off Single App Mode permanently?
From Apple Configurator 2 on a Mac: connect the iPad via USB and choose Actions → Advanced → Stop Single App Mode. From an MDM (Jamf, Microsoft Intune, Mosyle, Kandji, ManageEngine): un-scope the Single App Mode Configuration Profile from the device, or push a profile update with Single App Mode disabled. The iPad relaunches to the Home Screen within minutes. To prevent the lock from coming back, also remove the device from the smart group or scope that delivered the profile.
Why won't my iPad exit Guided Access?
Three common causes: (1) you are entering the device unlock passcode instead of the Guided Access passcode — they are different; (2) Face ID or Touch ID is enabled for Guided Access and the device cannot read your face or finger — try the passcode fallback; (3) the side or Home button is being intercepted by a hardware case or a damaged button — triple-clicks must register cleanly. If none of those apply, force-restart the iPad to end the session.
Does removing the MDM profile turn off ASAM?
Yes. Autonomous Single App Mode requires a com.apple.app.lock allowlist profile that names the app's bundle ID. Remove that profile and the app loses the ability to lock itself, so the next time the app calls requestGuidedAccessSession the call fails and the iPad behaves normally. If the app is currently locked when you remove the profile, restart the app to clear the in-memory ASAM state.
Can I exit kiosk mode remotely if I do not have the iPad in hand?
Only for MDM-deployed Single App Mode and ASAM. Both can be released from the MDM console without touching the iPad. Guided Access and Apple Configurator-deployed Single App Mode require physical access — the former for the triple-click and passcode, the latter for the USB cable to the Mac.
How do I know if my iPad is supervised?
Open Settings → General → VPN & Device Management. A supervised iPad shows a banner reading 'This iPad is supervised and managed by [your organization].' If you see that banner, the lock was almost certainly pushed by an MDM or Apple Configurator, and you'll need the management console or the original Mac to release it. No banner, and a triple-click that does something, means you're on Guided Access — the easy case. Supervision can only be turned on by erasing the device or enrolling it through Apple Business Manager, so it doesn't appear by accident.
How long does it take for an iPad to exit MDM kiosk mode after I un-scope the profile?
Usually a few minutes, but it depends on the device check-in interval and whether the iPad is online. When you remove the Single App Mode profile from Jamf, Intune, Mosyle, Kandji, or ManageEngine, the change is queued and delivered on the next MDM check-in. An iPad that's awake and on Wi-Fi typically relaunches to the Home Screen within one to five minutes. An offline or sleeping iPad applies the change the next time it connects. You can speed it up by forcing a manual sync or check-in from the MDM console.

Related reading

Ready when you are

Try InstaCheckin on your iPad — free