Key-guard Features Settings

In the Kiosk Settings tab of the Edit Device Profile page, the Keyguard Disabled Features section allows IT admins to control specific lock‑screen (keyguard) behaviors on fully managed or kiosk devices.

These settings determine which features are disabled on the secure keyguard screen (i.e., the screen shown before device unlock). By disabling specific features, you can tighten security, reduce distraction, or enforce stricter kiosk environments.

Navigation: Device Management > Device Profiles > Edit Profile > Kiosk Settings > Keyguard Disabled Features

Below is a description of each toggle shown

Feature	Description
Camera	Prevents access to the camera from the lock screen (secure keyguard). Users cannot launch the camera without first unlocking the device
Notifications	Hides all notifications on the lock screen, preventing users from seeing notification banners or content before unlock
Unredacted Notifications	Allows notifications to appear but hides sensitive content (only redacted notification headlines are shown)
Trust Agents	Disables trust‑agent logic (like Smart Lock) that can keep a device unlocked under certain conditions (e.g., trusted Bluetooth device).
Disable Fingerprints	Disables fingerprint authentication on the lock screen. Users must unlock with PIN/Password/Pattern
Disable Remote Input	On Android 6 and below, this prevents input into notification text expansion on lock screen notifications. (No effect on Android 7+.)
Face	Disables face recognition for unlocking the device at the lock screen
Iris	Disables iris scanning authentication at the lock screen (where supported)
Biometrics	Disables all biometric authentication — fingerprint, face, and iris — at the lock screen. This overrides individual biometric toggles.
All Features	Turns off all the above keyguard customizations at once. This is useful in kiosk environments where you want to remove all interactive lock‑screen functionality

How This Affects Devices

These settings let you tighten lock‑screen behavior in managed environments:

Enhanced Security: Prevent access to notifications, camera, or biometrics before an authorized user unlocks the device. Consistent Kiosk Experience: Disable features that could let users interact with system UI or exit kiosk apps. Compliance Enforcement: Enforce standard behaviors across a fleet of devices, especially in regulated industries.