This article covers configuring and locking down the physical device so it stays ready for voters and cannot be used for anything other than voting. For creating and activating kiosks in the Election Manager, see Creating and Managing Kiosks.
Overview and Suggestions
Before voting begins, make sure each device is turned on, powered, connected to the internet (by Wi-Fi or cable), oriented for the best voter experience, and clean and ready for use.
To keep a kiosk running continuously, disable the device's "sleep" or "auto-lock" function so it stays awake and ready. A reliable power supply is necessary.
The configurations below are strongly suggested but are not the only valid setups. If you use a different configuration, do so together with your own IT department or other trusted technical resources. The guiding principle for any configuration is to keep the device both accessible to voters and secure against misuse.
Skipping these steps may simply mean your staff has to monitor devices and reactivate kiosks if voters accidentally or deliberately navigate away. It may also weaken the security of your election event.
Choosing a Lockdown Approach
How far you lock down devices depends on how many devices and locations you are running, and how strict your security requirements are. Your approach may adhere to any of the following broad guidelines:
Simplest: Use the built-in browser kiosk mode described below (Chrome on a computer, or Guided Access on an iPad). This is free, requires no extra software, and is configured by hand on each device.
Advanced: Add device-level hardening on top of browser kiosk mode (remapping or disabling keys, disabling removable media and wireless features, physical locks and enclosures).
Enterprise: Manage devices centrally. On Windows, this might mean Chrome policies or a Mobile Device Management (MDM) solution. On iPad, this might mean Single App Mode via Apple Configurator or MDM. These survive restarts and scale to large fleets, but require IT administration and enrollment. Set these up with your IT department; the specifics are beyond the scope of this guide.
Configuring a Computer (Windows / Google Chrome)
Note: Device menu paths and gestures can change between operating system releases. Verify these steps on your actual devices before your event.
For a computer-based kiosk, complete the steps below before activating the kiosk as described in Creating and Managing Kiosks.
These steps assume a Windows operating system and Google Chrome. You can usually replicate something similar on other operating systems or browsers.
Set Google Chrome as the device's default browser, if it is not already. This is done through your Windows "Default Apps" or "Default Programs" settings: find the "web browser" section and choose Chrome.
Create a copy of a Chrome shortcut on the desktop. The easiest way is to right-click an existing Chrome desktop shortcut and choose "Create Shortcut." Name it something familiar, such as "Kiosk Setup."
Right-click the new shortcut and choose Properties.
On the Shortcut tab, in the Target field, after the closing quotation mark of
chrome.exe", type a space followed by:--kiosk "https://www1.simplyvoting.com/manage/"When you have finished, click Apply, then OK.
Make sure no other instances of Chrome are running. (Kiosk mode will not launch correctly if a normal Chrome window is already open.) Double-click the Kiosk Setup shortcut, and log into the Election Manager with a user that has the Kiosk Management permission. Activate the kiosk as described in Creating and Managing Kiosks. Once active, you will see the kiosk's name in the footer of the voting website.
To quit Chrome kiosk mode, press Alt + F4.
Additional Device Hardening (Windows)
The following optional steps further secure or simplify the device. Exact steps vary by device and Windows version, so research the specifics for your hardware.
Remap or disable keys that let voters escape kiosk mode (for example, the Windows key), using a utility such as the PowerToys Keyboard Manager or by editing the registry. Keep in mind that Chrome kiosk mode controls only the browser, not the operating system, so a voter can still exit with Alt + F4 or similar shortcuts unless those keys are disabled.
Disable removable media for extra security: USB storage and SD cards (through Device Manager).
Disable wireless transmission methods such as Bluetooth or NFC.
Use a screen privacy filter to reduce the chance of someone seeing another voter's screen.
Control physical access to ports with USB port blockers, and prevent removal of peripherals (such as a mouse) with port locks, link locks, or a device enclosure cage for desktop towers.
Configuring an iPad
Note: Device menu paths and gestures can change between operating system releases. Verify these steps on your actual devices before your event.
On an iPad, lock the device to the voting website using Guided Access. (For larger fleets, Single App Mode via MDM is more robust; set this up with your IT department.) Complete activation of the kiosk first, then apply Guided Access.
A Note on iPad Models and iPadOS Versions
The button you use to start Guided Access depends on your iPad model:
On a modern iPad without a Home button, use the top button.
On an older iPad with a Home button, use the Home button.
To start a Guided Access session, triple-click that button on any supported iPad.
To pause or end a session, triple-click the same button again, then authenticate. On iPadOS 18 or earlier, double-click the button instead to pause or end.
The steps below describe the flow on a modern iPad. Adjust the button to match your device, and use the double-click variant to end a session if your iPad runs iPadOS 18 or earlier.
Setting Up Guided Access
Enable Guided Access: open Settings → Accessibility → Guided Access and turn it on. Under Passcode Settings, set a Guided Access passcode (and optionally enable Face ID or Touch ID so authorized staff can end a session quickly). Use a passcode that is different from the device's unlock passcode.
So that you can start Guided Access with the button shortcut later, make sure the Accessibility Shortcut for Guided Access is turned on (in the Guided Access settings). Without this, the button press will not start a session.
Open a browser (for example, Safari) and close every open tab except the one showing the voting website in kiosk mode. The kiosk's name should appear in the footer of the page.
Triple-click the top button (or Home button on older iPads) to start Guided Access. Circle the entire top area of Safari, where the address bar and navigation controls are, to disable that area. Disable any bottom navigation controls as well if needed. Tap Start and set a passcode if prompted.
Test the result: confirm that no one can close the tab or reach the address bar or bookmarks, and that the login fields and login button still work for voters.
To end Guided Access, triple-click the button again (double-click on iPadOS 18 or earlier), enter the passcode (or use Face ID / Touch ID if enabled), and tap End.
Additional Device Hardening (iPad)
Use a locked device enclosure or stand.
Disable wireless transmission methods such as Bluetooth or NFC.
Use a screen privacy filter to reduce unintended viewing of the screen.
Note on long-running iPads: Guided Access has to be set up again after a restart, an iPadOS update, or a fully drained battery. For devices that stay deployed over multiple days or that must be tamper-resistant, Single App Mode through an MDM is more durable, because the lock survives restarts. Plan this with your IT department.