Security Checklist FAQ #

Why is it even manipulable?
Checklist for Samsung devices
Checklist for other devices

Why is it even manipulable? #

The security architecture of Android unfortunately does not allow apps deep access to the system. While this is a good thing for protection against viruses and malware, it can be rather limiting for our Child Control app. For example, with the Child Control app, we cannot simply hide icons on the home screen or fully stop apps from running or prevent them from starting. We can only read the currently open foreground app, check if a limit exists, and then place our lock screen over this app. This fact naturally makes the Child Control app vulnerable to various forms of manipulation. The app’s security also depends heavily on the type and manufacturer of the device being used. This checklist provides an overview of what to do if you suspect manipulation.

Checklist for Samsung devices #

On Samsung devices (from Android 10 and higher), some functions can be blocked directly at the operating system level. This allows you to prevent manipulations in a targeted manner. You can find all settings for this under Web Portal > Security > Samsung Security. When activating a setting in Samsung Security for the first time, you may need to update permissions on the child device. Once you enable a restriction from the Samsung Security section for the first time, a red Required Permissions button will appear at the bottom of the app on the child device. Select this button to enable Samsung Security once. From then on, we particularly recommend the following restrictions:

Block popups (suggested)
App content can be displayed as a “small window” over other apps. For example, YouTube can run as a small window over an always-allowed (Allowed-PLUS) app. In the reports, you would then only see the use of the actually allowed app. Set the option for Popup/Picture-in-Picture to “Blocked” to prevent this small window display. The restriction is applied directly at the Samsung system level, meaning that when this option is enabled, apps can no longer enter popup mode.

App block by system (suggested)
Select the “YES” setting to have apps blocked at the Samsung system level when an app or device limit has expired. This setting is also recommended if there is a suspicion of manipulation (e.g., via always-allowed apps).

Date and time settings (suggested)
The Child Control app relies on the correct system time. Without the correct time or date, times cannot be recorded accurately, and limits cannot be maintained. Enable this setting to prevent any changes to the date. Before enabling this setting, please ensure that the date and time are correct on the child device.

Factory reset (partly suggested)
When set to “Blocked,” a reset to factory settings is no longer possible. This restriction remains in place even in safe mode.

Safe boot mode (partly suggested)
When set to “Blocked,” safe mode can no longer be accessed. In rare cases, this may prevent the device from being started in the event of an error.

Settings (partly suggested)
This option allows you to fully lock the device’s settings or settings app at OS level. We recommend this option only if permissions have been removed or are missing on Samsung devices. Please note that when settings are locked, other system areas (e.g., connecting to new Wi-Fi networks, pairing a Bluetooth device, changing the ringtone, etc.) will also become inaccessible. You can temporarily lift this lock only by deactivating this setting here.

The Web Portal > Security > Samsung Security section can significantly help reduce the risk of manipulations.

Checklist for other devices #

All of the following settings can be found under Web Portal > Security. Our recommendations (in order of importance) for this area are as follows:

Block popups
App content can be displayed as a “small window” over other apps. For example, YouTube can run as a small window over an always-allowed (Allowed-PLUS) app. In the reports, you would then only see the usage of the actually allowed app. Set the Popup/Picture-in-Picture option to “Blocked” to prevent this small window display.

Settings (lock)
Through the Settings app on the child’s device, it is possible to remove certain permissions from the Child Control app. If you frequently receive notifications that permissions are missing, set the Settings option to “Blocked.”

Suspected manipulation
In some cases, the Child Control app can be bypassed by quickly switching between different screens. Especially in connection with Allowed-PLUS apps, this can be used to gain additional time. When “Suspicion of Manipulation” is active and the Kisi app detects certain patterns, the device can be automatically locked for a time specified by you.

Check interval
By default, the Child Control app checks the active foreground app every second and enforces any existing limits. If the device is not a low-cost, low-performance child device, you can increase the check interval to enhance security.

The Web Portal > Security section offers several settings to prevent or reduce the likelihood of manipulation.