Locked install needs your removal code to delete and can't be switched off in Settings. iPhone only allows it on a supervised phone; on a normal iPhone use the regular button.
Then finish in Settings (2 quick installs):
After tapping Install profile, Safari asks “This website is trying to download a configuration profile” → tap Allow, then Close.
Open the Settings app → Profile Downloaded → Install (“KosherGuard setup, step 1 of 2”). This sends the phone's model and iOS version to the dashboard; nothing stays installed.
Safari opens Step 2 of 2 and downloads the filter by itself (or tap the big button) → Allow.
Settings → Profile Downloaded → Install, enter your iPhone passcode, tap Install again, then Done.
A 🛡️ KosherGuard icon appears on your Home Screen. Open it any time to see your filter status or ask for a site.
The install link works for 2 hours. On supervised iPhones the locked profile can only be removed with the administrator's removal code.
Set up a Samsung Galaxy (Android)
New and not yet tested on a real Galaxy. The first time, try it on a phone you're OK to wipe and set up again.
You're on an Android phone. If this is the phone you want to protect, open this page on another phone or a computer: this phone gets erased, and the QR code has to be on a different screen.
The Galaxy gets KosherGuard as its locked "device owner" app: it can't be removed or switched off in Settings, and factory reset from Settings is blocked. Only your administrator can release it: from the dashboard, or by typing their removal code into the KosherGuard app on the phone (works without internet). No computer or cable needed, just a second screen or a printout for the QR code.
Limits: a reset from the phone's recovery or service mode can still erase it and remove KosherGuard. Re-locking automatically after that needs Samsung Knox enrollment, which isn't part of this beta. 🔐 Wipe protection (Android 11+): your administrator can turn on wipe protection in the dashboard. Then, after a recovery-mode wipe, the phone stays locked at setup until the administrator's Google account signs in, so a wiped phone is useless to whoever wiped it. The administrator then scans a fresh setup QR. Releasing the phone removes this lock.
Before you start, read and tick each one
Device ID: keep it for unblock requests
Scan this with the Galaxy during setup
Then on the Galaxy:
Factory reset it: Settings → General management → Reset → Factory data reset → Reset. (Backups checked? Google password known?)
On the first Welcome screen, tap the same blank spot 6 times quickly. A QR code setup starts.
Connect to Wi-Fi if it asks. It may download a QR scanner first.
Scan the QR code above. Tap Accept / Next on the screens that say this phone is managed. That's expected.
Wait while KosherGuard downloads and locks in, a few minutes. Don't turn the phone off.
When KosherGuard says Protected, finish setup: sign in to Google, then restore your backups (Samsung: Settings → Accounts and backup → Restore data; WhatsApp: install it and tap Restore).
Come back here and tap Check my connection.
Trouble?
6 taps did nothing: it only works on the very first screen right after a reset, before any account. Try tapping a blank area of the Welcome screen again. If the phone already went past it, reset again.
"Can't set up device" or a checksum error: ask your administrator for a fresh QR code from the dashboard and scan again after another reset.
Stuck on "Verify your account": that's Google's reset lock. Sign in with the Google account that was on the phone before. If wipe protection was on, only the administrator's Google account can unlock it.
Good to know: this setup hasn't been tried on a physical Galaxy yet, and Samsung models differ. Chrome is set to follow the filter, but a few apps use their own private DNS and may get past it; your administrator can block those apps on the dashboard. Settings can't reset the phone, but a recovery-mode reset still can. With wipe protection on (Android 11+), a phone wiped that way needs the administrator's Google account to unlock; this is also untested on a real Galaxy. Only the administrator can release the phone (from the dashboard, or with their removal code in the app).
How it works
🛡️
Filters every app and browserWebsites, apps and categories (adult, gambling, social media, YouTube, games, news and more) are filtered at the network level — on Wi‑Fi and cellular.
🎛️
Set up for youNew phones start with filter-bypass (VPN & proxy) sites blocked and the filter locked. Your administrator turns on the levels they want any time, without reinstalling.
🔒
Locked inOn supervised iPhones, the locked profile can't be deleted or switched off without the removal code, which only the administrator can see. On a Galaxy, the KosherGuard app can't be removed in Settings, and only the administrator can release the phone.
🔓
Easy unblock requestsIf something you need is blocked, send a request with your Device ID and the administrator sees it instantly.
Blocked something you need?
Send an unblock request. It shows up under your device on the administrator's dashboard.
Lost your Device ID? On the iPhone go to Settings → General → VPN & Device Management → tap the KosherGuard profile; the ID is in its name. On Android, open the KosherGuard app.
KosherGuardRequest an unblock