How to install and set up eGate on an Android device. Every screen is shown with its settings.
eGate must be installed as the device owner. Android only allows this on a device with no accounts, so start from a factory reset.
adb shell dpm set-device-owner "com.oss.egate/.a"
adb shell pm grant com.oss.egate android.permission.WRITE_SECURE_SETTINGSIf the first command fails, the device still has an account on it. Remove it or factory reset again.
To check that eGate is the device owner:
adb shell dumpsys device_policy | grep -i "device owner"
Write the password down somewhere safe. Set a password reset email under Security as soon as you can.
eGate always opens on the login screen. Enter the administrator password and tap Log in.
Also on this screen:
The version number is shown at the bottom.
Open the phone app and dial *#*#34283#*#*. eGate opens on the login screen.

After logging in you see a list of sections. Tap a section to open it and tap it again to close it.
Each section shows a short summary, such as Nothing blocked or DNS off, so you can check a device at a glance.
Changes apply as soon as you flip a switch. There is no save button. If Android refuses a setting, the switch turns back off and eGate shows a message.
The back button does nothing on this screen. To leave eGate, use Exit at the bottom.

| Setting | What it does |
|---|---|
| Block factory reset | Removes factory reset from Android Settings. |
| Factory reset protection | After a reset, the device can only be set up with the managed account. |
Set a password reset email before turning these on.

| Setting | What it does |
|---|---|
| Block adding users | No new users or guest sessions. |
| Block app settings control | Apps can't be force-stopped, cleared or disabled from Android Settings. |
| Add managed user | Creates a new user profile managed by eGate. |
| Manage users on login | Re-applies user settings each time a user signs in. |

Each of these opens a list of installed apps. Search by name, tick the apps, and go back.
| Setting | What it does |
|---|---|
| Block all uninstalls | No app can be uninstalled. |
| Block all app installs | No new apps, including from the Play Store. |
| Block unknown sources | Blocks installing APK files. The Play Store still works. |
| Block default app changes | The user can't change the default browser, launcher and so on (Android 14 and up). |
| Chrome certificate integration | Lets Chrome trust certificates installed on the device. Needed for some filtering proxies. |
| Disable Google Play | Turns off the Play Store. Apps already installed keep working. |


Open it from the bottom of App control.
The list holds known apps, grouped by type, such as other app stores and dating apps. Tick the apps to block, or use Toggle all for a whole group, then tap Save.
If a blacklisted app is installed later, eGate hides it straight away.

Switches for whole groups of apps:
eGate hides installed apps that match the category.

| Setting | What it does |
|---|---|
| Block Wi-Fi | Wi-Fi settings can't be changed. |
| Block adding Wi-Fi networks | Saved networks still work. |
| Block Bluetooth sharing | No file transfers over Bluetooth. |
| Block Bluetooth | Turns Bluetooth off. |
| Block tethering | No hotspot or USB tethering. |
| Block airplane mode | Airplane mode can't be turned on. |
| Block VPN configuration | No VPN apps or VPN settings. |
| Block outgoing calls | Emergency calls still work. |
| Block printing | Printing is turned off. |
| Block wallpaper changes | The wallpaper is locked. |
| Block location sharing | Apps can't get the location. |

| Setting | What it does |
|---|---|
| Block MMS | No picture messages. |
| Block SMS | No text messages. |
| Block USB and physical media | No USB file transfer or SD cards. |
| Block ADB debugging | Turns off Developer options and USB debugging. Turn this on last. |
| DNS filter | Opens the DNS filter. See below. |
| Proxy | Opens the proxy settings. See below. |

Extra settings for Kyocera phones. They need the Kyocera Device Config Plugin installed on the phone. Without it, the section shows Device Config Plugin not installed.
| Setting | What it does |
|---|---|
| Block recovery mode | The phone can't be started in recovery mode, so it can't be reset from there. |
| Call restrictions | Controls who can call the phone and who it can call. |
Choose a rule for incoming calls and one for outgoing calls:
Add numbers under Allowed phone numbers, then tap Save. The list is only used by the rules that include allowlisted numbers.


The DNS filter works for every app and browser. The user can't change it.
| Preset | Blocks |
|---|---|
| Blank | Nothing. No filtering. |
| Hard | Ads, trackers and malware. |
| Clean | Same as Hard, plus adult content. Safe search on. |
| Family filter | Adult content, proxies and VPNs. Safe search and YouTube restricted mode on. |
To use your own server, tick Custom DNS server, enter the hostname, and tap save.
Turn off DNS filtering removes the filter.
Also turn on Block VPN configuration and Block tethering so the filter can't be bypassed.

Clear proxy removes the settings. If the proxy filters HTTPS, also turn on Chrome certificate integration under App control.

Blocks content inside apps. Turn on Enable accessibility filter first.
| Setting | What it does |
|---|---|
| Use external service | Runs the filter from a separate app. Only needed in special cases. |
| Block WebView content | Blocks web pages shown inside apps. |
| Add / Remove WebView exception | Lets chosen apps keep showing web pages. |
| Block video playback | Blocks video in all apps. |
| Block Telegram search | Turns off search in Telegram. |
| Block apps with accessibility | Blocks chosen apps on screen. Use this for apps that can't be hidden or uninstalled. |
| Unblock apps | Releases apps blocked above. |
| Debug accessibility | Shows notifications for troubleshooting. Leave it off. |

eGate has its own app store with approved apps, sorted into categories. Users can install from it even when other installs are blocked.
| Setting | What it does |
|---|---|
| Open app store | Opens the store. |
| Show app store on startup | Offers the store to the user when eGate starts. The user can only install approved apps. |


| Setting | What it does |
|---|---|
| Set password | Changes the administrator password. |
| Password reset email | Where to send a reset link if the password is lost. Enter it and tap Save. |
| Force push configuration | Copies this device's settings to the server. |
| Force pull configuration | Replaces this device's settings with the server copy. |
Push and pull ask you to confirm first. Pull overwrites any changes made on the device.

| Setting | What it does |
|---|---|
| Customize startup image | Replaces the picture on the login screen, for example with your logo. |
| Reset startup image | Puts the default picture back. |
| User manual | Opens the manual in the browser. |
| Check for updates | Checks for a new version of eGate. |
| Test browser | Opens a browser so you can check that filtering works. |
| License key | Shows the licence key. Tap to reveal it. |
| Purchase license | Buy a licence. |
Exit closes eGate. All settings stay in force.
Remove eGate removes device ownership and turns off every restriction. It can't be undone without a factory reset. Only use it when a device is leaving your control.

A good order to work in: