Shared kiosk devices: are your controls keeping up?

TL;DR: Shared kiosk devices are still vulnerable when application lockdown is treated as the only control, because user authentication, session isolation, and access restrictions all have to work together, according to Hexnode. For identity and access teams, the real governance challenge is preventing one user’s access from becoming the next user’s exposure window.

Editorial analysis by NHI Mgmt Group, based on content published by Hexnode: “Shared Kiosk Devices: Configuring Multi-User Access on Locked-Down Fleets”.

Key questions

Q: What breaks when shared kiosk access has no session isolation?

A: Without session isolation, the next user can inherit authenticated access from the previous user, even if the kiosk is locked down.

Q: When should organisations prioritise individual user accounts over shared kiosk logins?

A: Prioritise individual accounts when actions must be attributable, when users access sensitive records, or when shared workflows cross shifts and departments.

Q: What are the signs that shared kiosk controls are failing?

A: Common warning signs include users seeing previous content after login, sessions remaining active after logout, repeated authentication failures during shift changes, and support teams clearing devices manually.

Practitioner guidance

• Define the shared-device access model Map whether each workflow needs individual OS accounts, application logins, or temporary guest sessions before configuring kiosk controls.
• Enforce session termination at two layers Require both device-side logout and application-side session expiry so cached browser state does not preserve access after handoff.
• Test handoffs under real shift-change conditions Simulate logout, abandoned sessions, restarts, and network loss to confirm the next user cannot see prior data or functions.

Bottom line: Shared kiosk risk comes from the handoff between users, where leftover sessions and cached state can expose records or functions to the next person.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →