Join our Newsletter — 33% off our NHI Course
Home› Glossary› Governance, Ownership & Risk› Default Home Application
Governance, Ownership & Risk

Default Home Application

← Back to Glossary
By NHI Mgmt Group Updated November 3, 2026 Domain: Governance, Ownership & Risk

The default home application is the app that opens when a user presses the Home button or performs the home gesture on a device. It sets the device's primary launcher or starting screen, and administrators may control it through mobile device management to keep the user interface and app access consistent.

What the default home application does

The default home application is the device’s launcher and starting screen, so it shapes what users see first after pressing Home or using the home gesture. In practice, it is part of the device’s control plane for everyday access, because it determines the baseline user interface, app discovery, and how consistently the device presents itself across sessions.

That makes the setting more than a cosmetic preference. On managed devices, the chosen home app can influence which apps are surfaced, whether the user lands in a restricted workspace, and how tightly the organisation can standardise the user experience across a fleet.

Why organisations control it with mobile management

Administrators often set the default home application through mobile device management so the device behaves predictably. This is useful when a business wants a kiosk-like experience, a branded launcher, or a constrained set of approved apps rather than an unconstrained consumer home screen.

Control over the home app also reduces configuration drift. If users can change the launcher freely, they can bypass the intended workflow, hide approved tools from view, or land in interfaces that expose more options than the organisation expects.

When the launcher is managed centrally, the device can present a uniform entry point even if different user groups or roles use the same hardware. That consistency is especially important where supportability, compliance, or task completion depends on a known starting state.

Security and access implications

The default home application is not a security boundary by itself, but it does affect how easily users can reach apps, settings, and content. A permissive launcher can make unmanaged shortcuts, consumer apps, or device settings easier to access, while a controlled launcher can limit accidental or policy-breaking navigation.

Because the launcher sits at the front of the user journey, it also affects exposure to social engineering and misuse on shared or supervised devices. If the home screen reveals too many options, the risk is less about the launcher code itself and more about how it changes the device’s practical access model.

In managed environments, the home app is therefore a governance control as much as a usability choice. It helps define what the user should be able to reach first, what should stay hidden, and how tightly the device reflects organisational policy.

When the home app becomes a governance problem

Problems usually arise when the launcher choice is inconsistent, user-changeable, or not aligned with the device’s operating model. A mis-set home app can create support noise, confuse users, surface the wrong app set, or break assumptions made by downstream mobile policies.

It can also create fragmentation across a fleet. If different teams or devices use different launchers without a clear standard, the organisation loses predictability in training, support, and enforcement of approved workflows.

For that reason, the home application should be treated as part of endpoint governance, not just a preference setting. Its main value is the stable starting context it gives to the rest of the mobile experience.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST CSF 2.0 and CIS Controls v8 set the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.

FrameworkControl / ReferenceRelevance
NIST CSF 2.0PR.AA-05 — Identity Management, Authentication and Access ControlLauncher control shapes how users reach device apps and access paths.
Recommendation — Standardise the device start screen to enforce consistent, least-privilege access paths.
CIS Controls v8CIS-4 — Secure Configuration of Enterprise Assets and SoftwareDefault launcher selection is a managed configuration on enterprise devices.
Recommendation — Lock the approved home application into the device baseline and prevent unauthorized changes.
ISO/IEC 27001:2022A.8.9 — Configuration managementHome app assignment is a device configuration that should be controlled and reviewed.
Recommendation — Document and control the approved launcher configuration for managed devices.

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.

NHIMG Editorial Note
Reviewed and updated by the NHIMG editorial team on November 3, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org