The default home application is the app that opens when a user presses the Home button or performs the home gesture on a device. It sets the device's primary launcher or starting screen, and administrators may control it through mobile device management to keep the user interface and app access consistent.
What the default home application does
The default home application is the device’s launcher and starting screen, so it shapes what users see first after pressing Home or using the home gesture. In practice, it is part of the device’s control plane for everyday access, because it determines the baseline user interface, app discovery, and how consistently the device presents itself across sessions.
That makes the setting more than a cosmetic preference. On managed devices, the chosen home app can influence which apps are surfaced, whether the user lands in a restricted workspace, and how tightly the organisation can standardise the user experience across a fleet.
Why organisations control it with mobile management
Administrators often set the default home application through mobile device management so the device behaves predictably. This is useful when a business wants a kiosk-like experience, a branded launcher, or a constrained set of approved apps rather than an unconstrained consumer home screen.
Control over the home app also reduces configuration drift. If users can change the launcher freely, they can bypass the intended workflow, hide approved tools from view, or land in interfaces that expose more options than the organisation expects.
When the launcher is managed centrally, the device can present a uniform entry point even if different user groups or roles use the same hardware. That consistency is especially important where supportability, compliance, or task completion depends on a known starting state.
Security and access implications
The default home application is not a security boundary by itself, but it does affect how easily users can reach apps, settings, and content. A permissive launcher can make unmanaged shortcuts, consumer apps, or device settings easier to access, while a controlled launcher can limit accidental or policy-breaking navigation.
Because the launcher sits at the front of the user journey, it also affects exposure to social engineering and misuse on shared or supervised devices. If the home screen reveals too many options, the risk is less about the launcher code itself and more about how it changes the device’s practical access model.
In managed environments, the home app is therefore a governance control as much as a usability choice. It helps define what the user should be able to reach first, what should stay hidden, and how tightly the device reflects organisational policy.
When the home app becomes a governance problem
Problems usually arise when the launcher choice is inconsistent, user-changeable, or not aligned with the device’s operating model. A mis-set home app can create support noise, confuse users, surface the wrong app set, or break assumptions made by downstream mobile policies.
It can also create fragmentation across a fleet. If different teams or devices use different launchers without a clear standard, the organisation loses predictability in training, support, and enforcement of approved workflows.
For that reason, the home application should be treated as part of endpoint governance, not just a preference setting. Its main value is the stable starting context it gives to the rest of the mobile experience.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0 and CIS Controls v8 set the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | PR.AA-05 — Identity Management, Authentication and Access Control | Launcher control shapes how users reach device apps and access paths. |
| Recommendation — Standardise the device start screen to enforce consistent, least-privilege access paths. | ||
| CIS Controls v8 | CIS-4 — Secure Configuration of Enterprise Assets and Software | Default launcher selection is a managed configuration on enterprise devices. |
| Recommendation — Lock the approved home application into the device baseline and prevent unauthorized changes. | ||
| ISO/IEC 27001:2022 | A.8.9 — Configuration management | Home app assignment is a device configuration that should be controlled and reviewed. |
| Recommendation — Document and control the approved launcher configuration for managed devices. | ||
Related resources from NHI Mgmt Group
- Why do default framework settings create hidden attack surface for application teams?
- Why do vulnerabilities in non-default branches create blind spots in application security programmes?
- What breaks when application teams rely on default assumptions instead of testing parameter handling and class binding behaviour?
- What is the difference between security by design and security by default in financial application development?
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on November 3, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org