Fixed: web pages now follow the device's light or dark mode. A site whose theme follows the device (Home Assistant's Auto theme, for example) was always dark in NeatKiosk, whatever the iPad was set to: the Status bar text setting switched the whole app into dark or light mode and the page was told the same. The status bar colour is now set on its own, and every page sees the device's Display & Brightness setting and switches with it. Also: over MDM, the allow and deny lists can now be sent as one string with hosts separated by commas (for consoles without an array type, such as Intune's configuration designer), and * in the allowlist allows every host while the deny list still wins.

Fixed: on some sites, dropdown menus stopped opening once a page zoom below 100 % was set. The zoom took effect a moment after the page had started, so a site's own code had already measured the screen as a phone and set up its menus the phone way while the layout switched to the tablet version. The zoom now applies before the page loads, the way Safari's page zoom does, and a site sees one consistent width from its first line. At 100 % nothing changes.

Fixed: page zoom below 100 % left a blank strip. In 1.2.3 a page zoom of 80 % shrank the page inside the same screen area, so a page built to fill the screen filled 80 % of it. NeatKiosk now does what Safari's page zoom does: it gives the page more room to lay itself out and scales the result to fit, so at 50 % the page is laid out twice as wide and at 150 % two thirds as wide, and it always fills the screen edge to edge, through rotation too. Changing the zoom on a running kiosk still applies without reloading the page.

New: page zoom. A page built for a desktop screen is unreadable at its own size on an iPhone, and the only knob until now was pinch-to-zoom, which a kiosk usually has switched off. The Lockdown step now has a "Page zoom" setting, from 50 % to 200 %, that scales every page the kiosk loads and is fixed so visitors cannot change it. For fleets it is the new Managed App Configuration key pageZoomPercent (see neatkiosk.com/deployment). Changing it on a running kiosk applies in place without reloading the page.

Fixed: screen mirroring. Mirroring your iPhone or iPad to a TV while NeatKiosk was open showed only the kiosk's first page on the TV. NeatKiosk was drawing its own separate copy on the TV instead of letting iOS mirror the device; it now declines that, and the TV shows exactly what the device shows. Fixed: a way out of the app lock. If your MDM lets NeatKiosk lock the iPad itself (Autonomous Single App Mode), only the app can end that lock, and until now it never did. Settings (hold the top-left corner, enter your PIN) now shows "Unlock device" while the lock is on. Tap it, leave with the Home gesture, and the kiosk locks itself again the next time it is opened. Reset kiosk ends the lock too. If the lock is Guided Access or MDM Single App Mode instead, the screen says so and tells you what to do.

Managed configuration applies live. If your iPads are set up through an MDM, a changed App Configuration now reaches a running kiosk within seconds, with no reinstall and no reset: new URL, allow list, idle timing, attract page, PIN. Settings on a managed device says so, and Reset kiosk reloads the pushed configuration. A push that cannot be read never disturbs a working kiosk, and a kiosk you configured by hand on the device is never overwritten by a push. Updating a fleet? iPads set up from MDM by 1.1.1 or earlier did not record where their configuration came from, so they behave as hand-configured until you Reset kiosk on them once (or reinstall the app). From then on they follow every push.

Fixed: allowing more than one site. The allowlist and denylist boxes now take one host per line the way the hint always promised. Return starts a new line, a list pasted from your notes keeps its lines, and hosts separated by commas, spaces or semicolons all work. Before this fix a pasted list could collapse into a single rule that matched nothing. Tip: a bare host such as example.com allows exactly that host. Write *.example.com to include www.example.com and every other subdomain. Your home site is always allowed and never needs to be in the list.

When nobody has touched the kiosk for a while, NeatKiosk can now cover the screen with a page you choose — a slideshow, a looping video, an announcement — and return to the kiosk the moment anyone touches it. You point it at a URL, so you can build whatever you like in HTML and change it any time without touching the device. It's optional and off by default. Sound is off unless you turn it on. It works whether or not you use the idle reset. And it costs nothing, like everything else in NeatKiosk. To turn it on: during setup, or from Settings → Change settings, switch on "Show a page when the kiosk is idle" and enter the page's address. New: scheduled page refresh. Your page can reload on a schedule — every 15 minutes, every hour, or whatever interval you choose — so a menu board, dashboard, or timetable stays current without anyone touching the device. It's not the idle reset: cookies and logins survive, and if someone is actively using the kiosk a pending refresh waits until they're done. To turn it on: during setup, or from Settings → Change settings, enter a refresh interval. A dropped connection no longer hides your page. If the network goes down while your page is on screen, NeatKiosk keeps showing it and displays a small "Offline — retrying" badge in the corner, instead of covering everything with an error message. It reconnects on its own as soon as the network returns. The full error screen still appears when there is nothing to show, such as when the first page never loaded.

Links that request a new window (target="_blank" or window.open) now load in the existing window instead of being discarded. NeatKiosk is a single-window kiosk browser with no tab interface, and it previously returned no web view for such requests, so those navigations were dropped silently. They are filtered by the same URL allow/deny rules as every other navigation, and a popup still requires a user gesture — a page cannot open a window on its own.

A bug-fix release for kiosks that run unattended, and for anyone who changes their settings after the first setup. Settings apply the moment you save them Editing your kiosk used to have no effect until the app was closed and reopened. Changing the website is the clearest case: the kiosk carried on showing the old site, and after the next idle reset it could end up stuck there entirely. The idle reset time, "Warn before reset", your allow and deny lists, the lockdown switches and "Keep screen awake" were all affected the same way. Your changes now take effect straight away. Your screen comes back in the morning If you use the night blackout schedule without "Force full brightness", the screen went dark at the start of the blackout — and stayed dark. The only way to get it back was to raise the brightness by hand on the device. NeatKiosk now remembers how bright your screen was, puts it back when the blackout window ends, and returns to full brightness if the app restarted overnight. Nothing carries over between visitors Idle reset now clears browsing history along with cookies and site data, so nobody can reach the previous visitor's pages with the Back button. "Reset kiosk" now clears the previous site's cookies and storage too, instead of leaving them on the device for the next kiosk you set up. Also fixed • The app no longer closes when a page asks for the microphone. NeatKiosk now refuses microphone requests outright — a kiosk stands unattended in public, and a live microphone is not something it should hand out silently. Camera requests, for scanning QR codes, still work. • Allow and deny rules with capital letters in the path now match. Previously a rule like example.com/Admin quietly matched nothing at all. For managed deployments • New MDM key: settingsPIN. A device set up from MDM never runs the setup wizard, so until now it had no Settings PIN and the hidden admin exit opened straight into Settings. Push settingsPIN and the PIN is hashed on arrival. • Out-of-range blackout times are ignored instead of silently switching the schedule off. Thank you to the customers who reported these.

Minor bug fixes