All articles
AndroidDevice OwnerLockdown
Lock Down Android with Device Owner (Prevent Uninstall & Bypass)
5 min read
A filter is only as strong as your ability to not turn it off. The honest truth about focus tools is that the person you are protecting yourself from is you, ten minutes from now, feeling restless. If disabling the blocker takes two taps, it eventually will.
What Device Owner status is
Android has a privileged management tier called Device Owner. A genuine Device Owner app can:
- Prevent its own uninstallation.
- Block being force-stopped or having its data cleared.
- Lock settings such as Private DNS (see the Private DNS lock guide) so they cannot be changed.
- Keep its policy in force across reboots.
This uses official Android APIs — no root, no exploits. It is the same mechanism a managed work phone uses, pointed at your own rules.
Device Owner can only be set on a device with no accounts yet — in practice, a freshly set-up or factory-reset phone, before you add your Google account. That friction is the point.
Setting it up
- 1. Start clean. Factory reset (or use a new device) and do not sign in to Google yet.
- 2. Enable USB debugging. Tap Build number seven times in Settings to unlock Developer Options, then turn on USB debugging and connect to a computer.
- 3. Promote the app to Device Owner with one command.
provision-device (ADB)
# Confirm the computer can see the device.
adb devices
# Promote SafeGuard to Device Owner.
# Use the exact package/receiver from the app's docs.
# Only works on a device with NO existing accounts.
adb shell dpm set-device-owner com.safesurf.guard/.AdminReceiver- 4. Sign in and configure. Now add your Google account, then build your rules and turn on the protections you want.
Prefer not to touch a terminal? The full step-by-step is in our installation guide.
Lockdown stops casual bypass, but you will still sometimes want a legitimate exception. The clean way to allow that without rebuilding an off-switch is a delay mechanism.
Try SafeSurf & SafeGuard — free open beta
On-device filtering, a lockable Private DNS, Device Owner lockdown and a built-in delay timer — no VPN, no battery tax. Free during the open beta.