Lock a Mac to one website

There’s no built-in macOS kiosk mode — unlike iPadOS, the Mac has no Guided Access or Single App Mode you can just switch on. So when you’ve got a Mac that needs to show one website to the public — an exhibition screen, a product demo at a trade-show booth, a reception display, digital signage — and visitors have to be able to use it without quitting the app, wandering off-site, or reaching the desktop, you have to build that lockdown yourself. Here’s how, and the options in order of pain.

The native options (and where they stop)

Apple Configurator — Single App Mode

Free, but you supervise the Mac over USB, build a configuration profile, and it locks to an app, not a website. Fiddly to set up and easy to get subtly wrong.

Guided Access

iPad and iPhone only — it doesn’t exist on macOS, so it’s off the table for a Mac kiosk.

Full-screen Safari + hiding the Dock

Cosmetic, not escape-proof. Cmd-Tab, Spotlight, screenshots and keyboard shortcuts all still work, so a curious visitor is one keystroke from your desktop.

MDM (Jamf, Hexnode, Scalefusion, KioWare…)

Powerful and genuinely good for fleets — but it’s a subscription and a lot of overhead for a single screen. Overkill when you just need one Mac showing one page.

What “locked down” actually needs

A screen you can hand to the public has to do all of this — not just look full-screen:

• Take over the whole screen with one website, fullscreen.
• Block the escapes: Spotlight, Cmd-Tab, Cmd-Q, Mission Control, screenshots and media keys.
• Lock to the domain so off-site links don’t navigate away.
• Survive a restart or power cut — auto-login and auto-start back into the site.
• Leave exactly one deliberate way out (a password), so a visitor can’t stumble on it.
• Optionally: scroll-only mode, on-screen back/forward/home, and pick which display runs it.

The simple way: Canned Web

Canned Web is a native Mac app that does every point on that list. Enter a URL, hold ⌘⇧S to seal, and hand over the Mac — it’s locked to your site until you hold the shortcut again and type your exit password. No MDM, no configuration profiles, no subscription, no cloud, and nothing phones home.

It works with a live URL or a website folder stored on the Mac (fully offline), runs on macOS 14.0 or later on Apple Silicon or Intel, and it’s a one-time €49 per machine — with a 14-day free trial so you can seal a real screen before you buy.