Recommended Andoff Settings

There are several ways to lock down your Android device once Andoff is installed. We recommend a combination of Andoff and Tech Lockdown settings.

Tech Lockdown Team

Now that you have your Android smartphone configure with Andoff, you will be able to make use of its features.

There are some features that we strongly recommend to enforce your device's connection to your DNS Content Policy:

Protect the Cloudflare One Agent and prevent it from being uninstalled or disabled.
Lock the VPN used on your smartphone to only use your filtered connection.
Block access to Android settings to prevent network settings from be changed.
Disable Factory Reset.

Recommended Tech Lockdown Settings

Install the Cloudflare One Agent

In addition to other apps that you want reinstalled, go ahead and search for the Cloudflare One Agent from the Play Store:

Install the app:

Connect your smartphone to your Content Policy through the app.

App Preferences

We strongly recommend disabling the filter switch on the Cloudflare One Agent:

You can change this by logging into the Tech Lockdown dashboard and going to Settings > App Preferences:

Recommended Andoff Settings

By default, Andoff uses a simplified screen to change settings:

You can change this to see all of the available options.

Turn on Advanced mode

Click on the gear icon near the top of the screen:

You should see a menu like this:

Make sure that advanced mode is turned on.

Hit the back button

Andoff's home screen should look have many more options available:

Block or Protect Apps

Tap on the Apps button:

You will see a list of currently installed apps on your smartphone. You have the option to either Block or Protect an app.

Under an app, tap the dropdown menu; you can mark an app as protected (meaning you can't uninstall it) or blocked (meaning you can't open it):

If you use Tech Lockdown's content filter, then we strongly recommend marking the Cloudflare One app as Protected:

You can further customize as needed, by either protecting or blocking specific apps.

If you try to uninstall or disable a Protected app, you won't be able to uninstall the app. You may still see the option to uninstall that app, but your smartphone will show an error and it will fail:

Lock VPN

We recommend setting this to Cloudflare Zero Trust.

Choose the Lock VPN dropdown and choose Locked to app:

Select the Cloudflare One option from the list. You should Cloudflare One listed:

Protect Private DNS settings

You can choose to enable this if you've connected your device to your Content Policy manually. We recommend enabling the feature anyway, so DNS settings can't be overwritten later.