Known limitations & accepted risks

Brickify is designed to make bypassing meaningfully hard — not impossible. Here's an honest, platform-by-platform account of what is and isn't protected against.

← Back to Information
Jump to Android → Jump to iOS →

Android

Brickify on Android can be set up in two ways. Both block apps in exactly the same way. The difference is how hard Brickify is to remove:

Maximum protection (Device Owner)

The lighter Device Admin permission on its own can always be switched off via Settings by anyone with physical access, with no password needed. Device Owner closes that gap, which is why this setup needs the extra step.

Accepted risks

Safe mode — Android's safe mode disables third-party services. Blocks will not be enforced while in safe mode. Parent email is warned.

ADB over USB — If USB debugging is enabled, someone with a PC could remove the app or disable services.

Amber risks (you have to help mitigate these)

Uninstalling the Play Store — Device Owner mode adds a barrier against Brickify itself being uninstalled, but not other apps like the Play Store. If it goes missing, treat that as a sign to check in — new installs would need to be sideloaded instead of using the Store.

New apps — Apps installed after setup are not automatically blocked. You will receive a notification and email when a new app is installed — add it to the block list if needed.

Factory reset — Still removes all restrictions, same as before Device Owner setup — a reset wipes the phone regardless of what's installed on it. Android's Factory Reset Protection (FRP) mitigates this; we recommend enabling FRP by adding a Google account and screen lock.

Web browsing isn't filtered — Brickify blocks the individual apps you choose, not websites or web content. Chrome, Firefox, Edge, and other browsers each need to be blocked separately — one browser left off the list is a way around the rest.

Hardened against

Uninstalling or force-stopping Brickify — installed as this phone's Device Owner, which has no Settings toggle at all. The only ways off it are a full factory reset, or Brickify's own in-app deactivation (PIN+second-factor gated, for legitimately retiring the app from a device). See the setup guide for what Device Owner mode involves.

Revoking the Accessibility permission — A background watchdog runs every 15 minutes. If the service is disabled while bricked, the screen is locked immediately.

Deleting the app — Not possible without a factory reset or Brickify's own gated deactivation (see above) — there's no "uninstall" to fall back on the way there is on iOS.

Standard mode (no factory reset)

Chosen on Brickify's first screen by tapping Continue without factory reset. Brickify still asks for Device Admin, but without Device Owner, Android lets anyone switch Device Admin off in Settings.

Accepted risks

Uninstalling Brickify — Anyone holding the phone can switch off Device Admin in Settings (no password needed) and then uninstall Brickify.

Switching off the Accessibility Service — While Device Admin is on, a background watchdog locks the screen within 15 minutes if the service is switched off while apps are being blocked. Once Device Admin has been switched off, nothing stops this.

Lock screen PIN isn't enforced — Brickify asks for a screen lock during setup, but only Device Owner can make Android require one.

Safe mode and ADB over USB — Same as maximum protection, above.

Amber risks (you have to help mitigate these)

Know when it's removed — Add an alert email during setup. You'll be emailed if Brickify stops checking in or Device Admin is switched off, which is what you'd see if someone removed it.

New apps and web browsing — Same as maximum protection, above.

Moving to maximum protection later — Needs a factory reset and the QR setup. There's no way to upgrade in place.

Still protected

Blocking and schedules — Work exactly the same as with maximum protection.

Stopping Brickify or changing what's blocked — Still needs your Brickify PIN and second factor inside the app.

iOS

Accepted risks

Restoring from iCloud backup — Restoring a pre-Brickify backup removes the app. See "Deleting the app" below for what this means in practice.

Amber risks (you have to help mitigate these)

Child knows your Screen Time passcode, Brickify PIN, or has access to your two-factor codes — Brickify's device hardening depends on these staying private. Don't share them with your child, or the protections below can be bypassed directly.

Child disables Brickify's Screen Time access — Settings → Screen Time → Apps with Screen Time Access can turn off Brickify's permission entirely. This is a low risk in practice since the toggle is buried several menus deep, but it's a known gap in Apple's own API (only partially fixed, opt-in, from iOS 26.4) — no passcode is required to use it. Brickify emails you within the hour if this happens while a block is supposed to be active.

Factory reset — Removes all restrictions. A Screen Time passcode (set up during Brickify's setup flow) prevents a reset being initiated through Settings.

New app installs — iOS doesn't let any app detect newly installed apps. Block the App Store itself in Brickify (selected by default) to stop new installs at the source.

Web browsing isn't filtered — Brickify blocks the individual apps you choose, not websites or web content. Blocking Safari doesn't block Chrome, Firefox, or any other installed browser — each needs to be blocked separately, and in-app browsers inside other unblocked apps aren't affected at all.

Hardened against

Deleting the app — The setup guide walks you through enabling a Screen Time passcode with app deletion blocked. But even if it does happen: blocks remain in place either way — iOS enforces Family Controls restrictions at the OS level, independently of whether Brickify is still installed. Deleting Brickify also removes your ability to unbrick, though, which is worse for the child, not better. The only way out at that point is a factory reset.

If your child is under 13

Apple's own free Family Sharing — a managed Child Account, with Screen Time controlled remotely from your own device — already closes the Screen Time access gap above: the toggle a child could otherwise flip lives on your phone, not theirs. Brickify exists mainly for the harder case: teens, who are far less likely to still be on a fully parent-managed account, and who need Brickify's dedicated brick/unbrick flow and cross-platform support most.

Locked out?

Recovery codes, contacting support, and factory reset as a last resort — see Help for the full walkthrough.