What Are Restricted Settings?
Restricted Settings is a security feature introduced in Android 13 that blocks sideloaded apps (apps installed outside the Google Play Store) from accessing sensitive permissions like Accessibility Services and Device Admin.
The CleanBrowsing app uses these permissions to:
- Accessibility Services — Automatically configure Android's Private DNS settings and prevent unauthorized changes to DNS filtering
- Device Admin — Prevent the app from being uninstalled without authorization
This restriction applies to Android 13, 14, 15, and later. If you're running Android 12 or earlier, you won't encounter this issue and can skip this guide.
Important: The "Allow restricted settings" option does not appear by default. You must first trigger the restriction by attempting to enable the permission. This is the step most guides miss.
Step 1: Trigger the Restriction
Before Android will show you the "Allow restricted settings" option, you must first attempt to enable the restricted permission and get blocked. This is how Android registers that the app needs the override.
- Open your device Settings
- Go to Accessibility
- Look under Installed apps (or Downloaded apps / Installed services depending on your device)
- Find CleanBrowsing and try to toggle it on
- You will see a message: "Restricted setting — For your security, this setting is currently unavailable"
- Dismiss the dialog — this triggers Android to expose the override option
If CleanBrowsing does not appear under "Installed apps" in Accessibility settings, uninstall the app and reinstall it by tapping the APK file from your file manager (not via ADB). Android needs to register the app as sideloaded for the restricted settings flow to work.
Step 2: Allow Restricted Settings
Now that you've triggered the restriction, the "Allow restricted settings" option will be available on the App Info page:
- Go to Settings > Apps (or Apps & notifications)
- Find and tap CleanBrowsing
- Tap the three-dot menu (⋮) in the top-right corner
- Select "Allow restricted settings"
- Confirm with your PIN, pattern, or fingerprint
Quick alternative: Long-press the CleanBrowsing app icon on your home screen, select "App info", then look for the three-dot menu.
If you don't see the three-dot menu or the option, see the device-specific instructions below for your manufacturer.
Step 3: Enable Accessibility and Device Admin
After allowing restricted settings, go back and enable the permissions:
- Go to Settings > Accessibility > Installed apps
- Find CleanBrowsing and toggle it on
- Tap Allow when prompted
- Press the Back button to return to the CleanBrowsing app
The app will then guide you through enabling Device Admin privileges. After toggling Device Admin on in the system settings, press the Back button to return to the app — Android does not navigate back automatically.
Note: After enabling Device Admin, you must press the Back button on your device to return to CleanBrowsing. The app will detect the permission was granted and automatically advance to the next step.
Samsung (One UI 5.x / 6.x / 7.x)
Samsung devices have several quirks with the restricted settings flow depending on the One UI version.
One UI 5.x (Android 13)
- First, trigger the restriction by going to Settings > Accessibility > Installed apps and trying to toggle CleanBrowsing on
- Dismiss the "Restricted setting" dialog
- Go to Settings > Apps > CleanBrowsing
- The three-dot menu (⋮) should now appear in the top-right corner
- Tap it and select "Allow restricted settings"
- Confirm with your fingerprint or PIN
- Go back to Accessibility > Installed apps and enable CleanBrowsing
One UI 6.x (Android 14)
On some One UI 6.x builds, the three-dot menu is replaced by a direct menu item on the App Info page. Scroll down on the CleanBrowsing App Info page to find "Allow restricted settings" as a visible option.
One UI 6.1.1+ (Auto Blocker)
Samsung introduced Auto Blocker on newer devices (Galaxy S24, Z Fold6, Z Flip6 and later). Auto Blocker blocks sideloading entirely and must be disabled first:
- Go to Settings > Security and privacy > Auto Blocker
- Turn Auto Blocker Off
- Then follow the standard restricted settings flow above
Samsung Battery Optimization
Samsung's battery optimization can stop CleanBrowsing's background services. To prevent this:
- Go to Settings > Apps > CleanBrowsing > Battery
- Select "Unrestricted"
Google Pixel (Stock Android 13-15)
Google Pixel devices follow the standard Android flow most consistently:
- Trigger: Go to Settings > Accessibility > Downloaded apps, try toggling CleanBrowsing on, and dismiss the restricted settings dialog
- Allow: Go to Settings > Apps > See all apps > CleanBrowsing, tap the three-dot menu (⋮), select "Allow restricted settings", confirm with PIN/fingerprint
- Enable: Go back to Accessibility > Downloaded apps and toggle CleanBrowsing on
Android 15 Note
Android 15 introduces Enhanced Confirmation Mode, which adds additional restrictions for sideloaded apps. The same flow still works, but you may see additional confirmation prompts.
Xiaomi (MIUI 14+ / HyperOS)
Xiaomi devices follow the standard Android flow but have additional battery and overlay quirks:
- Trigger: Go to Settings > Additional settings > Accessibility > Downloaded apps, try toggling CleanBrowsing on
- Allow: Go to Settings > Apps > Manage apps > CleanBrowsing, tap the three-dot menu (⋮), select "Allow restricted settings"
- Enable: Go back to Accessibility and toggle CleanBrowsing on
Xiaomi-Specific Issues
- Full-screen gesture overlay bug: If you see "An overlapping app is blocking access to settings" when trying to toggle accessibility, temporarily switch to button navigation: Settings > Display > Full screen display > Buttons. You can switch back after enabling the permission.
- Battery optimization: Xiaomi aggressively kills background services. Go to Settings > Apps > Manage apps > CleanBrowsing > Battery saver and select "No restrictions". Also add CleanBrowsing to the Autostart list in the Security app.
- HyperOS: Some HyperOS updates silently disable accessibility services. If filtering stops working after an update, re-enable the accessibility permission.
OnePlus (OxygenOS 13-15)
OnePlus follows the standard Android flow on OxygenOS 13 and 14:
- Trigger: Go to Settings > Accessibility > Installed services, try toggling CleanBrowsing on
- Allow: Go to Settings > Apps > App info > CleanBrowsing, tap the three-dot menu (⋮), select "Allow restricted settings"
- Enable: Go back to Accessibility and toggle CleanBrowsing on
OxygenOS 15 (Android 15)
OnePlus removed the three-dot overflow menu on OxygenOS 15, making the standard flow unavailable. Workaround:
- Install a session-based installer app like SAI (Split APK Installer) from the Play Store
- Use SAI to install the CleanBrowsing APK — this makes the system treat it as a store-installed app
- The restricted settings restriction will not apply, and you can enable accessibility normally
Oppo (ColorOS 13+)
Oppo follows the standard Android flow with a useful alternative path:
- Trigger: Go to Settings > Accessibility > Installed apps, try toggling CleanBrowsing on
- Allow: Go to Settings > Apps > App management > CleanBrowsing, tap the three-dot menu or scroll down to find "Allow restricted settings" as a direct menu item
- Enable: Go back to Accessibility and toggle CleanBrowsing on
Oppo Battery Management
Oppo is aggressive about killing background services. Configure both of these:
- Settings > Battery > App battery management > CleanBrowsing — select "Allow background activity"
- Disable "Auto-optimize" for CleanBrowsing
Motorola (Near-Stock Android)
Motorola uses near-stock Android, so the flow is identical to Google Pixel:
- Trigger: Go to Settings > Accessibility > Downloaded apps, try toggling CleanBrowsing on, dismiss the dialog
- Allow: Go to Settings > Apps > See all apps > CleanBrowsing, tap the three-dot menu (⋮), select "Allow restricted settings"
- Enable: Go back to Accessibility and toggle CleanBrowsing on
Motorola does not add any extra sideloading restrictions beyond stock Android, making this the most straightforward manufacturer for this process.
Troubleshooting
"Allow restricted settings" doesn't appear in the three-dot menu
- Make sure you triggered the restriction first (Step 1). The option is hidden until you attempt to enable the permission and get blocked.
- Try: open CleanBrowsing, close it, clear it from recent apps, then long-press the app icon and select "App info" — the menu should appear.
- On Samsung One UI 6.x+, the option may be a direct item on the App Info page instead of in the three-dot menu.
CleanBrowsing doesn't appear under Accessibility > Installed apps
- Uninstall the app and reinstall it by tapping the APK from your file manager (My Files, Files, etc.). Installing via ADB sometimes doesn't register the app correctly.
- On Samsung One UI 6.1.1+, check if Auto Blocker is enabled and disable it first.
The app doesn't return to CleanBrowsing after enabling Device Admin
This is expected behavior — Android does not automatically navigate back after you toggle Device Admin in the system settings. Press the Back button on your device to return to CleanBrowsing. The app will detect the change and advance to the next step.
Filtering stops working after a while
- Your device's battery optimization may be killing CleanBrowsing's background service. Go to Settings > Apps > CleanBrowsing > Battery and select "Unrestricted" or "No restrictions".
- On Xiaomi, also add CleanBrowsing to the Autostart list.
- On Oppo, disable Auto-optimize for CleanBrowsing.
Huawei / HarmonyOS
Huawei does not use the standard Android restricted settings flow. On older Huawei devices (HarmonyOS 3.x based on Android), permissions are managed through Settings > Apps > Apps > CleanBrowsing > Permissions. On HarmonyOS NEXT, sideloading is completely blocked — apps can only be installed via the Huawei AppGallery.