diff --git a/android/app/src/main/java/com/remotedisplay/player/MainActivity.kt b/android/app/src/main/java/com/remotedisplay/player/MainActivity.kt
index f0df12f..361e42b 100644
--- a/android/app/src/main/java/com/remotedisplay/player/MainActivity.kt
+++ b/android/app/src/main/java/com/remotedisplay/player/MainActivity.kt
@@ -22,6 +22,7 @@ import android.view.WindowManager
 import android.view.accessibility.AccessibilityManager
 import android.widget.ImageView
 import android.widget.TextView
+import android.widget.Toast
 import androidx.appcompat.app.AlertDialog
 import androidx.appcompat.app.AppCompatActivity
 import androidx.core.content.ContextCompat
@@ -72,10 +73,12 @@ class MainActivity : AppCompatActivity() {
     private var playbackStarted = false
 
     // Multi-tap BACK/ESC for hidden settings menu.
-    // Collect taps in a 2-second window; on expiry: 2 taps → settings, 3+ taps → exit.
+    // Collect taps in a 2-second window; on expiry: 2 taps → PIN → settings, 3+ taps → exit.
     private val backTapTimes = mutableListOf<Long>()
     private var backTapRunnable: Runnable? = null
     private val TAP_WINDOW_MS = 1800L
+    private val DEFAULT_SETTINGS_PIN = "0000"
+    private val PREF_SETTINGS_PIN = "settings_pin"
     // Connection-failure auto-prompt threshold.
     private var failureBannerShown = false
 
@@ -841,13 +844,42 @@ class MainActivity : AppCompatActivity() {
             backTapTimes.clear()
             when {
                 count >= 3 -> showExitDialog()
-                count == 2 -> showSettingsDialog()
+                count == 2 -> showPinDialog()
                 // count == 1 → ignored (kiosk)
             }
         }
         handler.postDelayed(backTapRunnable!!, TAP_WINDOW_MS)
     }
 
+    private fun showPinDialog() {
+        val prefs = getSharedPreferences("remote_display", MODE_PRIVATE)
+        val storedPin = prefs.getString(PREF_SETTINGS_PIN, DEFAULT_SETTINGS_PIN) ?: DEFAULT_SETTINGS_PIN
+
+        val input = EditText(this).apply {
+            inputType = android.text.InputType.TYPE_CLASS_NUMBER or android.text.InputType.TYPE_NUMBER_VARIATION_PASSWORD
+            hint = DEFAULT_SETTINGS_PIN
+            setSingleLine()
+        }
+        val container = FrameLayout(this).apply {
+            val pad = (16 * resources.displayMetrics.density).toInt()
+            setPadding(pad, pad, pad, 0)
+            addView(input)
+        }
+
+        AlertDialog.Builder(this)
+            .setTitle(getString(R.string.settings_pin_title))
+            .setView(container)
+            .setPositiveButton(android.R.string.ok) { _, _ ->
+                if (input.text.toString() == storedPin) {
+                    showSettingsDialog()
+                } else {
+                    Toast.makeText(this, getString(R.string.settings_pin_wrong), Toast.LENGTH_SHORT).show()
+                }
+            }
+            .setNegativeButton(android.R.string.cancel, null)
+            .show()
+    }
+
     private fun showSettingsDialog() {
         val serverUrl = config.serverUrl
         val connected = wsService?.isConnected() == true
diff --git a/android/app/src/main/res/values/strings.xml b/android/app/src/main/res/values/strings.xml
index 4318a7a..61cbcc4 100644
--- a/android/app/src/main/res/values/strings.xml
+++ b/android/app/src/main/res/values/strings.xml
@@ -5,7 +5,9 @@
     <string name="nothing_scheduled">Nothing scheduled right now</string>
     <string name="waiting_for_content">Waiting for content…</string>
 
-    <!-- Hidden settings menu (triggered by 2x BACK or ESC) -->
+    <!-- Hidden settings menu (triggered by 2x BACK or ESC, PIN-gated) -->
+    <string name="settings_pin_title">Enter PIN</string>
+    <string name="settings_pin_wrong">Wrong PIN</string>
     <string name="settings_title">Settings</string>
     <string name="settings_change_server">Change server URL</string>
     <string name="settings_reconfigure">Reconfigure device (re-pair)</string>