How to Set Up a Separate Work Profile on Android (No Root)
16 min read
Learn step‑by‑step how to create a secure work profile on Android without rooting, keep personal and corporate data separate, and manage apps safely.
October 13, 2026 19:00
Many users need a clean way to keep corporate apps, emails, and data away from their personal apps. Android’s work profile creates a sandboxed space that looks and behaves like a second user account, but it is managed by the system and can be turned on or off at any time. This tutorial shows you how to enable a work profile using the native Android Enterprise feature and, for devices that lack the built‑in option, how to achieve the same isolation with the open‑source Shelter app.
Before you start
- Charge your device to at least 50 % or keep it plugged in.
- Connect to a stable Wi‑Fi network – the initial enrollment may download a few megabytes.
- Back up important personal data (photos, contacts, messages) using Google Drive or
adb backup in case you need to reset the device later.
- Make sure your device runs Android 5.0 (Lollipop) or newer; work profiles are officially supported from Android 5.0 onward.
- If your device is managed by an organization (MDM), the work profile may already be provisioned – in that case you only need to sign in to the corporate apps.
Understanding the work profile concept
A work profile is not a separate Android installation. It is a managed user space that enforces:
- Separate app data directories (e.g.,
/data/user/0/com.example.app vs /data/user/10/com.example.app).
- Distinct notification channels – work‑profile notifications appear in a separate shade.
- Policy enforcement (password rules, encryption, app whitelisting) if an enterprise admin is present.
- Easy toggling: you can disable the profile entirely, which instantly hides all work apps and data.
Because the profile lives on the same OS, performance is identical to your main user, and no rooting is required.
Method 1 – Using Android’s built‑in Work Profile (Enterprise Enrollment)
This method works on most stock Android devices (Pixel, OnePlus, Samsung One UI, etc.) that expose the “Add work profile” option. The steps differ slightly between Android 10/11 and earlier versions, so we list the stable menu paths for each major branch.
Step 1 – Open Settings and locate the work‑profile entry
- Open Settings.
- For Android 10‑12: tap Accounts → Add account → Work profile.
If you do not see “Work profile”, look under Accounts → Advanced → Set up work profile.
- On Android 9 and earlier, the path is Settings → Users & accounts → Multiple users → Add work profile.
If the option is missing, see the troubleshooting section at the end of this guide.
Step 2 – Start the provisioning flow
- After tapping “Work profile”, Android launches the Android Enterprise provisioning wizard.
- Select Set up for personal use unless your employer provides a QR code or token.
- Read the consent screen – the system will create a separate profile and generate a managed Google Play store for it.
- Tap Continue to let Android create the profile. This may take 10–20 seconds.
When the wizard finishes, you will see a new “Work” tab in the app drawer, marked with a briefcase icon.
Step 3 – Add apps to the work profile
- Open the Play Store. At the top of the screen you’ll see a toggle that says Switch to Work profile. Tap it.
- Sign in with the same Google account you use for personal apps (or a separate one if you prefer).
- Search for the corporate apps you need – for example,
Microsoft Outlook, Slack, or a custom MDM client.
- Install them as you would any other app. Each installation lands in the work‑profile space, isolated from the personal side.
Work‑profile apps appear with a small briefcase badge in the launcher, making it easy to tell them apart.
Step 4 – Configure basic security for the work profile
- Open Settings → Security & privacy → Work profile.
- Enable a work‑profile‑specific screen lock (PIN, pattern, or password). This adds a second layer of protection – the work profile can be locked while the personal side stays unlocked.
- Optionally enable Biometric unlock for work profile if your device supports it.
- Turn on Work profile data backup if you want Google to back up work apps separately (useful for device migration).
These settings ensure that, even if someone gains access to your phone, they cannot open corporate apps without the work‑profile lock.
Step 5 – Switching between personal and work contexts
Android provides three ways to move between profiles:
- App drawer tabs: Swipe left/right between “Personal” and “Work”.
- Quick Settings tile: Pull down the notification shade, edit tiles, and add the “Work profile” toggle. Turning it off hides all work apps instantly.
- Notification shade: Work‑profile notifications are grouped under a separate header, making it clear which profile they belong to.
Practice switching a few times so the workflow becomes second nature.
Method 2 – Creating a Work‑like Profile with Shelter (Open‑Source)
If your device’s OEM has removed the native work‑profile option (common on some Chinese ROMs), you can achieve comparable isolation using Shelter. Shelter uses Android’s managed profile API under the hood, but it presents the UI itself, so the feature works on any Android 5.0+ device.
Step 1 – Install Shelter
- Open the Google Play Store (or an alternative trusted store).
- Search for
Shelter and install it.
Note: Shelter is free, open‑source, and does not require any special permissions beyond what Android asks for during profile creation.
Step 2 – Create a managed profile from within Shelter
- Launch Shelter. The first screen explains the concept; tap Create a work profile.
- Android will show a system dialog: “Create a work profile?”. Confirm.
- Shelter will automatically switch to the new profile and display its own app drawer.
At this point you have a sandboxed environment that behaves exactly like a native work profile.
Step 3 – Import apps into Shelter
- In Shelter’s main screen, tap the + Add apps button.
- Select the apps you want to run inside the profile – you can choose from any installed app on the device.
For corporate use, you might add Google Drive, Microsoft Teams, or a custom VPN client.
- Tap Clone. Shelter copies the selected apps into the work‑profile container, creating isolated data directories.
Cloned apps retain their icons but display a small “S” badge indicating they run inside Shelter.
Step 4 – Manage the Shelter profile
- Locking: Open Shelter → Settings → Lock work profile. This adds a PIN or pattern that must be entered before any Shelter app can launch.
- Backup: Shelter can export the entire profile as an
.apk bundle using the “Export profile” option. Store the bundle on a secure cloud drive for later restoration.
- Uninstalling: To remove the profile, go to Settings → Accounts → Work profile → Remove work profile. Shelter will prompt you to delete all cloned data.
Comparing the two approaches
| Feature | Native Work Profile | Shelter (Managed Profile) |
| System integration | Full OS‑level integration; appears as a separate tab in the launcher. | Runs inside the Shelter app; appears as a sub‑launcher. |
| Enterprise policy support | Can receive MDM policies (password, app whitelist, etc.). | No official MDM support; policies must be enforced manually. |
| App cloning | Automatic – you install apps directly into the work profile. | Manual – you clone existing apps via Shelter UI. |
| Backup & restore | Google backup per profile (if enabled). | Export/import of the whole profile via Shelter. |
| Device compatibility | May be hidden by OEM customizations. | Works on any Android 5.0+ device. |
Practical example: Using a work profile for corporate email
Suppose you need to keep your corporate Outlook email separate from your personal Gmail. Here’s a quick walkthrough using the native work profile:
- Enable the work profile as described in Method 1.
- Switch to the work profile (quick‑settings tile → Work profile on).
- Open the Play Store (now in work mode) and install
Microsoft Outlook.
- Launch Outlook, sign in with your corporate credentials, and accept any device‑management prompts.
- All corporate emails, contacts, and calendar entries now live inside the work profile. They never appear in the personal Gmail app, and the work‑profile lock keeps them safe.
If you later leave the company, simply disable or remove the work profile – all corporate data vanishes instantly without touching your personal apps.
Troubleshooting
1. Work profile option is missing
- Check Android version: Work profiles are unavailable on Android 4.4 and below.
- OEM restriction: Some manufacturers (e.g., older Xiaomi MIUI) hide the feature. In that case, use Shelter (Method 2).
- Device admin conflict: If a third‑party app has been granted device‑admin rights that block profile creation, go to Settings → Security → Device admin apps and revoke the offending app.
2. Apps won’t install in the work profile
- Make sure you are in the work‑profile Play Store (the top‑right badge will say “Work”).
- Some apps are not allowed in managed profiles (e.g., certain game launchers). Look for an error message that mentions “not compatible with work profile”.
- If using Shelter, verify that the app you are cloning does not rely on device‑admin privileges – those cannot be transferred.
3. Work profile notifications keep appearing on the personal shade
- Open Settings → Apps → Notifications → Work profile and toggle “Show on personal profile” off.
- On some devices, you need to disable the “Merge notifications” option under Settings → Sound & vibration → Advanced → Merge notifications.
4. Work profile won’t turn off
- Use the Quick Settings tile to toggle it off. If the tile is missing, add it via Settings → Quick Settings → Edit.
- If the profile stays on after a reboot, check for a corporate policy that enforces it. You may need to contact your IT admin.
Safety warnings
- Data loss risk: Removing a work profile permanently deletes all apps and data inside it. Export any needed files before removal.
- Privacy: A work profile can see device identifiers (IMEI, serial) just like the personal side. If you are using a personal device for corporate work, be aware of potential monitoring.
- Battery impact: Running two active profiles can increase background activity. Disable the work profile when not needed to conserve battery.
Wrapping up
Whether you use the native Android Enterprise work profile or the open‑source Shelter app, you now have a reliable way to keep personal and professional data separate without rooting your device. The steps above cover initial provisioning, app installation, security hardening, and common pitfalls. By following the workflow, you’ll protect corporate information, reduce the risk of accidental data leaks, and enjoy a cleaner, more organized Android experience.