A computer-implemented method comprising: identifying, by a computing device, that an application program installed on the computing device is assigned to a profile for an organization; identifying, by the computing device, that the profile for the organization requires a passcode to allow access to the application program; providing, by the computing device as a result of having identified that the profile for the organization requires the passcode to allow access to the application program, a user interface with which user input is able to specify whether the computing device should use separate passcodes to unlock the computing device and provide access to the application program; receiving, by the computing device and as a result of providing the user interface, first user input that specifies that the computing device is to use a single passcode to both unlock the computing device and provide access to the application program, confirming whether the single passcode complies with passcode restrictions defined in the profile for the organization and, if the single passcode does not comply with the passcode restrictions defined in the profile for the organization: providing, by the computing device, another user interface requesting user input of a new passcode which does comply with the passcode restrictions defined in the profile for the organization, and receiving user input of a new passcode, which does comply with the passcode restrictions defined in the profile for the organization, that the computing device is to use as the single passcode to both unlock the computing device and provide access to the application program; receiving, by the computing device, after the first user input has specified that the computing device is to use the single passcode and while the computing device is locked, second user input that specifies the single passcode to both unlock the computing device and provide access to the application program, and as a result, unlocking the computing device; and receiving, by the computing device and after the computing device has unlocked, user input that selects a user interface element to activate the application program, and as a result, activating the application program without requesting that user input provide a passcode. identifying, by a computing device, that an application program installed on the computing device is assigned to a profile for an organization; identifying, by the computing device, that the profile for the organization requires a passcode to allow access to the application program; providing, by the computing device as a result of having identified that the profile for the organization requires the passcode to allow access to the application program, a user interface with which user input is able to specify whether the computing device should use separate passcodes to unlock the computing device and provide access to the application program; receiving, by the computing device and as a result of providing the user interface, first user input that specifies that the computing device is to use a single passcode to both unlock the computing device and provide access to the application program, confirming whether the single passcode complies with passcode restrictions defined in the profile for the organization and, if the single passcode does not comply with the passcode restrictions defined in the profile for the organization: providing, by the computing device, another user interface requesting user input of a new passcode which does comply with the passcode restrictions defined in the profile for the organization, and receiving user input of a new passcode, which does comply with the passcode restrictions defined in the profile for the organization, that the computing device is to use as the single passcode to both unlock the computing device and provide access to the application program; providing, by the computing device, another user interface requesting user input of a new passcode which does comply with the passcode restrictions defined in the profile for the organization, and receiving user input of a new passcode, which does comply with the passcode restrictions defined in the profile for the organization, that the computing device is to use as the single passcode to both unlock the computing device and provide access to the application program; receiving, by the computing device, after the first user input has specified that the computing device is to use the single passcode and while the computing device is locked, second user input that specifies the single passcode to both unlock the computing device and provide access to the application program, and as a result, unlocking the computing device; and receiving, by the computing device and after the computing device has unlocked, user input that selects a user interface element to activate the application program, and as a result, activating the application program without requesting that user input provide a passcode.