Admin Password Sign-In Without Blocking Workers

You run the schedule, pull the reports, and answer to a grant officer or a payroll deadline. Your volunteers, servers, or tutors just need to record hours and get back to work. Those are two different jobs, and Kangaroo Clock keeps them separate on purpose. Here are the questions people actually ask about how admin sign-in works and why it never reaches the people clocking in.

Who actually needs a password?

Only admins need a way to sign in, and Kangaroo Clock uses a magic link rather than a stored password. When you go to sign in, you enter your email and get a link that logs you into your workspace. That link is the credential. There is nothing to memorize, nothing to rotate, and no shared spreadsheet of logins for your coordinators.

If your team has more than one person who pulls reports (say a program director and a bookkeeper), each of them signs in with their own email. The workers you are tracking, the 40 volunteers at a Saturday build or the six people on a dinner shift, need none of this. For the full walkthrough of the email link flow, see how to sign in with a password.

Why don't workers get a login too?

Workers don't get a login because accounts create friction that a name tap or a QR scan removes entirely. A first-time volunteer should not have to reset a forgotten password before their shift starts. So workers never have accounts. They record time three ways: they tap their name on a shared-tablet kiosk, they scan a posted QR code, or they open a personal link you send them.

All three land at the same clock-in action with no username, no password, and no app to install. This is not a limitation you work around. It is the point. Fewer accounts means fewer support requests, and it means a volunteer coordinator is never the person resetting a stranger's password on a Sunday morning. You can try each method yourself in the live kiosk demo before you set anything up.

How is admin sign-in different from the kiosk?

Admin sign-in gets you into the dashboard where you see reports and settings; the kiosk is a locked screen that only records time. They serve opposite audiences. The dashboard shows you who is on the clock right now, lets you edit entries, apply tags, and export data. The kiosk shows a list of names to tap and nothing else.

Think of it this way:

Because the kiosk cannot reach settings or reports, you can leave a tablet on the front counter without worrying that someone taps into your data. A worker on the kiosk sees names and a clock button. That is the whole surface.

How do I reset my sign-in if I get locked out?

You request a fresh magic link, which replaces the need for a reset entirely. Since there is no stored password, there is no "forgot password" loop to fight through. If a link expired or you are on a new device, go back to the sign-in screen, enter your email, and a new link arrives. Open it and you are back in your workspace.

If you use a work email that filters aggressively, check that link emails are not landing in spam, and add the sender to your safe list once. The full answers to common setup questions cover email delivery and other edge cases if a link is slow to arrive.

What if a worker forgets to clock out?

A forgotten clock-out never inflates your reported hours because of auto-close. When an entry is left open past a cutoff you set, Kangaroo Clock closes it at its start time plus that cutoff, not at the current moment. So a volunteer who forgets to tap out before driving home does not show up as an 11-hour entry. The math on how auto-close caps a stale entry is spelled out in the glossary.

This matters most on the reporting side, which is exactly where admin sign-in comes in. You log in, review the day, fix anything odd, and your numbers stay honest without chasing people down.

Does any of this track or monitor workers?

No. Kangaroo Clock records when someone clocked in and out and nothing more. There are no screenshots, no GPS, no location tracking, and no activity monitoring. Admin sign-in unlocks reports and settings, not surveillance. A worker's personal link records time; it does not report their whereabouts. This boundary is permanent, not a feature waiting to be added.

What does an admin do after signing in?

Once you're in, the common tasks are watching who is on the clock, tagging entries by event or role, and exporting a clean CSV for payroll or grant reporting. The export uses a stable column schema that never breaks between periods, and it includes a distinct-worker count, which grant reports often ask for directly.

If you have not set up a workspace yet, you can start a free workspace and have your first person clocking in the same day. Admin sign-in is the only login in the whole system. Everyone else just taps a name.