How the kiosk PIN works

For workspaces that need anti-buddy-punching (paid hourly, etc.), open Settings and check Require PIN on kiosk clock-in.

First time someone taps their name

A "Set your PIN" modal opens with a 4-button numpad. They pick a PIN, then enter it again to confirm. The PIN is stored hashed, admins literally can't see it.

Every subsequent time

"Enter your PIN" modal opens. They tap their 4 digits. Auto-submits on the 4th key.

Reset a forgotten PIN

Open Workers, click the person, scroll to Kiosk PIN, click Reset PIN. They'll set a new one the next time they tap their name.

Phones and the QR code

With the PIN on, a phone that scans your QR code asks for the person's PIN once, the first time it's set up for them, then remembers. Someone who only has the poster's address can't clock in as another person without their PIN. Five wrong tries locks that person's PIN on phones for 15 minutes. Personal links don't ask for a PIN, because each link already belongs to one person; keep them private.

For volunteer or trust-based contexts, leave the toggle off, the kiosk's "anyone can tap any name" behavior is the accessibility answer for people without phones.