Sign-in with a QR code and a PIN
Half a hotel team has no company email address. And most workforce tools fail at that very first step.
Scan the code
Now choose a six-digit PIN
What it does
An admin creates the person and hands out an invitation as a QR code. On first open they choose a six-digit PIN; from then on they sign in with a username and that PIN, and stay signed in on their own phone. Shared devices return to the sign-in screen after two minutes.
How it is built
Each account gets a synthetic address that is never used for mail. The one-time token is stored hashed and expires after 72 hours, the PIN lives as a bcrypt hash on the profile, and five wrong attempts lock the account for fifteen minutes. An unknown username answers exactly like a wrong PIN, so names cannot be probed.
Comes from
Staff App
Tasks, shift plans, and a time clock for people who work without a desk. And without an email address.
To the case study