It is still not a certified access control system. Each person's secret lives in ordinary browser storage on their phone, not in a secure element, so whoever holds an unlocked device holds the credential. There is no tamper-evident audit trail, no anti-passback across doors, and no integration with door hardware — the log records what the scanner saw, nothing more. Treat it as an attendance and presence record with meaningful replay resistance, not as a replacement for a badge system on a door that matters.
Both devices need roughly correct clocks. Verification accepts a code from the previous, current or next 30-second step, so about a minute and a half of tolerance. A phone with a badly wrong clock will simply fail to open the door.
Name on its own, or Name,EmployeeID.
A CSV exported from HR works as long as the first column is the name. A secret is generated here for
each new person — the list you upload never contains secrets, so it is safe to keep in a
shared folder. Anyone already on the roster is skipped, so re-importing the same list is harmless.