The door is where an event either feels professional or falls apart. A slow, uncertain entrance — staff squinting at a printed list, arguing over whether a screenshot is real — sets the tone before anyone hears a note of music. Getting check-in right is mostly about two things: speed and trust. This guide covers how QR-based check-in from a phone delivers both, and what to look for so your door does not become the weak point.
Why a paper list does not scale
A printed guest list works for twenty people. Past that, it breaks:
- It is slow. Finding a name in a list of hundreds, by hand, creates a queue.
- It is easy to cheat. A name on a list proves nothing about who is standing in front of you.
- It cannot handle changes. Someone buys a last-minute pass and they are not on the printout.
- It leaks data. A full printed list in a stranger’s hands is every attendee’s name, on paper, at the door.
A phone with a scanner fixes all four — if the underlying passes are actually secure.
Why a plain QR code is not enough
Here is the trap: a QR code on its own is just a picture. Anyone can screenshot a friend’s ticket, forward it, and show the same code at the door. If your check-in only reads “is this a QR code that decodes to a ticket ID”, one paid pass can walk in five people.
The fix is a cryptographic signature. A properly built ticket does not just carry an ID — it carries an HMAC signature: a short code generated from the ticket data plus a secret key only the platform holds. When your door app scans the pass, it recomputes the signature and checks it matches. Change a single character of the ticket, or fabricate one, and the signature fails. You cannot forge a valid pass without the secret key, and the key never leaves the server.
That is how Kefi tickets work. Every QR pass is HMAC-signed, so forged and edited passes are rejected on the spot. And because each pass is checked in against the server, a screenshot forwarded to a friend fails the second time it is scanned — the pass has already been used. One pass, one entry.
Give staff access without handing over the keys
The other door problem is access. You want a volunteer scanning tickets, but you do not want that volunteer to see your full attendee list, your revenue, or — worst of all — to be logged in as you.
The answer is role-scoped access. Instead of sharing your account, you give door staff a role that can do exactly one thing: scan passes and check people in. In Kefi, roles like Door, DJ, media and ambassador are each PIN-scoped to only what that person needs. Your door volunteer checks people in from their own phone, sees whether a pass is valid, and never touches your full list, your money, or your password. When the night is over, the access is just a role you control — not your credentials in someone else’s hands.
A smooth door on the night
Putting it together, a good phone-based check-in flow looks like this:
- Staff open the door role on their own phone — no app install headaches, no shared login.
- They scan each attendee’s QR pass. Valid, signed, unused → green light, checked in. Forged, edited or already-used → rejected.
- Last-minute buyers just work. Someone buys a pass at the door on their phone; it appears instantly and scans like any other.
- You keep a live count. As passes scan in, you can see how many people are actually in the room — useful for capacity and for the venue.
No printouts, no queue, no guessing whether a ticket is real.
Practical tips for door night
- Have two scanners for anything over ~150 people. Two phones halve the queue.
- Brief volunteers on the reject case. Tell them what a failed scan looks like and that “already checked in” means the pass was used — politely send it to a supervisor.
- Charge the phones. Obvious, and still the most common day-of failure.
- Test one pass before doors open. Scan a real ticket end to end so you know the flow works on the night’s network.
Run your door from your pocket
Secure check-in is not a luxury feature — it is what stops a sold-out event from quietly letting in twice its capacity. HMAC-signed QR passes, scanned from a phone, with role-scoped access for your staff, give you a door that is fast for real attendees and closed to forgeries.
Kefi includes secure QR tickets and phone check-in on every plan, with role dashboards for your door team. You can set up an event, open registration and be ready to scan at the door today. Start free and set up your door →