Every door is different. Pick how open — or how guarded — each of your locations should be, and change it anytime. Here's the full menu, including what's shipping next.
Community spaces where anyone is welcome
Visitor: Scans the QR, enters their phone number, verifies a one-time SMS code, and gets the door code (or the door unlocks).
You: Set the location's access mode to Open. That's it — every entry is still phone-verified and logged.
Gyms with staffed hours, buildings open for set sessions
Visitor: Same flow, but outside your schedule they're politely told when access resumes.
You: Enable time gating and define open windows per day. After-hours attempts trigger an email alert.
Gyms, storage facilities, any paid-membership space
Visitor: Only phones on your member list get through — everyone else is denied before any code is sent.
You: Add members by phone (individually or CSV import), with optional start/end dates for trials and temporary passes. Toggle anyone off instantly.
Communities with familiar faces who aren't formally registered
Visitor: Members always get in. Walk-ins who've visited before are recognized and admitted; complete strangers are not.
You: Set walk-in trust to "Returning visitors only." Trust is earned per community context and never leaks across verticals — a gym visit never opens a different organization's door.
Letting someone vouch for a newcomer
Visitor: A first-timer enters a referral code (like TRUST-7X2K4M) you shared. After that first visit, they're recognized on their own.
You: Issue trust codes from the dashboard. Every use is recorded and emailed to you; disable a code anytime.
When someone should no longer get in — period
Visitor: A blocked number is denied at every one of your doors, even if they're on the member list. They just see "Access restricted."
You: Add the number to your blocklist. Only the last 4 digits are ever stored.
Spaces with smart locks who want zero codes
Visitor: After phone verification the door simply unlocks — no code to type.
You: Connect a Seam-compatible smart lock (August, Schlage, Yale, TTLock, and 50+ brands). If the unlock ever fails, visitors automatically fall back to an SMS code.
High-security or low-traffic doors where a human decides
Visitor: Verifies their phone, then waits at the door while you approve — their screen updates the moment you decide. Requests expire after 5 minutes.
You: Set walk-in trust to "Ask me each time." You get an email plus a live card on your dashboard with one-tap approve/deny. Only phone-verified visitors ever reach you.
Spaces that need real-world identity, not just a phone
Visitor: Verifies a government ID once (via Stripe Identity); after that, entry works like any trusted visitor.
You: Set walk-in trust to ID Verify. We store only a verified flag — never the document.
No. Any phone that can receive an SMS works — they scan the QR code, enter their number, and type the 6-digit code we text them. No downloads, no sign-ups, works internationally.
Yes, in early access — via Seam, which covers August, Schlage, Yale, Kwikset, TTLock, Salto, and 50+ other brands with one integration. And it fails safe: if a remote unlock doesn't go through, the visitor automatically receives the door code by SMS instead.
Not yet — it's designed and on our roadmap (built on Stripe Identity, where a person verifies once and we keep only a verified flag, never the document). Today, referral codes and member lists are the strongest gates.
Yes. Set a location to "Ask me each time" and every walk-in waits while you approve or deny — from a live dashboard card or after an email ping. Visitors verify their phone first, so you're never bothered by anonymous requests.
Deactivating a member takes effect on their next attempt. Blocking a number is stronger: it denies them at every location instantly, even if they're still on a member list, and they're never told they were blocked — just "Access restricted."
Trust is scoped to your community context (community spaces, fitness, storage, or residential) and never crosses between them — by design, with no override. And your organization always has the final say: your blocklist beats any trust level.
Your physical keypad keeps working regardless — QR Gate hands out codes; it doesn't sit between your lock and the door. For smart-lock setups, the SMS-code fallback covers connectivity hiccups.
Rotate it manually or on a schedule (daily/weekly). The dashboard reminds you when the physical keypad needs updating, and visitors can report a code that didn't work.
As little as possible: phone numbers are stored as one-way hashes with only the last 4 digits kept for display. Access logs show who came in (last 4), where, when, and the result.
Yes — each location gets its own QR code, lock code, and rules. The free plan covers one location; paid plans cover 3, 10, or unlimited.