Since COVID-19, QR codes have become widely used, appearing everywhere from restaurant menus to payment methods. In the field of Facility Management, QR codes are now being used to report issues in meeting rooms, collect service feedback, and even to track field personnel, particularly in cleaning and maintenance.
But are QR codes truly suited for professional use? Are they secure enough? And how exactly do they work?
A QR code acts as a tiny storage device, holding limited information. Instead of data encoded on a hard disk, a QR code’s data is arranged visually, with black squares representing “1” and white squares representing “0.” This binary pattern creates a “visible memory” that is easily decoded by any device with a camera.
The amount of data a QR code can store depends on its size, but even large QR codes are limited to a few thousand characters. For instance, if a QR code contains the phrase “I am happy,” anyone who scans it will be able to read it. And once printed, the information stored in a QR code remains unchanged.
You've probably noticed that scanning some QR codes opens a webpage. In these cases, the QR code contains a URL instead of plain text. Your smartphone decodes the link, opening it in a browser to access the intended page. However, if this URL changes, you’d need to reprint the QR codes to update the destination. To avoid this, many companies use dynamic QR codes that include an intermediate URL, allowing you to update the target page without reprinting the QR code itself.
At first glance, dynamic QR codes seem ideal for tracking field personnel or gathering feedback. Users simply scan the code, are redirected to a check-in form or feedback page, and the task is done. However, there’s a critical security issue to consider: the risk of fraud.
Because a QR code’s URL remains the same, even if dynamic, it can be easily photographed or shared. This allows employees to check in from any location by simply accessing the link, rather than being present on-site. This loophole can lead to wage discrepancies and unreliable data, especially for companies managing large numbers of sites.
This issue isn’t limited to personnel tracking; it affects any professional use of QR codes, from customer satisfaction surveys to issue reporting. Without additional security, data collected through QR codes cannot be fully trusted.
Some suggest using geolocation to confirm a user’s physical presence, but this approach has significant drawbacks. Users can refuse to share their location or even manipulate it with simple apps. Geolocation also has spatial limitations: for instance, it can’t differentiate between a room on the first floor of a building and one on the twenty-seventh. An employee could complete rounds from their desk without physically visiting each area. Relying solely on geolocation for security can lead to technical, practical, and even legal complications.
Does this mean QR codes are unsuitable for professional use? Not necessarily. QR codes remain a simple, effective technology with a wide range of applications. To overcome the security issues, Taqt has developed a patented Secure Rotating QR Code.
This innovative solution displays a QR code that changes periodically, making attempts to cheat nearly impossible. Used just like a traditional QR code, this system renders copied codes or shared URLs useless. With Taqt’s rotating QR code, the Facility Management industry can harness QR codes to their full potential without compromising on security.
Want to learn more? Join us for an exclusive showcase at ISSA Show North America in Las Vegas (Nov. 19-21) at Booth 1156, to see this world-first innovation in action!