One Tablet on the Wall. Everyone Clocks In.
Not every shift worker carries a phone they want to install your software on. Not every workplace wants them to. The kiosk is a shared tablet at the door, the bar, the back office — one device, four-digit PIN per person, taps in seconds. Punches land on the same timesheet row a manual entry would; the manager workflow afterwards doesn't change. Setup is a single page in the admin: pick a name, pick a location, copy the password once. Sign the tablet in, leave it running. No device-management agent, no MDM, no third-party app — it's the same web app you already use, locked to the kiosk page.
Three Common Workarounds.
Each one trades reliability for convenience. The kiosk replaces all three.
The clipboard at the door.
Initials in a column, transcribed Monday morning. Legible when it's not. The kiosk produces the same row, already typed, already attached to the right shift.
Telling staff to install the app.
Some don't have data. Some won't install work software on a personal device. Some lose the phone. The tablet is the company's responsibility — staff just walk up to it.
The manager filling in clock times after the fact.
Memory plus the schedule, multiplied by every shift in the week. The kiosk captures the time at the moment it happens, then leaves the manager free to review the flagged rows.
Four Touches, Done.
What a worker does on a typical shift.
Tap your name.
The grid shows only people scheduled at this location today plus anyone currently on the clock. No scrolling through the full roster.
Type your 4-digit PIN.
Issued automatically when you're invited to the company. Workers can change it themselves; managers can reset it. Five wrong tries and the keypad locks for 15 minutes.
Pick the action.
Clock in, clock out, start break, end break. The button set adapts to your current state — the tablet doesn't offer 'clock in' to someone already clocked in.
Walk away.
The card returns to the grid. The timesheet row updates in real time. The manager sees it on the next refresh of the timesheet.
Designed for the Floor, Not the SOC.
Realistic protections against the threats a shared tablet actually faces.
Locked to the company that paired it.
The tablet has its own login, scoped to one tenant. It cannot see another business's staff even if someone tries.
Five wrong tries equals a fifteen-minute pause.
A six-digit-of-effort attacker hits the wall before they hit the third name. Per-tablet limits stop a malicious device probing the whole roster.
Rotate the password from the admin.
One click invalidates the tablet's session. A lost device becomes useless without anyone touching it. Past punches stay on the timesheet.
Set Up Once, Forget It's There.
Adding a device is a single page in the admin: name it ('Bar tablet', 'Reception iPad'), pick the location, optionally pick the area. The success screen shows the email and password to sign the tablet in with — once. Lose the password and rotate it; lose the tablet and delete it.
Day to day, the tablet stays signed in. A heartbeat every five minutes lets the admin spot offline devices from the Kiosks list. There is no agent to maintain, no firmware to update, no extra subscription. It's the web app — running on a tablet's browser, locked to one page.
The data flows where it always flowed. Kiosk punches write to the same timesheet rows as manual entries. Premium calculations, break rules, overtime tiers, leave accruals, payroll exports — everything downstream is unchanged. The kiosk is an input, not a parallel system.
