A QR Code cannot record attendance, and it is worth starting there, because most guides on this subject skip it and the omission causes a lot of wasted effort.
What a code does is carry somebody to a destination quickly, and the destination is what records the attendance. A form, a spreadsheet, a timesheet app, a booking system. The code removes the typing and the link hunting, and everything else in the process happens somewhere else entirely.
That reframes the buying decision entirely, because you are not shopping for an attendance system, you are shopping for a reliable way to put a link on a wall or a badge, and the five methods below differ mainly on how many codes you need and who is allowed to scan them. Prices for four tools were checked on 25 July 2026.
What a QR Code can and cannot do for attendance
It can timestamp a scan, if the code is dynamic. It can tell you the city the scan came from, roughly. It can carry somebody to a form in about two seconds rather than the thirty it takes to find a link.
It cannot verify who scanned it, and that single limitation shapes every method below. A QR Code has no idea whether the phone pointing at it belongs to the person whose name goes on the timesheet, and no generator in this comparison solves that, because none of them is an identity system.
There is a second limit worth naming here, because scan analytics inside a QR Code tool are not an attendance record and should never be treated as one. They count scans, not people, and they cannot distinguish one employee scanning four times from four employees scanning once. The authoritative record has to live in whatever the code points at.
The integrity problem nobody mentions
Three failure modes turn up in every QR Code attendance deployment, and all three are solvable with process rather than software.
The first is the photograph, where somebody takes a picture of the code on the wall, and from then on they can scan it from the car park, from home, or from anywhere at all. A static code printed once is permanently exposed in this way, which is the strongest argument for a dynamic code you can rotate.
The second is scanning on behalf of somebody else. One person arrives, opens the form twice, and submits two names. No code prevents this, and the fix sits in the destination rather than the code, usually through a login, a device check or a one-time value the form expects.
The third failure is the code that simply stops working. An attendance code is scanned every working day for years, which is a far heavier duty cycle than a marketing code, and several tools in this comparison switch codes off when a subscription lapses. A dead code on a Monday morning is a queue at the door and a manual sign-in sheet nobody wanted.
5 ways to track attendance with QR Codes
Each method is anchored to a tool that supports it, ranked by how well it survives daily use.
Method 1: One rotating code at the entrance, on The QR Code Generator (TQRCG)
The simplest arrangement is a single code by the door pointing at today’s sign-in form, and it works because the QR Code Generator’s editable codes let you change that destination without reprinting the sign.
That property is what defeats the photograph problem, since you point the code at this week’s form, then repoint it next week, and any picture taken previously now leads somewhere retired. The printed sign never changes, whereas the thing behind it moves on whatever cycle you choose, and nobody has to reprint anything.
The free plan gives you 2 free dynamic QR Codes that never expire alongside unlimited static QR Codes, which covers an entrance code and a second one for a different site or shift. Scan history runs 14 days on free, reporting total scans, unique users, city, country and device, and that is a useful cross-check against your form data rather than a replacement for it.
Those codes staying live through a downgrade or cancellation matters more here than in almost any other use case. An attendance code is load-bearing every single morning, and a code that dies with a billing problem creates an operational failure rather than a marketing inconvenience.
Two limits apply to this method. Both Free and Flex are single-user, so HR and facilities cannot hold separate logins, and free static downloads carry a watermark. Flex clears the watermark and extends scan history to 60 days, starting at $5 per month billed yearly for 5 dynamic QR Codes and reaching $10 per month billed yearly for 45, which is enough for a code per site across a mid-size organisation.
Method 2: A passcode-protected code, on QRCodeChimp
This method puts a barrier between the scan and the form, and QRCodeChimp is the only tool in this comparison offering it at no cost. Passcode protection and two-factor authentication are both included on the free plan, alongside unlimited static QR Codes and 10 dynamic ones.
For attendance the passcode does real work, because a photographed code is far less useful to somebody outside the building if scanning it produces a prompt rather than a form, and rotating that passcode weekly is quicker than reprinting signage. It does not verify identity, and it does raise the cost of casual misuse.
The design options are broad too, covering logo, custom shapes, stickers and 3D styling on the free tier, though none of that matters much for a code stuck beside a time clock.
The constraint is scan volume, and attendance is exactly the use case that finds it. The free plan caps at 1,000 total scans a month across the whole account, and forty employees clocking in and out on twenty working days produces 1,600 scans on their own. Starter costs $9.99 per month billed monthly or $6.99 per month paid yearly for 10,000 scans, and Pro costs $19.99 monthly or $13.99 paid yearly for 150,000, which is the realistic tier for any workforce above a handful of people.
Method 3: A unique code per employee, on QR Code Generator PRO
Instead of one code on a wall, this method gives every employee their own code on a badge or a lanyard, and the scan happens at a reader or a phone held by a supervisor.
It solves the identity problem more convincingly than anything else here, because the code itself carries the person rather than the place. It also inverts the volume question, since you now need one code per employee rather than one per entrance, and generating three hundred codes by hand is not a task anybody repeats.
QR Code Generator PRO is the practical answer at that scale. Professional costs $46.99 per month billed annually, an annual charge of $563.88, and includes 250 dynamic codes, batch creation of 500 codes per upload and five seats. Advanced costs $15.99 per month billed annually, $191.88 a year, for 50 codes and 100-code batches. There is no free plan, only a 14-day trial.
Their published compliance covers GDPR, CCPA and SOC 2, which matters when the codes are attached to named individuals, and their FAQ states that lapsed codes keep working for three further years. The cost is real and so is the administrative load, since every joiner needs a code and every leaver needs one revoked.
Method 4: A printed code per site or shift, on QR Code Prime
Some attendance problems are genuinely temporary, covering a weekend event, a contractor crew on site for a fortnight, a training day, a seasonal shift pattern that runs for six weeks and then stops.
For those, QR Code Prime’s no-account generator produces a clean code in under a minute with nothing to sign up for and no watermark on the output. Unlimited static codes cost nothing, and a free account adds 10 dynamic QR Codes with 500 tracked scans a month, which is enough for ten separate short-run sites or shifts.
The privacy property is worth more here than in most contexts. Static codes are generated inside your browser, so the URL you encode never reaches their servers, and for a code pointing at an internal form containing staff names that is a cleaner answer than a server-side generator can give.
The 500-scan monthly ceiling is the reason this method suits short runs rather than permanent installations. A single entrance used by thirty people twice a day passes it in under nine working days. There is no bulk creation either, and one independent developer maintains it with no published compliance certifications, which is unlikely to satisfy a review for anything permanent or personally identifiable.
Method 5: A code per location with an annual scan budget, on Pageloot
This method suits organisations that want to plan the whole year in one purchase rather than watch a monthly meter, and Pageloot is built around exactly that shape.
Starter costs EUR 7 per month, billed as EUR 60 a year, and carries 2 dynamic codes with 15,000 annual scans. Run the arithmetic against a real workforce and it lines up neatly. Thirty employees clocking in and out across 250 working days produces 15,000 scans, so that tier covers a small site almost exactly, and Premium at EUR 12 per month, billed as EUR 144 a year, lifts you to 60 codes with 50,000 annual scans.
Annual budgeting suits attendance better than monthly metering, because attendance volume is predictable in a way campaign volume never is. You know your headcount and you know your working days, so you can size the plan precisely rather than guessing.
Two cautions apply before committing. Prices are quoted in euros, so a US buyer takes a conversion on every invoice, and their own terms state that codes become inactive once the plan expires. For a code that runs the morning routine, that clause needs to sit in front of whoever approves the renewal.
What each method costs to run
| Method | Tool | Free tier | Scan headroom | Survives a lapsed plan |
| Rotating entrance code | TQRCG | 2 dynamic, unlimited static | No published cap | Yes, stated |
| Passcode-protected code | QRCodeChimp | 10 dynamic | 1,000 a month free | Last 10 codes only |
| Code per employee | QR Code Generator PRO | None, 14-day trial | Unlimited from Advanced | Three further years |
| Short-run site code | QR Code Prime | 10 dynamic | 500 a month | No paid tier to lapse |
| Annual scan budget | Pageloot | None, 14-day trial | 15,000 a year on Starter | No, codes go inactive |
Which method fits your workforce?
Three questions, and the second one eliminates more options than people expect.
Do people clock in at one place, or many?
One entrance means one code, and method 1 covers it free and permanently. Several sites, shifts or gates means several codes, and the count decides the tier rather than the tool. A code per employee is a different shape again, and it only makes sense once identity matters more than convenience, which usually means payroll rather than headcount.
How many scans will a year actually produce?
This is the calculation nobody does before signing up, and it is arithmetic rather than judgement. Multiply headcount by scans per person per day, then by working days. Forty people clocking in and out across 250 days produces 20,000 scans, which clears QRCodeChimp’s free tier in the first month and sits above Pageloot’s Starter allowance for the year.
Attendance volume is steady and predictable, unlike a campaign, so the estimate you make will be close. Do it before you choose, not after the meter stops.
Who needs to see the record?
Seats decide this and they are easy to forget. TQRCG is single-user on Free and Flex, QR Code Generator PRO offers five seats on Professional, and Pageloot and QRCodeChimp publish their own arrangements. If HR, a site manager and payroll all need access to the underlying form, remember that the form’s permissions matter more than the QR Code tool’s, since that is where the actual record lives.
One point is worth raising early rather than late, because attendance data is personal data about employees, and the rules covering it vary by country and sometimes by site. That question belongs with your HR and legal colleagues before a code goes on a wall, not after somebody asks where the records are kept.
Run it on one team for a fortnight
Pick the smallest team you have, put one code by their entrance, and run it for two weeks alongside whatever you use now. Then compare the two records against each other, line by line.
The gaps between them are where the learning sits. You will find the mornings somebody forgot, the person who scanned from the car park, and the shift where the form was pointing at last month’s version. Each of those is a process fix rather than a tooling fix, and finding them on one team of eight is considerably cheaper than finding them across the whole organisation.
For what it is worth, the scanning behaviour itself is not the risk. EMARKETER’s February 2024 forecast put 38.0% of people in the US as scanning a QR Code at least once a year, and Mordor Intelligence attributes 64.92% of 2025 QR Code market revenue to dynamic codes. People know how to scan, and the editable codes this method depends on are now the market norm.
What HR teams ask before rolling this out
Can employees cheat a QR Code attendance system?
Yes, and the two common methods are photographing the code to scan it remotely and scanning on behalf of a colleague. Neither of those is prevented by the code itself. Rotating a dynamic code’s destination defeats the photograph, and defeating the second requires something in the destination form, such as a login, a device check or a one-time value, because a QR Code has no way to know who is holding the phone.
Is a QR Code enough on its own, or do we need an attendance app?
The code is a shortcut to a destination and never the record itself. If your organisation already runs a timesheet system, a form or a shared spreadsheet, a QR Code makes reaching it faster and nothing more. If you have no destination yet, you need to build or buy that first, since no generator in this comparison stores attendance data.
How many scans will we use in a year?
Multiply headcount by daily scans by working days, and the answer is usually larger than expected. Thirty people scanning twice a day across 250 working days produces 15,000 scans, and forty people produces 20,000. That figure decides your tier far more than any feature comparison does, and it is the number most free plans are not sized for.
What happens if the code stops working one morning?
The vendor’s terms decide that, and it is worth confirming before anything goes on a wall. Pageloot states that codes become inactive once a plan expires, and TQRCG states that its free dynamic codes stay live through a downgrade or cancellation. Whichever you choose, keep a printed fallback sign-in sheet, because a queue at the door at eight in the morning is not the moment to start troubleshooting.
Do we need to tell staff their scans are being recorded?
Treat that as a question for HR and legal rather than for IT, since the rules governing employee data differ by country and sometimes by site. The practical advice is to be explicit from the start, because attendance tracking that arrives unannounced tends to generate more resistance than the same system introduced openly.
