Worker Self-Register QR

Plan-gated feature. Same flag as Workers and Shift Scheduling: requires Workforce Management.

What it does

You generate one QR code. Workers scan it, fill in their ID number, phone, and name on a public form, and they appear in your Workers list — ready to be put on the shift schedule before they ever check in at a site.

Generating the QR

1. Go to Workers → Generate registration QR
2. (Optional) Set an expiry date/time — leave blank for an open-ended QR
3. Click Generate — a 128-bit random token is created and embedded in the URL
4. Print the QR or share the URL with your foremen, on WhatsApp groups, etc.

Regenerating

If the URL leaks somewhere it shouldn't be, click Regenerate. A new token is created, the old QR stops working immediately. Anyone with the old URL gets a "this link is no longer active" page.

Expiry

Two ways to disable:

• Set an expiry — the link auto-stops working at that date/time. Useful for a one-week onboarding window.
• Clear — wipes the token entirely. The URL stops resolving until you generate a new one.

Bot protection

The public form has three layers of bot defense: a hidden honeypot field, a signed timestamp (rejects submissions faster than 1.5 seconds or older than 30 minutes), and an optional Cloudflare Turnstile checkbox (if you've set it up — see Bot Protection).

Public form is NOT plan-gated

Once you generate a QR, scanning it always works for the worker — even if your plan later loses the Workforce Management feature. To stop the QR from working, use Clear or Regenerate.

Spam / bad submissions

If a bad row sneaks through, click Remove on the Workers list to soft-delete it. No data is lost; the soft-delete is reversible if the same person legitimately re-registers.