QR Code Pickups: How We're Eliminating the Paper Sign-Out Sheet
QR codes that expire every few minutes solve a problem that static PINs can't: they can't be shared via screenshot or forwarded to an unauthorized person.
When we first shipped the PIN-based pickup system, programs loved it. It was fast, familiar, and a massive improvement over paper. But we kept hearing the same concern from safety-conscious directors:
"What stops a parent from texting their PIN to someone else?"
The honest answer: nothing. A 4-digit PIN is a secret that can be shared. If a parent sends their PIN to a grandparent who isn't on the authorized list, that grandparent can show up and potentially get through.
Time-expiring QR codes
Our solution is a QR code that refreshes every few minutes. Here's how it works:
1. The parent opens the Bright After School app and taps "Show Pickup Code" 2. A QR code is generated that expires in 5 minutes 3. The parent shows the QR code to staff, who scan it with their device 4. The system instantly confirms authorization and logs the pickup
Because the code expires, a screenshot is useless after a few minutes. You can't text it to someone across town and have it work by the time they arrive.
Why this matters for safety
The goal of any pickup verification system is to ensure that the person physically standing in front of staff is actually authorized. QR codes with expiration solve this because:
- They require the authorized person to be physically present with their phone
- They can't be forwarded, shared, or reused
- They provide a cryptographically verified log of who presented the code
PINs vs QR codes: which to use
Both methods are valid and we support both. Programs can choose to require one or the other, or let parents use either.
PINs work well for programs where staff are familiar with families, as a quick verbal confirmation.
QR codes are better for larger programs, substitute staff days, or any situation where you want a stronger guarantee that the person presenting the code is actually the authorized pickup person.
We think the best pickup workflow uses QR codes as the primary method, with PIN as a fallback for cases where a parent's phone is dead or they've forgotten their device.