How QR security works
Learn why ticket QR codes are unique, signed, expiring, and protected against reuse.
Samgamam separates private ticket QR codes from public event QR codes. Private ticket QRs are signed per RSVP, validated on the server, and blocked after check-in or regeneration.
Tangga
- 1Each confirmed RSVP receives its own signed private ticket token.
- 2The scanner validates the signature, expiry, event, RSVP, and ticket version on the server.
- 3A used ticket cannot check in the same attendee twice without triggering an already checked-in result.
- 4Regenerating a ticket invalidates older versions for the same RSVP.
- 5Public event QRs never act as attendance tickets and are safe to share broadly.
Peringatan
Public event QR codes and private ticket QR codes serve different jobs. Never substitute one for the other.