Skip to content
LobbyExpress
Search

Guide

Visitor badges: printed, QR, NFC and mobile

What each kind of visitor badge is good for, how to show expiry and visitor type at a glance, when to reuse and when to bin, and the uncomfortable truth about how little a badge actually proves.

By LobbyExpress Editorial

The visitor badge is the most visible output of any visitor system. It is also the most misunderstood. Staff treat it as proof that someone belongs in the building; security teams know it only proves that someone, at some point, was handed a badge.

Choosing a badge is therefore two decisions. The practical one is format: a printed label, a printed code, a contactless card or a pass on the visitor’s phone. The more important one is what you expect the badge to do — be seen, open doors, or both — and what you will do about its limits.

This guide covers both, with a design checklist for the badge itself.

Four kinds of badge

Most visitor badges fall into one of four formats. They differ in what they cost per visit, whether they can open doors, and whether you need them back.

Four badge formats comparedFour badge illustrations side by side, each with three properties beneath. A printed label is read by people only, cannot open doors, and is single use. A printed label with a QR code is read by people and by compatible readers, and is single use. A contactless card is read by people and card readers, and is reusable, so it must be collected. A mobile pass is read by phone-capable readers and is shown on the visitor’s own device, so nothing needs collecting.VISITORVISITORVISITORVISITORPrinted labelPrinted QRContactless cardMobile passREAD BYPeople onlyREAD BYPeople, QR readersREAD BYPeople, card readersREAD BYCompatible readersOPENS DOORSNoOPENS DOORSIf readers support itOPENS DOORSYesOPENS DOORSIf readers support itAFTER THE VISITDispose securelyAFTER THE VISITDispose securelyAFTER THE VISITCollect and disableAFTER THE VISITExpires on its own
Printed labels are for people to read; cards and mobile passes are for readers. Many sites combine a printed label for visibility with a separate credential for doors.

Printed labels come from a small thermal printer at sign-in and stick to clothing or slip into a holder. They are the default for most offices: cheap per visit, quick to print and easy to read at a distance. They do not open doors.

Printed QR or barcodes add a machine-readable code to the same label. The code can be scanned at sign-out, at a turnstile or at a door reader that supports it. It is also easy to photograph, so treat it as a convenience, not a strong credential.

Contactless cards are the same kind of card staff use, issued from a managed pool and enrolled to the visitor for the visit. They work with existing card readers, but they have to come back, and a card that does not come back has to be disabled. Our guide to integrating visitor management with access control covers how that should work.

Mobile passes are sent to the visitor’s phone, often as a wallet pass, and presented at a compatible reader. Nothing needs printing or collecting, but they only help if your readers support them and the visitor has a suitable phone, and they are invisible to a member of staff walking down a corridor.

That last point matters. If you want staff to be able to tell a visitor from an employee at a glance, something visible still needs to be worn.

What a good badge shows

Space on a badge is limited and every field competes for attention. Put the things staff need to read from a few paces away in large type, and keep everything else off.

Anatomy of a visitor badgeAn example printed visitor badge with numbered callouts. One: a coloured band with the visitor type in words. Two: the visitor’s name in large type. Three: an optional photo taken at sign-in. Four: the host’s name. Five: the date and expiry time, printed large. Six: a machine-readable code for sign-out. A note beside the badge says to leave off anything sensitive, such as the visit purpose, company details staff do not need, or ID numbers.EXAMPLECONTRACTOR · ESCORT REQUIREDSam ExampleVISITINGHost Name, FacilitiesVALID14 Mar · until 17:001234561 Visitor type, in wordsColour plus text, never colour alone2 Name, largeReadable from a few paces3 Photo, if you take oneLets staff match badge to face4 HostWho is responsible for them5 Date and expiry, largeThe field that stops reuse6 Code for sign-outOptional; speeds up leavingLeave off: visit purpose, ID numbers
An example layout with an invented name. The expiry and the visitor type do the security work; the rest helps staff be helpful.

Two cautions. First, a photo improves the badge’s usefulness but adds personal data that must be justified, held securely and deleted on schedule — see our guide to GDPR and visitor data. Second, anything printed on the badge leaves the building on it. Do not print the purpose of the visit, a reference number from an ID document, or anything else you would not want found on a train seat.

Show expiry so it can be read at a glance

Expiry is what turns a badge from a souvenir into a control. At minimum, print the date and the time the visit ends in large type. Some sites go further with self-expiring badges, which visibly change after a set period once activated, so a badge carried in on a later day is obviously out of date even to someone who does not read the small print.

Whatever the method, it only works if staff are expected to look. Say so in staff induction, and make challenging an out-of-date badge a normal, polite thing to do.

Colour coding that actually helps

Colour coding by visitor type lets staff see at a distance who should be escorted, who is a contractor and who may go where unaccompanied. It fails when there are too many colours, when nobody knows the key, or when colour is the only signal — a significant number of people have some form of colour vision deficiency.

An example badge colour schemeAn example scheme of four visitor types, each pairing a colour with a shape and a word: blue circle for visitor, unescorted in public areas; amber triangle for contractor, with induction confirmed; rose square for escort required at all times; violet diamond for regular visitor, issued for a longer period. A note says to keep the scheme to four or five types and to publish the key to all staff.EXAMPLE SCHEMEVISITORCONTRACTORESCORTREGULARPublic areasunescortedInductionconfirmedAccompaniedat all timesLonger-termpassColour + shape + word. Four or five types at most, and the key on every staff noticeboard.
An example, not a standard. Whatever scheme you choose, pair each colour with a shape and a word, so the badge still works for colour-blind staff and in poor light.

Keep the scheme the same across all your sites if you have more than one; staff move between buildings, and a colour that means “escort” in one office and “contractor” in another is worse than no colours at all. Our guide to rolling out visitor management across multiple sites treats badge layouts as a setting to standardise.

Reuse or single use

Reusable badges and cards reduce waste and, for cards, allow door access. Their cost is administration: they must be collected, counted, cleaned, disabled when lost, and re-enrolled each visit. A pool of reusable cards that is never reconciled slowly turns into a pool of untracked credentials.

Single-use labels avoid the return problem, but each one carries a name, a host and a date out of the door. Put a collection box by the exit, make “drop your badge here” part of sign-out, and dispose of collected badges as confidential waste.

A common, sensible split is single-use printed labels for one-off visitors, and reusable, individually enrolled cards for contractors and regular visitors who are on site for weeks, with a fixed end date.

What a badge actually proves

This is the part that most often goes unsaid. A badge is evidence that someone completed sign-in and was issued a badge. On its own, it is not evidence of much else.

What a visitor badge does and does not proveTwo columns. The badge shows that a badge was issued at sign-in, the visitor type and host at the time of issue, and the intended expiry. The badge does not show that the wearer is the person named, that the visit is still authorised, that the visitor has not already signed out, or that they are in an area they are allowed to be in.A badge showsA badge does not showA badge was issued at sign-inVisitor type and host, as recordedWhen it was meant to expireThat the wearer is the person namedThat the visit is still authorisedThat they have not already signed outThat they are allowed in this area
Badges support a process; they do not replace one. The right-hand column is why escorting, access control and staff challenge still matter.

Badges can be passed on, copied, kept and reused. That does not make them pointless — a visible, dated, typed badge makes the unusual stand out and gives staff a reason to start a conversation. But anywhere a badge alone is the control, ask what happens when someone wears one they should not have. If the answer matters, add a control that does not depend on the badge: an escort, a door that checks a live credential, or a photo staff can compare.

Where to go next

The badge printer is part of the reception kit list in choosing visitor sign-in hardware. If you are considering photos or ID checks at sign-in, read our analysis of ID scanning and watchlists first. To check whether badges are being returned and visitors signed out, see measuring whether your visitor system works. Or browse the vendor directory.