Three-factor attendance
The tightest check-in setup DailyBrew has. Turn on all three — IP restriction (shop WiFi only), device verification (one phone per person) and geofencing (near the shop only) — and each one covers a gap the others can't. To clock in, someone has to be on the right network, on the right phone, and actually at the shop.
Why three factors
No single check is bulletproof
IP restriction can be sidestepped by a shared building WiFi or a phone hotspot. Device verification breaks if somebody clears their browser data. Geofencing drifts indoors. Each one has a known weak spot, so any one of them on its own leaves a gap wide enough for a colleague's check-in to go through.
The three cover each other
IP confirms the network. Device verification confirms the phone doing the scanning. Geofencing confirms the body in the building. To get past all three at once, someone would have to be on the shop WiFi, on their own registered phone, standing inside the circle — which is the same thing as being at work.
Every check leaves a trail
Each day's record keeps the IP, both device IDs, the device names, and the coordinates used for the check-in and the check-out. If an argument ever comes up, you have all three to compare instead of one fuzzy number.
How each check works
Shop WiFi only — the network check
IP restriction pins check-ins to the public addresses your shop's WiFi or wired line uses. A scan from anywhere else — home, the bus, the car park — is refused on the server with a message that says why. Best for a shop with a steady connection you know.
Read moreOne phone per person — the identity check
Device verification quietly gives each phone an ID the first time someone opens DailyBrew. The check-in records that ID, and the check-out has to come from the same phone. A second person trying to clock in on a phone already used that day is refused. That's buddy punching gone at the source.
Read moreNear the shop only — the location check
With geofencing you set the shop's coordinates and how close staff need to be (50–5,000m). At check-in the browser reads their location once and the server checks they're inside the circle. Nothing runs in the background — the coordinates are used to measure the distance, then let go.
Read moreHow to turn all three on
Best done while you're standing in the shop — the location auto-detect needs you on site to be accurate.
Open Shop settings
Sign in and click Shop settings in the sidebar. Three cards are waiting: Shop WiFi only, One phone per person, and Near the shop only.
Turn all three on
Under Shop WiFi only, add the shop's public IPs — the “Use the network I'm on” button fills one in while you're on the shop WiFi. One phone per person is just the toggle, nothing to set up. Under Near the shop only, tap “Use where I am now” to drop the centre, then pick how close staff need to be — 100m suits most shops.
Save, then test a scan
Save each card. Do a test check-in from inside the shop — it should go through and show all three badges: network, phone, location. Then try one from across the street. It should be refused, and the message names the check that turned it down.
What happens when one check fails
Each check stands on its own. If any one of them says no, the whole check-in is refused — there's no partial pass. That's on purpose: each one is a gate, not a score.
The shop WiFi goes down
Staff on a phone hotspot are refused by IP restriction even though their phone and GPS are fine. Two ways out: add the hotspot address to your shop's networks for the evening, or enter that day's hours by hand afterwards from Today.
Someone gets a new phone
The first check-in on the new phone passes the network and location checks, but device verification treats it as a fresh phone — they can check in, but not yet check out from the old one. The binding resets daily, so it sorts itself out on day two with nothing for you to do.
GPS drifts indoors
If GPS reads 30m off inside thick walls, geofencing may refuse at a 100m radius. Widen it a little — 150–200m absorbs indoor drift — or lean on IP restriction and device verification as the two checks for that shop.
You get a notification on the first check-in from a phone we haven't seen that person use (Espresso), so a legitimate new phone is something you hear about rather than puzzle over.
Comes with Espresso
All three — IP restriction, device verification and geofencing — come with Espresso ($19.99/month or $199/year), alongside leave management, manager roles and Telegram alerts.
Other check-in controls
Shop WiFi only
Staff can only clock in on the shop's own network — an IP restriction, so nobody punches in from home.
One phone per person
Everyone clocks in and out on their own phone — device verification, so nobody punches in for the whole table.
Near the shop only
A check-in only counts inside a circle you draw around the shop — geofencing, using the phone's GPS.
Ready to tighten up your check-ins?
Start free. Move up to Espresso when you're ready.