NFC Cards Explained
NFC (Near Field Communication) access cards are the standard credential for building access in most organizations today. Each card contains a small chip and antenna. When held near a compatible reader, it transmits a unique ID that the system checks against an access list.
Key characteristics:
- Cost: Typically $2–$8 per card, plus encoding cost if done externally
- Durability: Cards last 2–5 years under normal use; longer if not regularly bent
- Ease of issue: Print and encode in-house with a card printer, or order pre-encoded from a supplier
- Works with gloves: No biometric or touchscreen required — a simple tap works regardless of hand conditions
- Works when phone is dead: Physical card is independent of any battery-powered device
- Shared credential risk: Cards can be passed between employees — a security limitation in high-security environments
Digital Wallet Explained
Digital wallet credentials store a virtual access card in Apple Wallet or Google Wallet on an employee's smartphone. The phone communicates with NFC readers the same way a physical card does — but the credential lives in the phone's secure element and is tied to the device owner's biometric (Face ID, fingerprint) for unlocking.
Key characteristics:
- Cost: No card stock, no encoding hardware — provisioning is software-only
- Can't be lost: Employees rarely lose their phones; access is always available
- Instant revocation: Remove the credential from the dashboard; it's gone from the phone immediately — no card collection needed
- Instant provisioning: New hire gets credential on day one in under 2 minutes
- Harder to share: Unlocking the wallet credential requires device biometric — the phone's Face ID or fingerprint must be verified to present the credential
- Battery dependency: If the phone is dead, access is unavailable (most phones allow limited NFC even at 0% battery on iOS, but this varies by device)
Security Level Comparison
Both methods use the same NFC protocol at the physical level. The security difference is in credential management and anti-sharing controls.
Physical NFC cards can be handed to another person. Digital wallet credentials require the phone owner's biometric to activate — making sharing significantly harder. For high-security areas (server rooms, executive floors, pharmacies, data centers), digital wallet credentials provide a meaningful additional layer of identity verification.
For standard office environments, the security difference is less critical — the bigger security advantage of digital wallets is instant revocation, which eliminates the risk of unreturned cards.
Infrastructure Requirements
Both methods work with the same NFC readers — provided those readers support the relevant protocols:
- Physical NFC/RFID cards: any standard ISO 14443 or ISO 15693 compatible reader
- Apple Wallet: readers must support Apple VAS (Value Added Services) protocol
- Google Wallet: readers must support HCE (Host Card Emulation)
The NFC readers used with TimeClock 365 support all three protocols on the same hardware. This means organizations don't need to choose — one reader installation supports physical cards and digital wallets simultaneously.
The Hybrid Approach
For most organizations, the practical answer is to support both. Employees who prefer physical cards (or whose roles require them — outdoor crews in cold climates who work with gloves, roles without smartphone access) continue with NFC cards. Others transition to digital wallet credentials at their own pace.
Because both work on the same readers in TimeClock 365, there's no infrastructure duplication. The management dashboard handles both credential types identically — access scheduling, revocation, and audit logs work the same way regardless of credential type.
Which Environments Suit Each
- NFC cards preferred: Industrial environments with glove use, roles without regular smartphone access, temporary workers who need a quick-issue credential, environments where phones are restricted (some secure facilities ban phones)
- Digital wallet preferred: Office and knowledge worker environments, coworking spaces with high turnover, roles requiring frequent credential updates, organizations prioritizing instant revocation for compliance
- Both combined: Most medium and large organizations benefit from supporting both — issuing physical cards as the default with digital wallet as an option for those who prefer it
If you're evaluating or upgrading your access control infrastructure, choosing readers that support both NFC and digital wallet from day one avoids a costly reader replacement down the line. TimeClock 365 supports both methods without requiring separate hardware or management systems. See our NFC and RFID reader range →