UniFi Access - Access Methods & Credentials

UniFi Access provides versatile and secure access methods. Users and visitors can unlock locations using UniFi Access Readers and Intercom at designated times.

Enable or Disable Access Methods

All door access methods are enabled by default. You can disable certain methods for security purposes.

1. Go to your Access application > Devices > Readers > select a reader > Settings.
2. Enable or disable Access Methods.
   • NFC Card
   • Mobile Unlock
   • Hand Wave: It cannot be used with the NFC access method simultaneously.
   • PIN
3. Click Apply Changes.
   

NFC Credentials

Access Card (UA-Card) and Pocket Keyfob (UA-Pocket) use multi-layer encryption, including AES 128-bit and ECDSA, and UniFi Access proprietary security protocols to prevent unauthorized duplication. Each credential is uniquely encrypted, ensuring high security without added complexity.

Unlike many third-party NFC cards that store plain text IDs easily duplicated by hackers, these UniFi Access credentials secure a unique token within the card or fob, making them nearly impossible to duplicate and ensuring robust system protection.

An Access Card can only unlock locations deployed only on the same UniFi Console. 

Allow Third-Party NFC Cards

1. Go to your Access application > Settings > General > Security > Credentials > Card and tick the Allow Third-Party NFC Cards checkbox.
   

How to Scan NFC Cards on Access Readers

1. Tap the NFC tag on your card against the NFC icon on your Intercom (UA-Intercom), G2 Reader Pro (UA-G2-Pro), or Reader Pro (UA-Pro) until the location is unlocked.
   

Mobile Access

Users can unlock locations with a simple tap on the UniFi Identity Endpoint or Identity Enterprise mobile app, which uses Bluetooth Low Energy (BLE).

Requirements

• Requires UniFi OS 3.2.7 or later.
• Ensure users have been assigned access policies and invitation links have been sent to them in OS Settings > Admins & Users > Users.
• Ensure users have downloaded the UniFi Identity Endpoint and loaded credentials.
• Ensure users' iOS, watch OS, or Android have met the following requirements:
  • iOS 16.0 or later
  • Android 7.0 or later
  • watchOS 9.0 or later (Requires Identity Endpoint iOS 0.1.10 or later)
  • They have granted the Location and Bluetooth permissions to their Identity Endpoint for mobile.

How to Unlock Locations with Mobile Unlock

• For Android and iOS: Go near a reader and tap the Unlock button on the Identity Endpoint.
• For watchOS: Go near a reader and tap a door icon on the Identity Endpoint.

PIN Code

This method allows flexibility, enabling admins to set the PIN length to 4, 6, or 8 digits and create a specific code or randomize it for entry on Intercom (UA-Intercom), G2 Reader Pro (UA-G2-Pro), or Reader Pro (UA-Pro).

Manage PIN Settings

1. Go to your Access application > Settings > General > Security > Credentials.
2. Set the PIN length to 4 Digits, 6 Digits, or 8 Digits. All users' PINs will become invalid once the PIN length is changed. It’s advised to use long, complex PINs for enhanced security.
3. Randomize Keypad Layout as needed. Supported only on G2 Reader Pro and Intercom.
4. Allow Simple PIN to allow PINs to contain sequential or repeated numbers (e.g., 123456, 000000). For enhanced security, it’s advised to use complex PIN combinations.
   

How to Enter PIN on Access Readers

• For G2 Reader Pro & Reader Pro: Tap PIN Unlock and enter your PIN.
• For Intercom: Tap Enter PIN to Unlock and enter your PIN.

QR Code

Visitors can access authorized locations by scanning a QR code at an Intercom (UA-Intercom). This allows admins to quickly send invitation emails with QR codes and provides scheduled visitors with convenient location access.

Typical Scenario

1. An admin confirms a scheduled visit and sends a QR code to the visitor via email in Access application > Settings > Visitors > Create New Visitor.
   
2. The visitor arrives at the company at the scheduled time and scans the QR code at an Intercom to gain access.
3. The system records the scanning time and uses it to update the visitor status.

How to Scan QR Code at the Intercom

1. Check your inbox for an email titled "Your Upcoming Visit." It includes the company name, authorized doors, visit time, and credentials.
2. Tap Scan QR Code on the Intercom, then hold your QR code in front of the camera until it’s detected and the location is unlocked.

Hand Wave

Users can unlock a location by waving their hands in front of the Reader Lite (UA-Reader-Lite) or G2 Reader (UA-G2). This method is designed for exit-only use and does not require user identity authentication. For security purposes, hand waves cannot be used with other access methods simultaneously.

Remote Unlock

Admins and Door Attendants can unlock locations remotely from the Access application, Access mobile app, or Identity Enterprise mobile app.