On request · CodeB Wallet
The guest’s phone as the door card
For properties with card readers at the door, CodeB Wallet turns an Android phone into the access card: issued by link, QR code or email, checked by the reader offline, revoked when the stay ends. It depends on your readers, so we set it up with you — contact us if you are interested.

A secure access card on the phone
The CodeB Access card answers the door reader with a fresh signature from a key kept in the phone’s secure hardware. It works with readers that support the open PKOC standard, and the check needs no internet.
- Issued through phone.codeb.io by link, QR code or email
- The reader sees a pseudonymous card number, the sites and access groups and the validity period — not the guest’s name
- Only the chosen card answers, briefly and only while the phone is unlocked
- Revoked by the issuer, for example at check-out or when a phone is lost
NFC memory card: read-only or writable
For simple NFC readers, check-in terminals or a Home Assistant automation, the phone can act as a standard NFC tag. Read-only cards carry what you put on them (a link, a text, an ID); writable cards let a reader store new content, which the wallet keeps encrypted and lists.
- Whoever reads a tag can copy its content — use it for convenience, not for security doors
- Many plastic-card readers (for example PN532 setups) read tags but not phones
What guests and staff need
An Android phone with NFC and the CodeB Wallet app (currently a closed beta). iPhone support is coming very soon. Until then, keep keypad or smart-lock codes as the fallback for guests without a compatible phone.
Interested? Talk to us first
Door access depends on the readers and the access system you already have. Tell us which locks or readers you use and how many doors; we check compatibility and set up the issuing with you.
Two kinds of phone cards
| CodeB Access card | Secure: signature from the phone’s secure hardware, PKOC readers, works offline, revocable · for entrance doors and apartments |
|---|---|
| NFC memory card (read-only) | Standard NFC tag with fixed content (link, text, ID) · for check-in terminals, simple readers, automations |
| NFC memory card (writable) | A reader can write new content; the wallet stores it encrypted and can restore the original · for automations, not for security doors |
| Requirements | Android phone with NFC and CodeB Wallet (closed beta); iPhone: coming very soon |
| Availability | On request — set up per account together with you |
Frequently asked questions
Does it work with my door lock?
Only with locks or access systems that have an NFC reader: the secure access card needs a reader that supports PKOC; the NFC memory card works with readers that accept phones as tags. Many popular smart locks do not read phone NFC tags directly. Tell us your hardware and we will check it.
Do guests need an app?
Yes, for door cards: CodeB Wallet on an Android phone with NFC. Guests without it keep using the door codes in their guest portal. iPhone support is coming very soon.
What happens after check-out?
The issuer revokes the card, and a card is only valid for the period it was issued for. A guest who loses the phone gets the card revoked and can receive a new one.
Is an NFC memory card secure enough for the front door?
No. Anyone who reads a tag can copy its content. For doors use the CodeB Access card, which answers with a fresh signature every time.
How do I get it?
It is available on request. Contact us with your locks or readers and the number of doors; we set it up together with you.
Read the manuals
- Nuki smart locks — automatic door codesConnect Nuki: every paid stay gets its own keypad code, valid from check-in to check-out, shown in the guest portal and removed after the stay.
- The guest experienceWhat guests see: online check-in, tourist tax and deposit payments, then door codes, Wi-Fi, rubbish days, local tips and extras — installable on the phone.
- Security and privacySeparate data per host, encrypted secrets, no card data, private ID documents, automatic deletion, EUDI Wallet with consent, GDPR erasure and audit trail.
Reviewed 27 October 2026 by the Guestbud team, Aloaha Limited.