Walk into a lot of shops, clinics, and warehouses and you’ll see it by the door: a tablet on the wall that staff tap to start and end their shift. That’s a kiosk time clock — one shared device that a whole team punches on, instead of everyone using a personal phone or a private login. This post explains what a kiosk time clock on WordPress actually is, how it works under the hood, and — honestly — when it’s the right tool and when something simpler fits better.
If you already run a WordPress site, you can add this without a separate cloud service. Punchwell’s kiosk clock ships as part of its GPS geofence and mobile punch add-on, so the shared tablet, the phone screen, and the office-network lock all come from one self-hosted plugin.
What a kiosk time clock is
A kiosk time clock is a shared clock-in point — usually a wall-mounted or counter tablet — that any employee can use to punch in and out, without logging into the device as themselves. Nobody signs into WordPress on the tablet; the device stays on a single kiosk screen all day, and each person identifies themselves at the moment they punch.
The point is simplicity at the door: one device, no personal-phone requirement, no shared password floating around, and a clear physical place where “starting your shift” happens.
How a WordPress kiosk clock works
In Punchwell, the kiosk is a shortcode you drop on a page — [hrm_kiosk device="…"] — and there’s a ready-made “Lobby kiosk” block pattern if you’d rather start from a template. A few mechanics matter, because they’re what make the shared model safe:
- The device is enrolled first. A kiosk tablet has to be registered before it can accept punches, so a random browser can’t just load the page and start clocking people in.
- Staff punch with a short code and a 6-digit PIN. Each employee identifies themselves with a short code plus a personal PIN — there are no individual WordPress logins on the device. That’s what lets one tablet serve the whole team without leaving anyone signed in.
- The venue’s IP must match your allowlist. This is the part people miss: a kiosk only works when the device is on your allowlisted office network. So the tablet in your lobby clocks people in; a copy of the same page opened from someone’s home does not.
That last point ties the kiosk directly to Punchwell’s flagship control — the office-IP clock-in lock — which is what keeps a “shared, easy” device from becoming a “clock in from anywhere” loophole.
When a kiosk is the right tool
A wall-tablet kiosk earns its place when:
- Staff don’t all have work devices, or you’d rather not lean on personal phones for a work task. A shared tablet sidesteps both.
- There’s a natural choke point — a single entrance, a back-of-house door, a front desk — where a clock physically makes sense.
- You want the act of punching to be visible and consistent. A tablet by the door is a clear, even ritual: everyone starts their shift the same way, in the same place.
- You’re running a lobby or reception setup where a tidy, single-purpose screen looks the part.
Retail floors, clinics and dental front desks, salons, restaurants, warehouses, and franchise locations are all classic kiosk fits.
When a kiosk isn’t the right tool
Being honest about the limits saves you a wasted afternoon:
- Mobile or multi-site staff who move between job sites aren’t served by a fixed tablet. For them, the mobile/PWA punch screen and GPS geofence in the same add-on are the better fit — the clock follows the worker instead of sitting on a wall.
- A fully remote team doesn’t need a physical kiosk at all; a self-service clock widget on an internal page does the job.
- A tiny team on individual computers may find a personal dashboard clock simpler than mounting hardware.
The nice part is you don’t have to pick just one. Punchwell lets you run a kiosk at the door, a mobile punch for the field crew, and the office-IP lock across all of it — softer or stricter, your call.
The kiosk and the IP lock are a team
A shared device is convenient, which is exactly why it needs a guardrail. A short code and PIN prove roughly who; the office-IP requirement proves the punch is happening at your location. Together they mean a coworker can’t take the kiosk home, and a leaked PIN can’t be used from a couch — because the kiosk simply won’t accept a punch off your network.
That’s the difference between a kiosk that’s a genuine attendance control and one that’s just a friendly button. Because the whole thing is self-hosted inside your own WordPress site, the punches land in your own database — no vendor cloud holding your timesheets, no per-seat fee as your team grows.
Setting up a kiosk
- Confirm your venue’s public IP and add it to your allowlist (Punchwell shows a one-click “use this IP” helper on the setup screen). If it rotates, use the CIDR block it lives in.
- Enroll the tablet as a kiosk device so it’s authorized to accept punches.
- Place the
[hrm_kiosk]shortcode on a page — or start from the Lobby kiosk block pattern — and open it on the tablet. - Give each employee a short code and PIN. Staff are just WordPress users with the employee role, assigned to a department that has a shift policy — the three prerequisites for any clock-in.
- Mount it at the choke point and, if you like, run in warn mode briefly before switching the IP lock to block.
Frequently asked questions
What is a kiosk time clock on WordPress?
It’s a shared punch station — usually a wall or counter tablet — served by a WordPress plugin, where staff clock in and out without logging into the device individually. In Punchwell it’s the [hrm_kiosk] shortcode: the device is enrolled first, employees punch with a short code and a 6-digit PIN, and the tablet must be on your allowlisted office network for a punch to count.
Do employees need individual logins on the kiosk?
No. That’s the point of a kiosk — one enrolled device serves the whole team, and each person identifies themselves with a short code and personal PIN rather than a WordPress login. Nobody stays signed in on the shared tablet.
How does a kiosk stop someone clocking in from home?
The kiosk only accepts a punch when the device is on your allowlisted office IP. A copy of the kiosk page opened from home isn’t on your network, so it won’t clock anyone in. Combined with the per-employee office-IP lock, that keeps a convenient shared device from becoming a punch-from-anywhere loophole.
Kiosk or mobile punch — which should I use?
Use a kiosk for fixed, on-site teams with a natural choke point at the door. Use the mobile/PWA punch screen and GPS geofence for staff who move between job sites. Punchwell ships both in the same add-on, so you can mix them and apply the office-IP lock across the on-site staff.
The bottom line
A kiosk time clock is the simplest way to give an on-site team one clear, shared place to punch — no personal phones, no individual logins on the device. On WordPress, the version worth having is the one that ties that shared convenience to your office network, so an easy device stays an honest one. Pair it with the IP lock, keep the data on your own server, and you’ve got a clock that’s both friendly at the door and hard to cheat.
If you’re on WordPress, take a look at the kiosk, GPS geofence, and mobile punch options and see which mix fits your floor.
Punchwell is an independent, third-party maintained GPL fork of the “WP Human Resource Management” plugin. Sturdyhaus is not affiliated with, endorsed by, or sponsored by wpspear, weDevs, the original author, or any other prior maintainer. Product names are referenced descriptively only; all trademarks belong to their respective owners.