What is the lock-then-redirect method for NFC plates?

The lock-then-redirect method involves programming a branded URL you control onto the NFC plate, then locking the chip so it cannot be rewritten. You can then use your website or domain registrar to redirect that URL to any current campaign page, changing the destination anytime without touching the physical plate.

Should I lock or leave my NFC tap plates unlocked?

Tap.Giving recommends locking your plates (the default option). Locked plates prevent tampering, keep donor journeys consistent, and eliminate maintenance. If you need to change the destination, simply update the redirect on your domain instead of reprogramming the plate.

How do I password protect unlocked NFC plates?

Download the free NFC Tools app for iOS or Android. Tap Other then Set Password, create a short passcode, and touch the plate to save it. When you need to edit the plate, choose Remove Password, enter the code, make changes, then set the password again. Note: passwords only block rewriting, not scanning.

Secure Every Tap

NFC Frequently Asked Questions

Q: What is the difference between locked and unlocked NFC plates?

Locked plates have their NFC memory set to read-only after encoding your URL. Anyone can still tap and open the link, but the data cannot be overwritten. Unlocked plates allow anyone with physical access and an NFC phone to rewrite the destination URL.

When you order Tap.Giving plates you decide how open they are. Learn the difference between locked and unlocked NFC chips, why we recommend the lock-then-redirect method, and what password protection can—and cannot—do.

Two ways to configure your Tap.Giving plates

Every order can ship either locked (our default) or unlocked. Both options scan the same way for your guests—the difference is who can change the destination stored on the chip.

Option 1: Locked (recommended)

We encode each plate with a short URL you own, then make the NFC memory read-only. Anyone can still tap and open the link, but only you control where that URL points.

Prevents guests with NFC phones from overwriting your message.
Keeps donor journeys consistent months after deployment.
Makes physical maintenance easy—no spot-checking for tampering.

Lock then redirect workflow

Provide a branded URL you control (for example give.yourchurch.org/sunday).
We program that URL and lock the chip so it cannot be rewritten.
Use your website or registrar to redirect the URL to the current campaign. Change the redirect any time without touching the plate.

Option 2: Unlocked (requires password)

Leaving plates unlocked means any person with physical access and an NFC-enabled phone can rewrite the destination. If you choose this option, plan to password protect every plate right away.

How to add a password with NFC Tools

Download the free NFC Tools for iOS or NFC Tools for Android.
Tap Other → Set Password, create a short passcode you will not forget, and touch the plate to save it.
When you need to edit the plate, choose Remove Password, enter the same code, make your changes, then set the password again.

Important limitations

Passwords only block rewriting—they do not stop scanning or guarantee full tamper resistance.
A determined person could still guess or remove the password with enough time and proximity.

Need help planning your tap experience?

Our team can pre-program URLs, advise on redirect best practices, or walk you through password workflows tailored to your campus.

Contact Tap.Giving