Audit Your NFC Tags, Cards and Readers
Practical checks for NFC asset tags, access cards and product tags: what to inventory, what to test and where weak spots hide.
Start here
Contactless tech is easy to roll out and easy to forget. Tags go on equipment, cards go to staff, readers go on doors, and then nobody looks again. NFC Audit is a plain guide to checking all of it: does every tag still match a record, and does every card still deserve to open a door?
Three kinds of deployment
Asset tags
Tags on laptops, tools and equipment. The question is inventory: is the tag readable and does it match the register?
Access cards
Cards and fobs on doors and gates. The question is control: who holds them, and what can a lost one open?
Product tags
Tags on packaging, posters and goods. The question is trust: can a stranger rewrite or copy them?
What we check
Records
Every live tag and card has an owner and a purpose.
Readability
Tags still read on real phones and readers.
Configuration
No default keys, unlocked tags or trust in a bare ID.
Process
Lost cards, leavers and disposals are handled the same day.
Questions people ask
- Can NFC tags and access cards be cloned?
- How often should we audit our access cards?
- Should we lock our NFC tags after writing them?
Start with a walk
How to run an NFC asset tag inventory walkthrough. Zones, two readers and a register export.
General information only, not a formal security assessment.
Check every tag, card and reader before someone else does