How QR entry works and why a screenshot of a ticket will not get you in

The door is the most stressful part of the evening. A queue, low light, somebody whose mail app will not load, somebody whose battery is dying. The check itself takes about two seconds, and understanding those two seconds answers nearly every question — including the main one: why you cannot simply forward a screenshot to a friend.

What happens in two seconds

1. The scanner reads the QR code. Inside it is neither a link nor a seat number but a short string: the ticket identifier and a cryptographic signature the organiser applied to it.
2. The steward app verifies the signature. That is a mathematical operation on the device itself: change the string by one character and the signature stops matching.
3. The app checks the ticket status: sold, not refunded, not already redeemed, valid for this door and this date.
4. If everything matches, the ticket is redeemed. The "used" marker goes to the system and, for a blockchain ticket, is recorded in the ledger.
5. The steward sees a green screen with sector, row and seat, and tells you where to go.

Why you cannot just draw the code

A QR code is a way of writing text as an image, nothing more. Anyone can generate an image containing any text in a minute. What works is not the image but the signature inside it: forging it requires the organiser private key, which never leaves their system. A drawn "ticket" fails at step two, before the database is even consulted.

Why a screenshot carries no right of entry

A screenshot is an exact copy of a genuine code. Its signature is real, so it passes step two. It falls over at steps three and four, where two independent mechanisms are at work.

One-time redemption

A ticket can be redeemed exactly once. Whoever arrives first — the owner or the person with a copy — voids the code, and every later scan returns "already used". Arguing at the door is pointless: the steward has no discretion, only a record that this ticket has been admitted. This is exactly what the one-file-many-buyers scheme relies on, which we covered in how to spot a fake ticket.

A rotating code

For events with high resale risk, the code in your account changes every few dozen seconds. A screenshot of it goes stale faster than it can be forwarded. The rotation happens on the device and needs no connection — the phone recomputes the code from the clock.

When the ticket is issued as a ledger entry a third mechanism is added: the right of entry is bound to the holder of the entry. Transfer is possible, but only in full and under the organiser rules — see what an NFT ticket is.

How door control works without internet

A foyer is almost always a bad-signal place: concrete, metal and a thousand people each holding a phone. So signature verification runs offline on the steward device, while the list of redeemed tickets syncs between scanners over the local network and reaches the server when connectivity returns.

The practical consequence for you: your phone does not have to be online either. Open the ticket while you are still in the queue, not at the turnstile.

How to get through faster

• Open the ticket before joining the queue. A mail app loading on a bad network is the single biggest source of delay.
• Turn screen brightness to maximum and switch off auto-brightness. Scanners struggle with dark screens.
• Remove a glossy screen protector or tilt the phone: glare kills a code more reliably than a scratch.
• Approach one door as a group. Tickets in one order can be scanned in sequence from a single phone.
• Do not arrive in the last ten minutes. Peak queue at any venue is fifteen minutes before the start.

Common situations at the door

"This ticket has already been used"

Someone has already entered with that code. If you bought officially, go to the organiser desk: they can see the time and door where it was redeemed. If you bought it second-hand, this is the classic ending of the scheme.

The phone is dead

Go to the desk with your ID. The order is found by number, surname or e-mail, and the ticket can be redeemed manually. A printout works too.

The ticket was bought for someone else

For ordinary events this is not a problem: whoever holds the code gets in. For named events it is, and the only fix is an official transfer before the door.