> ## Documentation Index
> Fetch the complete documentation index at: https://help.rekkeh.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Why access passes expire in Rekkeh

> Understand why each Rekkeh pass type has an expiry, how expiry is checked at the gate, and what happens after a pass expires.

Every access pass in Rekkeh has a finite lifetime. Expiry is a core security control: it limits the window during which a credential can be used, reduces the risk of stolen or shared passes, and ensures the facility access roster stays current.

## Expiry by pass type

Each pass type expires according to different rules:

**Visitor pass:** Expires based on the duration chosen at creation: 2 hours, 4 hours, 24 hours, 48 hours, or a custom window. Admin-created passes can also be set to 8 hours or 7 days.

**Event pass:** Inherits the event window. It is valid from the event start time to the event end time, and only while the event status is active.

**Contractor access:** Expires on a schedule set by the admin, from 1 to 365 days. The default is 60 days. There is no perpetual option.

**Resident rotating pass:** The underlying provision lasts 30 days, and the QR code displayed on screen has a maximum lifetime of 15 minutes. The displayed QR rotates when it expires or when 60 seconds or less remain.

## How expiry is checked

When a pass is presented at the gate, Rekkeh checks two things separately:

1. **Authorization window:** Is the current time within the allowed start and end times for this pass?
2. **Credential expiry:** Is the QR code or OTP still valid? For rotating resident passes, this means the current 15-minute code has not expired.

Both checks must pass for the pass to proceed to the workflow verification stage.

## What happens after expiry

If a visitor is already inside when their pass expires, they are not ejected. Their pass changes to **exit-only**, meaning they can check out but cannot re-enter.

If a visitor tries to use an expired pass at the gate, the scanner rejects it. For guest passes, the kiosk or Gate Ops app shows an expiry message. For resident passes, the app generates a fresh QR code if the 30-day provision is still active.