Restricting Kiosk Clock Access by IP Address

VeriClock IP Address Restrictions let you control where employees are allowed to clock in and out by enforcing network-based rules. Administrators can configure IP address controls to whitelist approved locations, blacklist unauthorized networks, or flag clock events for review without blocking punches. These rules help prevent off-site clocking, enforce job-location compliance, and improve timekeeping accuracy. VeriClock also supports job-based IP rules, allowing specific IP addresses to be tied to individual job sites. Flagged events are easily reviewed from the Time Activity page, giving managers visibility into potential policy violations while maintaining flexibility for mobile and on-site teams.

You can set up IP address restrictions to control which IP addresses employees are allowed to use for clocking in and out.

To configure IP address rules, navigate to Settings → More → Clock Access Rules → IP Address.

To find the IP address your computer is using, open a new tab in your web browser and type "What is my IP address" in the search bar. (use the IPv4 option)

Repeat this process on each computer that will be used for clocking in and out to identify their respective IP addresses.

IP address Options

• Blacklist - Block employees from clocking in from a specific IP Address. One common use of blacklist is to prevent an employee from using their home IP address.
• Whitelist - Allow employees to clock in from the specified IP Addresses only. One common use of whitelist is to require employees to clock in from an IP address at the job location. If a job location has multiple IP addresses, each number can be added and marked as whitelisted.
• Flag Only - Clock events are flagged when an employee clocks in/out from a blacklisted IP address, or clocks in/out from an IP address not set as whitelisted. The flag only option is commonly used to alert admins when an employee clocks in from an unauthorized IP address, but to still allow the clock in/out to occur.

*Cell phones use a different IP address for every network they connect to. If using a cell phone to clock in, that phone will need to use the Wi-Fi at the clock in location to access a whitelisted IP address.*

**Flag Only can be used to identify any/all IP addresses a cell phone is using. See view flagged events section below. The flag option can be removed once all IP Addresses have been added to your account, and once staff are more familiar with their clock in/out steps.**

Add Job Based Rule For An IP Address

The job based rule option is commonly used to associate a specific IP address to a specific job for clock in/out.

• After clicking on Add Job Based Rule, select a job from the job drop down list.
• Set rule conditions to: Blacklist or Whitelist, Flag Only (flag option must be used with either whitelist or blacklist)
• Click Save

• Next click Add IP
• Enter the IP address for that job location
• Click Save

View Flagged Events

Flagged Clock events can be viewed from the Time → Activity Page.

If an employee attempts to clock in from a blocked IP address or an IP address that is not whitelisted, AND the IP address is not set to Flag only, then employees will be blocked from clocking in/out and will get an error explaining why they are being blocked.

See other clock in/out restriction options:

Phone/SMS Clock Access Rules

Job Rules For Clock In

Service Item Rules For Clock In

Require Photo at Clock In or Clock Out