Breaking News

The Secondary Credential is the New Primary Failure

Technology & Human Identity

The Secondary Credential is the New Primary Failure

When redundancy becomes contradiction, the system doesn’t just fail-it abdicates authority to the artifacts we carry.

If we actually lost the database , how many people in this room could you prove have a right to be here?

It is the question no event organizer wants to answer at on a while 926 people are vibrating with caffeinated impatience in a hotel lobby. We have built a world where identity is no longer a handshake or a recognized face, but a stacking game of digital and physical layers.

We believe that by adding a QR code to a phone app, a printed lanyard around the neck, an RFID wristband on the arm, and a backup PDF in the email, we are creating a “fail-safe” ecosystem. We call it redundancy. We think we are being diligent.

Redundancy and the Excess of Information

But redundancy is defined as the inclusion of extra components which are not strictly necessary to functioning, yet when these components contradict one another, the system ceases to function not because of a lack of information, but because of an excess of it.

The Tessera Hospitalis

Ancient Rome’s unhackable binary database. A piece of bone shattered in half. If the jagged edges fit, the guest was verified. No Wi-Fi required.

I spent in a Wikipedia rabbit hole researching the tessera hospitalis. In ancient Rome, these were tokens of hospitality-small pieces of bone or wood shattered in half. One half stayed with the host, the other with the guest.

When the guest returned , the only “database” that mattered was the physical fit of those two jagged edges. It was binary. It was unhackable. It didn’t require a 2.4GHz Wi-Fi connection or a volunteer who understood the difference between a 1D barcode and a 2D matrix.

The Binary Truth of the Tessera Hospitalis

The man at the front of the current queue is holding a shattered version of modern hospitality. He has a fabric wristband with a locked slider that is supposed to grant him access to the VIP lounge. He also has a lanyard that says “General Admission” because he registered early and upgraded late, and the printer didn’t get the memo.

His phone app is currently spinning a “loading” wheel because the ballroom’s thick concrete walls are a graveyard for 5G signals. Finally, he has a printed receipt from that looks like it went through a laundry cycle.

The volunteer at the desk is 19 years old. She has been on her feet for . She is looking at three sources of truth, and all three are telling different stories. Behind this man, the queue is stretching out the door and onto the sidewalk, a restless snake of human frustration.

In this moment, the “system” hasn’t just failed; it has abdicated. The decision-making power has shifted from the high-security database to a tired teenager who just wants the line to move. She looks at his face, sees he looks like he belongs there, and waves him through.

I used to believe that more data was the antidote to ambiguity. I once built a control panel for a massive mercury-vapor installation with 14 separate monitoring sensors, convinced that if one failed, the others would provide a “composite truth,” only to find that when one sensor drifted by 3%, the entire logic board locked the system in an infinite reboot cycle because it couldn’t decide which version of reality to trust; I had built a machine that was too smart to work.

We are doing the same thing with access control. Every time a “glitch” happens, we add another layer. A “security incident” at a conference leads to a mandatory ID check. The ID check slows things down, so we add a fast-track QR code. The QR code doesn’t scan in direct sunlight, so we add an RFID wristband. The wristband chips are sometimes defective, so we keep the paper list as a backup.

The Physics of Signal Failure

What we fail to realize is that every credential we add makes it harder to say who the person actually is. We are not reinforcing the wall; we are blurring the image.

The technical reality of this is even more fraught. When you’re dealing with RFID-specifically the stuff produced by specialists like WXR-you’re dealing with physics, not just software.

LF

Short Range / High Body-Water Penetration

HF

Encryption Ready / Hates Metal Interference

UHF

Room-wide Range / Blocked by a Hand

The environment dictates the technology: RFID is a battle of physics, where signal attenuation often overrides software logic.

You have LF (Low Frequency) tags that work through water and bodies but have no range. You have HF (High Frequency) tags like MIFARE or NTAG that handle encryption beautifully but hate being near metal. Then you have UHF (Ultra High Frequency) that can read from across a room but can be blocked by a stray hand or a foil-lined bag.

If an integrator orders a thousand NTAG213 paper bands but the event staff insists on handing out lanyards with metal clips right on top of the wristband, the resulting signal attenuation isn’t a “system error.” It’s a physics error. But to the attendee, it’s just another moment where their “digital self” is denied entry while their “physical self” is standing right there.

The Credential as a Shield

Authority is the power to determine the truth of a situation; however, if authority is distributed across four digital platforms and one physical badge, it ceases to be a power and becomes a statistical probability.

We have reached a point where the credential is no longer a tool for the attendee; it is a shield for the organizer. The lanyard isn’t there to help you get in; it’s there so that if you shouldn’t have been let in, the organizer can point to a policy and say, “Well, they had the badge.” It’s a transfer of liability from the human to the artifact.

But artifacts are brittle. I work with neon. I know that if you put too much pressure on a glass tube, it doesn’t just bend; it ceases to exist as a vessel for light. Our current identification systems are under too much pressure. We are asking a $0.40 piece of PVC or a $1.20 fabric wristband to carry the weight of a $2,500 ticket price, a background check, a meal preference, and a session-tracking algorithm.

The Artifact

$0.40

PVC Badge

The Responsibility

$2,500

Ticket Value

We are asking disposable materials to carry the weight of high-stakes verification.

When you look at the factory-direct shipments coming out of places like WXR, you see the sheer variety of materials: silicone, elastic, wood, paper, fabric. This variety exists because the environment dictates the technology. You don’t use a paper barcode in a waterpark, and you shouldn’t use a delicate app-based QR code for a high-volume entry point where the sun is going to wash out every phone screen in the line.

The Smart Badge Paradox

Yet, we ignore the environment in favor of the “stack.” We want the data, so we force the attendee to carry the weight of our data collection.

, I attended a tech summit where they gave us a “smart badge” that was essentially a mini-computer. It tracked our location, allowed us to “tap” to exchange contact info, and displayed our schedule on an e-ink screen. It was a marvel of engineering. It also died by .

Because the battery was dead, the “authority” of the badge vanished. I was told I couldn’t enter the keynote because my screen was blank.

“But you can see my name printed in tiny letters at the bottom,” I said.

“The scanner needs the code,” the guard replied.

“The code is on the screen that has no power.”

“Then you aren’t in the system.”

– Security Dialogue, Tech Summit

I was standing there, 180 pounds of biological reality, being told I didn’t exist because a lithium-ion battery had given up the ghost. This is the “Credential Paradox.” The more sophisticated we make the proof of identity, the more fragile the identity itself becomes.

We have traded the tessera hospitalis-the physical fit-for a flickering signal that requires a dozen invisible stars to align just to let a human through a door.

The Light in the Vacuum

When we talk about “buying back our ” or “streamlining operations,” we usually mean adding a piece of software. But true efficiency in access control usually looks like subtraction. It looks like deciding which one thing is the truth.

If the wristband is the truth, then the lanyard is just jewelry. If the app is the truth, the paper list is a distraction. But we are too afraid of that one thing failing. So we keep the layers. We keep the “just in case” lanyard. We keep the “backup” QR code. And in doing so, we ensure that the system will eventually encounter a contradiction it cannot solve.

When the wristband refuses to speak to the reader, the queue becomes a physical manifestation of a data mismatch that no lanyard can resolve.

The irony of my neon trade is that people think the gas is the hard part. It’s not. The gas is easy; it just wants to glow. The hard part is the electrodes and the vacuum. You have to remove everything-every speck of dust, every stray molecule of air-to make the light pure.

If you leave even a little bit of “extra” inside the tube, the light flickers, turns a sickly grey, and eventually dies. Identity at a gate is a lot like that. It needs to be pure to be fast. It needs to be a single, undisputed signal. When we flood the “tube” with multiple credentials, we aren’t making the light brighter; we are just creating more ways for it to fail.

We need to stop asking “How can we be sure?” and start asking “What is the simplest way to be right?” Because right now, we are so busy being “sure” that we are making it impossible to actually get into the room.

The person isn’t the sum of their barcodes. They are the person who belongs on the other side of the door. And if our technology makes us forget that, then the technology isn’t an access tool-it’s a barrier.