What is NFC and how does it work?
NFC is a form of high frequency RFID standardized for very close communication. The reader's coil produces an alternating magnetic field at 13.56 megahertz. When a card, tag or phone antenna enters that field, a voltage is induced in its coil, just as in a transformer. A passive tag uses this to power its chip, then sends data by varying the load it places on the field, which the reader senses.
Because the link is magnetic coupling rather than a travelling radio wave, the field falls away very quickly with distance. That is why NFC works over a few centimeters and why you hold the card against the reader. The design is deliberate: the user's deliberate tap is a strong signal of intent, and a nearby stranger is far less likely to trigger an exchange. The result is a link that is easy to use, tolerant of wear and cheap to build into small cards and stickers.
What are the three NFC modes?
NFC devices can act in three ways. In reader or writer mode, a phone or handheld reads a tag or card, for example a sticker at a patrol checkpoint. In card emulation mode, a phone pretends to be a contactless card, so it can present a door credential to an ordinary reader. In peer-to-peer mode, two devices exchange small amounts of data, which is rarely used for access. Phones add convenience, but readers must be told to accept them, and the issuing process needs its own security design.
Card emulation matters most for security. A phone may keep credentials in a hardware secure element or use host card emulation, where the operating system and an app handle the exchange with protection from tokenization and device security. The result is a credential that can be issued, suspended and revoked remotely, instead of a plastic card that must be collected, and it can require the phone to be unlocked before a credential is presented.
Why is NFC range only centimeters and is that a security feature?
Short range reduces some risks. An attacker must be extremely close to read or skim the exchange, which is harder to do covertly than reading a long range tag. In practice the useful reach also depends on antenna size, reader power and what is around, and an attacker with a larger antenna or amplifier can sometimes work from further than a normal tap. So distance helps, but it is not a guarantee.
Range is also a usability feature. A reader that only responds to a tap is less likely to open a door because someone walked past, and tapping makes a clear deliberate act. For a reader mounted on a gate post or box, the short distance also helps in a crowded entrance, where several credentials might otherwise be in the field together. Short reach should be treated as a bonus on top of real cryptographic protection, not a replacement for it.
How can NFC credentials be cloned or relayed?
The weakest NFC credentials only send a fixed serial number, which is easy to copy onto a blank or emulated card. Readers that accept that number alone offer very little protection. A stronger design uses mutual authentication with secret keys that never leave the card, so a copy cannot be made by listening. Older cards with weak proprietary ciphers have been broken, so the algorithm matters. Check whether a reader reads only the serial number or demands authentication, because many installations still accept the weaker option.
A relay attack is different: it does not copy anything. An attacker captures the exchange between a victim's card and a fake reader and relays it live, perhaps across distance, to a second device at the real reader. Defenses include timing checks, requiring the phone to be unlocked, motion or location context, and treating the NFC read as one factor. Protecting keys, revoking lost credentials and logging every tap give a manager a way to notice abuse.
What do metal and phone cases do to NFC?
Because NFC depends on a magnetic field, conductive material nearby causes trouble. A metal plate behind the reader's antenna can absorb the field and reduce range to almost nothing, which is why readers meant for metal surfaces include a ferrite layer that redirects the field. Cards kept next to a phone with a metal back or a thick wallet of cards may fail to read or read the wrong card.
Water and cold are rarely the problem; cases, mounting and alignment are. A phone's NFC antenna sits in a different place on each model, so users must learn where to tap. Mounting readers in a steel enclosure, a post or a gate housing needs a design that accounts for the metal. Test with the actual phones and cards, and plan for gloves, which can interfere with some phone screens but usually not with the NFC field itself.
Where does NFC fit a gate, drop box or construction site?
NFC works well for low-traffic, deliberate entries: a pedestrian gate, a locked cabinet, an equipment cage or a ballot drop box that logs each opening. It also suits guard tours, where a guard taps tags at checkpoints to prove a patrol took place. Tags are cheap, need no power and survive rain, so they are easy to place around a temporary site. Their low cost also means a lost tag is an inconvenience rather than a security event, if it carries no access rights.
The reader still needs power and a path to the controller, so a remote or solar powered site should choose low-power hardware and protect it from weather. A tap shows that a credential was presented, not who held it, so pair it with video where the stakes are high. Plan for lost phones and cards, remove access promptly, and keep a log, because the best credential is only as good as the process around it.
Key terms
- Near field
- The region close to an antenna where a magnetic field dominates and drops off steeply, giving NFC its centimeter scale reach.
- Inductive coupling
- Energy and data transfer between two coils through a shared alternating magnetic field, like a loosely coupled transformer.
- Card emulation
- A mode in which a phone presents itself to a reader as a contactless card carrying a stored credential.
- Secure element
- A tamper resistant chip that stores keys and runs credential code, protecting secrets from the phone's main operating system.
- Host card emulation
- Card emulation handled by software on the phone rather than a hardware secure element, often using tokens and device security.
- Relay attack
- An attack that forwards a live exchange between a real credential and a real reader across distance without copying any secret.
- Ferrite shield
- A magnetic layer behind a reader antenna that redirects the field so the reader still works when mounted on metal.
A site that uses NFC for a pedestrian gate or a guard checkpoint gets a log of taps, not proof of who tapped. A trailer like this can cover the entrance with cameras, and if a site needs it, a gateway can carry an access event to the video platform. Operators at the 24/7 operations center can then verify the person on screen and use IP speakers if something looks wrong.
Common questions
How close does a card need to be for NFC to work?
Only a few centimeters. NFC uses magnetic coupling at 13.56 megahertz, which weakens very rapidly with distance. Antenna size, reader design and nearby metal change the practical reach, so the tap should be deliberate and close.
Is NFC more secure than a normal proximity card?
It can be, if the credential uses mutual authentication and strong keys. Short range helps, but a fixed serial number can still be copied, and relay attacks exist. Security comes from cryptography and process, not range alone.
Can a phone replace an access card?
Often yes, through card emulation with a secure element or host card emulation. The credential can be issued and revoked remotely and can require an unlocked phone. The reader and system must support mobile credentials.