Overflow was built with security as a foundational pillar. We understand partners want complete confidence when placing Tap devices in high visibility and high engagement environments.
This article explains why our devices are secure, how scan results can sometimes be misleading, and what it means if an app shows an unlocked state.
Skip to Section:
How Overflow Tap Devices Are Secured | What Unlocked or Writable Messages Mean
Benefits of Using Overflow Tap | FAQs
How Overflow Tap Devices Are Secured
Hard-Encoded Security
Each Tap device is securely written with encoded data, then permanently locked at the chip level using built-in lock bytes. (The encoding cannot be reversed.)
- 🔐 Unlike basic consumer NFC tags that rely on password protection, Overflow Tap is locked at the hardware level.
- 🔍 Once locked, they become read-only. This means the tag cannot be rewritten, modified, or tampered with.
This hardware-level protection makes Overflow Tap highly resilient to spoofing, overwriting, or malicious interference. (Not even our team can rewrite it after it is locked!)
What Unlocked or Writable Messages Mean
Some scanning apps may display messages such as unlocked, writable, or not password protected when Overflow Tap is scanned. This behavior is common across NFC technologies and reflects limitations in scanning apps rather than security risks.
- 🧠 These messages come from how certain free NFC reader apps interpret NFC data and present status information. They don't reflect the actual security or edibility of the Tap device.
- 🛡️ Overflow Tap is permanently locked at the hardware level and cannot be rewritten or modified.
- Even if an app suggests the device is unlocked, attempts to change the link won't succeed.
- Any genuine link changes will be updated and reflected in the Dashboard.
If a link ever appeared to change or redirect unexpectedly, that is something we would want to investigate. However, status messages from third-party scanning tools alone don't indicate a security issue.
Benefits of Using Overflow Tap
Using a purpose-built solution like Overflow Tap helps partners focus on engagement, instead of maintenance and security concerns.
Unlike DIY setups, our Tap devices are:
- 📱 Fully encoded and permanently locked at the hardware level, reducing security risks.
- 📊 Designed for reliable performance so donors experience smooth and consistent taps.
- 🔄 Managed through your Dashboard, making link updates simple and eliminating the need to reprogram devices.
- 🤝🏽 Purpose-built for donor engagement, so your team can focus on outcomes instead of technical upkeep.
By removing complexities of consumer NFC solutions, partners can create reliable experiences that foster giving and connection. You can learn more in our blog post!
FAQs
What Does It Mean If an App Says the Device Is Unlocked?
It typically reflects how the scanning app interprets NFC data. TAP devices are permanently locked at the hardware level and cannot be edited or rewritten.
Can the Link on a Tap Device Be Changed?
Links can be updated through your Dashboard when you want to redirect Tap devices to a new destination. The device itself remains locked, so it cannot be rewritten outside our system.
Has Overflow Experienced a Security Issue?
No, Overflow has never been hacked. Messages about unlocked states come from scanning tools and don't indicate unauthorized access.
Why Does My App Show Writable or Unlocked?
Some free NFC readers don't detect hardware-level locks and display generic status messages. This is a limitation of the app and doesn't mean the device is editable.
Do I Need to Worry If a Scan Says Not Password Protected?
No! Our Tap devices use hardware-level security rather than password protection. This approach prevents unauthorized writes entirely.
What Should I Do If I Believe a Link Was Changed?
If you suspect a link was altered, please contact our Support team, so we can investigate. While this is highly unlikely, we treat security questions seriously.