ID scanner software reads the barcode on a customer's ID, checks their age, and logs that the check happened. For a bar, a dispensary, or an event door, the right software does that fast, keeps only what proves the check, and doesn't bill you per scan.
That's the whole job. The hard part is telling the honest tools from the ones that oversell.
Here's what ID scanner software should do, what it should keep, and how to choose one that fits your door.
What ID scanner software actually does
Every US driver's license and state ID carries a PDF417 barcode on the back, a standard block defined by the AAMVA DL/ID Card Design Standard. ID scanner software reads that barcode and pulls the encoded fields.
From there it does the useful work: it checks the date of birth against your age threshold, flags an expired card, and returns a single verdict. A good one also raises a passback flag when the same ID comes through twice.
That's the same core whether the door is a nightclub, a dispensary counter, or a festival gate. (For the full mechanism, see how ID scanners work.)
One honest limit up front: reading a barcode is not authenticating the card. The software does the age check and the record. It does not confirm the ID is genuine, and a good fake can carry a barcode that scans clean.
What to look for in ID scanner software
Most "software" today runs as an app on a phone, so you're really choosing a tool, not a machine. Judge it on what it does at the door and what it leaves behind.
What ID scanner software can't do
Worth stating plainly, because the marketing rarely does: reading a barcode is not authenticating the card.
The software decodes the data encoded in the PDF417 barcode and checks the age. It does not inspect the hologram, the laminate, or the microprint, and a good fake can carry a barcode that scans clean. A clean scan means the data reads and the age adds up, not that the ID is genuine.
Any vendor selling "99% fake detection" is overselling a barcode read. Catching a forgery is still the job of a trained person looking at the card. What the software reliably gives you is a fast age check and a record, which is plenty, as long as you know the line it can't cross.
The part that matters most: what it keeps
This is where ID scanner software separates into two camps, and it's the one worth slowing down for.
Some software stores everything it reads: names, birth dates, even images of the license, often on a server. Investigations have documented venue scanners retaining and sharing that data, sometimes for weeks.
That stored pile is a liability. It's something to breach, subpoena, or leak, and under privacy laws like California's CPRA it's data you're now responsible for.
You don't need any of it to prove you checked. The honest model keeps only a one-way code, an age bracket, and the result, with no name, date of birth, or ID number stored.
That's the clean record: the proof you carded, without the file on your customers. You can decide exactly what a scanner keeps before you deploy it, and it's worth reading Carded's privacy approach as a model.
Where your data lives: on-device or in the cloud
Close to what software keeps is where it does the work.
Some ID scanner software uploads the read to a server and processes it in the cloud. The customer's data leaves the device, so it now lives somewhere you have to secure, and somewhere a breach or a subpoena can reach.
On-device software does the opposite. It reads the barcode and checks the age right on the phone, and only a de-identified record leaves: a one-way code, an age bracket, and the result. Nothing sensitive travels.
For a bar, a dispensary, or an event counter, on-device is the safer default. Ask any vendor a plain question: where does the read happen, and what leaves the device?
By venue: bars, dispensaries, events
The software is the same. What you weight most shifts with the room.
One caveat for retail and dispensaries: age and record-keeping rules vary by state, and cannabis carries its own. This is general information, not legal advice, so confirm what your state and regulator require.
Does it need to plug into your systems?
Usually not, and be wary of software that insists on it.
Enterprise platforms often pitch POS, CRM, or identity-system integrations. A door or counter check doesn't need any of that: read the ID, check the age, keep the record.
Carded is standalone. There's nothing to wire into your point of sale, and fewer connections means fewer places your customers' data can travel. If you need to feed another system later, look for a plain export, not a deep integration you have to maintain.
Pricing: watch the model, not just the number
Two tools at the same monthly price aren't the same deal if one charges per scan on top.
Per-scan and per-location fees turn a busy Saturday into a bigger bill, and bundled hardware adds a purchase you may not need. A flat subscription on phones your staff already carry is usually the cheapest honest path.
For reference, Carded is free to start, then $14.99 a month or $79.99 a year (about $6.67 a month), with no per-scan fees.
So, what should a business look for?
Software that reads the barcode fast, keeps only the proof, catches the passback, runs offline, and charges a flat rate. And one that's honest about the line a barcode can't cross: it checks age and keeps a record, it doesn't catch a good fake. That part is still the person at the door. If you're comparing bar-door options specifically, see the best ID scanner apps for bars.
Carded is that kind of software. It reads the barcode, checks age, flags expired, catches the passback, and keeps a clean record with no name, date of birth, or ID number stored, offline, on the phone in your staff's pocket. Download Carded to try it at your door, or see how it works first.