Leave a truly private charger open when simplicity matters. Use RFID when several known people need dependable identification. Use an app for administration, not as the only everyday key unless the offline behaviour is excellent. Shared and paid sites usually need a managed combination rather than one universal access method.
When is an open charger the best choice?
An open charger begins when a compatible car is connected, without a card or phone. This is often the most pleasant setup in a locked garage or private driveway where nobody else can reach the cable.
It removes a daily failure point. A flat phone, expired login or misplaced card cannot block departure. The car or wallbox can still use a schedule and charge limit without user authentication.
Open access becomes less suitable when the parking area is accessible from the street, several households share equipment, or energy use must be allocated. Physical location is often a better first security control than adding software to an exposed charger.
How does RFID access work?
The user presents an authorised RFID card or tag to the charger. The charger or its backend checks the identifier and allows the session. Each tag can be assigned to a person, flat, vehicle pool or cost centre.
RFID is quick and does not require mobile reception. Some chargers store an offline authorisation list, so approved cards continue to work when the backend is unreachable. The size and update method of that list are product-specific.
Treat the identifier as an access token, not proof of identity. A borrowed card starts a session under the recorded account. Have a process for lost cards, departed employees and periodic access review.
When is an app useful?
An app can invite users, change schedules, show session history, set limits and sometimes start public or private chargers remotely. It is useful for occasional guests and administration that would be awkward on a small charger display.
It is less friendly as the only key in a basement with poor reception. Accounts can be logged out, phones replaced and vendor services retired. Before choosing app-only access, test the steps from arriving to actual energy flow.
Ask whether local Bluetooth, Wi-Fi or a physical override exists. Also ask what a new property owner can do if the original administrator is unavailable.
Can a charger use several methods together?
Yes. A shared site may let regular users tap RFID, administrators use a web portal and guests scan a temporary code. A home charger may remain open during normal hours and lock at other times.
Multiple methods need a clear source of truth. Decide who creates users, who can start remotely, how duplicated identities are merged and what appears on reports. Otherwise one person’s app session and RFID session may look like two different users.
OCPP can carry authorisation and transaction messages between a station and central software. That helps managed sites, but the exact functions depend on protocol version, profiles and implementation.
Does access control prevent electricity theft?
It can prevent casual unauthorised charging, but it is not complete site security. A publicly reachable cable, enclosure or network connection can still be damaged. Credentials can be shared. Remote accounts can be attacked if passwords and recovery controls are weak.
Use a location-appropriate combination of lighting, physical installation, account security and access logs. Keep charger firmware supported. Remove unused accounts and tags promptly.
Do not confuse a software lock with electrical isolation
Disabling a charger in an app is not a safe-isolation procedure for maintenance. A qualified person must follow the product and installation requirements before opening equipment or working on the circuit.
How should access work when the internet fails?
Define the preferred failure mode. A private home usually benefits from allowing basic local charging. A paid public site may need cached authorisation, local transaction storage and later data upload. A high-security location may intentionally deny unknown users.
Ask the supplier to state, in order:
- whether an already authorised card starts offline;
- whether open local charging remains possible;
- whether load limits and schedules continue;
- whether meter data is stored and reconciled;
- how the administrator regains control after a cloud outage.
Do not accept “OCPP” or “smart charger” as the answer. Offline behaviour is a product and configuration choice.
Which method should you choose?
For a private space, start with open local charging and add locking only for a real risk. For a few known shared users, RFID is usually the least disruptive daily method. For a workplace or apartment site, use a managed system that combines simple credentials with auditable administration.
Keep a fallback that does not depend on one person’s phone. The best access control is almost invisible to authorised drivers and obvious to the person responsible for the site.
Frequently asked questions
Do I need RFID on a private home charger?
Often not. If the charger is inside private property and unauthorised use is unlikely, plug-and-charge convenience may be better. RFID becomes useful in open parking areas, shared buildings, workplaces or whenever sessions need to be assigned to specific users.
Will an app-controlled wallbox charge without internet?
That depends on the product. Some chargers keep local schedules and authorised cards; others rely on a vendor cloud for important controls. Ask the supplier to demonstrate what starts, stops, records and load-balances when both internet and cloud service are unavailable.
Can RFID records be used for employee reimbursement?
RFID can associate a session with a user, but reimbursement also needs suitable metering, data integrity, a defined electricity price and rules accepted by the employer and tax authority. A card identity alone does not prove a legally sufficient expense amount.
