UKG Pro

UKG Pro Review: Pay, Punches and Shifts in One App, Slowed by Sign-In

What Your Employer Switches On: Three Time Products, One App

UKG's own help pages say a system administrator decides which features each organization gets, and that the mobile set can differ from the web version. The time tools depend on which of three UKG products your employer licenses: Workforce Management, Time and Attendance or Time Management. Workforce Management users can request open shifts and punch by scanning a QR code; Time and Attendance users get timesheets and leave balances. On the Pay tab, where enabled, you can open pay statements as PDFs, estimate a paycheck, edit direct deposit and pull Form W-2 PDFs. Managers approve timecards, publish schedules and answer time-off requests from the same screens. It also replaced three older apps, UKG Pro Classic, UKG Dimensions and UKG Talk, which UKG removed from both stores on March 31, 2025.

Known Places: What a Geofenced Punch Records

Clock-in limits come from geofencing, which UKG calls Known Places. An administrator defines each place as a GPS location, a Wi-Fi network, Wi-Fi access points or a QR code, and a punch from outside can be flagged or refused, depending on setup. With geofencing on, each punch sends your latitude, longitude, the accuracy your phone reports and any Wi-Fi details, and UKG keeps those raw coordinates in timecard audit reports. When the GPS fix is weak, the app retries for roughly 2 to 3 minutes before submitting its best reading, which fits Play reviewers who say they were nearly late. Employers can also require a fingerprint, face or device passcode before every punch. The Punch screen carries a Where can I punch? link to a map of allowed places.

Access Code, MFA and the 180-Day Biometric Token

First launch asks for the company access code or tenant URL, typed or scanned from a QR code; anyone with UKG web access finds it under the user icon, in Mobile App Instructions. Sign-in then hands off to the phone's browser for a UKG password or corporate SSO, plus a text, call or email code if MFA is on. Biometrics skip MFA and stay valid for 180 days, but a password reset cancels that token, and the app signs you out after 20 minutes of inactivity. Complaints cluster here: of the 150 newest English Play reviews we read, posted September 22 to October 1, 2026, 126 gave 1 or 2 stars, 30 mention sign-in trouble and 50 slow loading. Rivals start the same way: ADP Mobile Solutions can take a registration code from your administrator, Workday an Organization ID and Dayforce a Company ID.

Location Labels, AES-256 Tokens and Shared-Phone Rules

Google Play's data-safety label lists approximate and precise location, photos and videos as optional, plus diagnostics; it says nothing is shared with third parties and that you cannot request deletion. Apple's label links payment information, precise and coarse location, contact details and identifiers to your identity. UKG's privacy notice sends employees of client companies to their employer with privacy requests, since the employer controls that data. Face and fingerprint checks stay on the phone: UKG says the app learns only whether a scan passed. The app refuses to start on rooted or jailbroken phones and encrypts stored tokens with AES-256. Shared phones get extra limits: if two people enable biometrics for one workspace on the same device, biometric sign-in switches off for both, and too many failed password attempts make the account inactive.