Revocable stage timer links: hand off access, then cut it

Why “just leave the link up” becomes a problem

Show week is messy. Links get pasted into WhatsApp, Slack, a printed rundown, a spare laptop. That is normal. What is not normal is treating those URLs like forever passwords.

• A leftover tab on a venue PC still shows live state during the next rental.
• A screenshot of the URL in a group chat outlives the event.
• Someone “just checking” mid-week thinks they still have access — or worse, still does.
• You cannot hunt every device the way you can revoke a token once.

Handoff, not shared login

The trust model is simple: Control stays signed-in with the operator. Stage is a tokenized read-only URL. Guests never get start/pause. When the show ends, you cut the token — you do not change a shared password that half the crew memorized.

That is the difference between access for the job and access that lingers. Revocation is part of teardown, same as packing cable and clearing the lectern.

Think of Stage URLs like radio channel assignments for one show night — not like the venue Wi‑Fi password that stays on the wall for a year.

Field sequence: share → confirm → show → revoke

Use the same eight steps every time. Skip the improvisation.

• Name the Stage for the display job (Lectern, Prompt, Backstage) — not a person nickname.
• Create the Stage and copy the URL immediately while it is visible.
• Store the URL in the event show bible (or regenerate later if lost).
• Open on the real screen before doors; confirm it follows Control pause/nudge.
• Brief floor: watch-only; do not forward the link outside the crew that needs it.
• Run the show with one Control owner.
• After curtain (or after the last planned hold): regenerate or delete Stage links you shared widely.
• Optional Broadcast: revoke the overlay link the same night if it was generated.

Teardown checklist (print this)

Afterglow is when discipline slips. Use this list before phones come out for photos.

• Stop live operation in Control (or leave idle on a safe segment).
• Revoke / regenerate / delete each Stage link that left the building.
• Confirm a previously open Stage tab no longer shows usable live state.
• Clear printed QR/URL sheets from lectern and green room.
• Remove the URL from temporary crew chats if you can; assume screenshots exist anyway — revoke covers that.
• Note in the show report: which links were rotated (so the next call knows).
• If a display must stay up for load-out only, keep one named link and cut the rest.
• Do not reuse last month’s Stage URLs “because they still work.”

Regenerate vs delete vs revoke

Language varies by screen, but the intent is the same: the old secret stops working.

• Regenerate — issues a new URL; old one dies. Use when you lost the copy or rotated crew.
• Delete — removes the Stage monitor entirely. Use when that display job is over.
• Revoke (Broadcast) — turns the optional overlay link off for everyone on that token.

If you are unsure which action to take after a public paste, regenerate. Fresh URL, update the displays you still need, treat the leaked one as burned.

How this fits ShowTiming’s access model

ShowTiming keeps operator tools behind a signed-in Control room. Stage links are read-only and per event. You can turn them off after the show. That is the trust story we state on Security — without promising unverifiable absolutes.

Pair this teardown with the Stage handoff ritual: create → copy → open → brief → revoke. Access without an end state is how leftover tabs become next week’s surprise.

FAQ

Do I need to revoke if the link never left my laptop? If it never left a trusted machine, risk is lower — but habit beats exception. Rotating after every public show keeps the ritual automatic.

Will talent notice when I revoke? If the show is over, they should not need the countdown. If a load-out display must stay, keep one link and cut the others.

Is regenerate the same as changing a password? Better for this job: you do not need everyone to memorize a new password. Displays get a new URL; old tokens die.

Where do I manage these links? Inside the event, on Stage & Broadcast — not inside Control Room. Create, copy, regenerate, and delete live there.

Related

Stage monitor timer: why read-only wins · Why a shared countdown changes show day · Security & access · Wiki: Stage & Broadcast links