Sign in with your work email.
Stays signed in for 30 days. Leave it unticked on a shared or public computer — anyone using it could clock in as you.
No login? Use the entrance kiosk.