Abstract
Conventional Radio Frequency Identification (RFID)-based attendance systems in educational environments, such as Islamic boarding schools (pesantren), still suffer from a fundamental vulnerability to buddy punching fraud. This study aims to design and implement a student attendance system based on the ESP32 microcontroller by applying a Two-Factor Authentication (2FA) mechanism combining an MFRC522 RFID card and a Dynamic PIN, integrated with a Telegram Bot in real-time as an automated attendance solution at Pondok Pesantren Baitussyakirin, Brangsong, Kendal Regency. The development method used is Research and Development (R&D) with an embedded system approach. When an RFID card is tapped, the ESP32 instantly generates a random 4-digit PIN on a 16x2 LCD screen, which students must retype via a 4x4 keypad within a 8-second timeout limit. Test results show that the MFRC522 RFID reader performs optimally at a distance of 0–2.5 cm. The implementation of the Dynamic PIN proved 100% effective in preventing buddy punching by validating the physical presence of the user at the site. Attendance notification delivery to the administrator's Telegram application achieved a 100% success rate with an average delay of 2.42 seconds on a stable Wi-Fi network. This system successfully provides a secure, accurate, cost-effective, and transparent student attendance solution.