An access management system includes a mobile device with a processor and a memory and a software platform including at least a processor and a memory. The software platform is configured to generate a polymorphic access key, and the mobile device is configured to receive the polymorphic access key and display the polymorphic access key or communicate the polymorphic access key to an access management device. The access management device is configured to provide access to an account, another device, a physical space, or a virtual space upon reading or receiving the polymorphic access key and verifying the polymorphic access key.