Verifiable Credentials: Why a Signed PDF Proves Nothing — and What Replaces It

How verification works: seconds, no account

1. 1

   Open the public verification page (or scan the QR on the certificate).

2. 2

   Enter the code.

3. 3

   See the result in seconds: issuer, holder, scope, and status of the certificate.

No account, no login, no phone calls. A government official, a hospital, or the professional themselves can run the same check with the same gesture.

Tamper-proof by design

• The file is not the proof. Editing the PDF changes nothing: the public lookup answers from the registry, not from the paper.
• Rate limiting on the public endpoint. Brute-force enumeration of codes is cut off at the infrastructure layer.
• Opaque codes, zero personal data in the URL. The code encodes nothing about the holder; no personal data ever travels in a query string.

What it confirms — and what it doesn't

The public check confirms that the certificate exists, who issued it, whom it covers, and its current status. It does not replace a regulator's decision: the administrative effect of each procedure is set by the competent authority of the receiving country.

The person behind the certificate

A certificate is worth only as much as the identity it covers. Booka's Trust Agent cross-checks background records, passport identity — mathematically validated via MRZ — and professional standing, and unifies everything under one robust identity key: a professional never fragments into two files over a typo. And because a credential can stop being valid after it is issued, continuous license and sanctions monitoring closes the loop. More detail at Trust Agent.

The next level: eIDAS seals

For documents digitally signed by European universities and ministries, cryptographic validation of eIDAS seals — via the European Commission's DSS framework — is the strongest possible authenticity signal on a document. Booka has it evaluated and ready to activate. The regulatory context is covered in the European Professional Card and eIDAS2.

Conclusion

As long as the certificate is a file, trust is an opinion. A verifiable credential turns the check into an act of seconds, public and frictionless — and moves fraud from the easy terrain (editing a PDF) to the impossible one (altering the source's registry). The buyer doesn't have to believe. They can verify.