Verifiable Credential
A verifiable credential is a tamper-evident digital claim about a person or organisation that can be cryptographically verified without contacting the party that issued it. It replaces paper documents and PDFs with data a verifier can trust on its own.
An issuer signs the credential with a private key and gives it to a holder, who stores it in a wallet and presents it to a verifier whenever needed. The W3C Verifiable Credentials Data Model defines the common structure: a set of claims about a subject, metadata about the issuer and validity period, and a cryptographic proof binding all of it together, so any verifier that understands the format can check a credential from any issuer without a bespoke integration. A credential can be encoded as a signed JWT, as JSON-LD with a linked-data proof, or as a format like SD-JWT that supports selective disclosure, and different ecosystems favour different encodings for the same underlying data model. Revocation works without leaking who is checking what: an issuer publishes a status list, and a verifier looks up only whether a given credential's position on that list has been flipped, not which verifier is asking or when. In the EUDI Wallet under eIDAS 2.0, verifiable credentials are the standard format every member state must support, letting a business or citizen reuse one credential such as a mobile driving licence, a diploma or a company registration extract across issuers, sectors and borders instead of re-proving the same facts to each relying party separately. Because the proof is checked mathematically against the issuer's public key rather than through a phone call or a database lookup, verification still works even when the issuer is temporarily unreachable or based in another country.
How is a verifiable credential different from a PDF certificate?
A PDF certificate is just a document; anyone who receives it has to trust whoever sent it, or contact the issuer to confirm it is genuine. A verifiable credential carries a cryptographic signature the recipient can check on their own, instantly, against the issuer's public key, without a phone call, an email, or the issuer being reachable at that moment.