Encode a shc:/ SMART Health Card URI as a scannable QR — COVID-19 vaccination record, immunisation history, lab result, prescription. No signing, no FHIR server — your health authority issues the signed URI and we wrap it.
Verify our privacy claims live, from your browser▾
These values are computed in your browser right now. No server round-trip. Click any row for a one-line explanation.
Outbound requests after page load…Expected: 0Everything runs in your browser, so no data ever leaves after the initial page load.
Third-party domains contacted…Expected: 0No analytics, no CDN fonts, no avatar services, no trackers — single origin only.
Cookies set…Expected: 0No session, no analytics, no preferences in cookies. Nothing to sync, nothing to leak.
localStorage keys…Only your saved QRs and preferencesSaved templates, history, and language preference. Inspected in Application → Local Storage.
Service worker status…Offline-readyStatic assets cached for offline use. You can disable your network and the generator still works.
Network status…Offline proof: turn off WiFi, click Generate. Still works.The simplest proof. If this were secretly a client for a server, offline would break it.
This symbology renders monochrome with foreground and background colours only. Templates, dot/eye shapes, gradients, frames, and centre logos are QR-only features and are hidden here.
Laat 30 templates meer zien
Sla een stijl op met de knop hierboven om je favorieten hier te bewaren.
#000000
#FFFFFF
#8B5CF6
Of kies een ingebouwd icoon:
108 extra pictogrammen tonen
No icons match your search.
Wordt achter de QR weergegeven met verlaagde dekking. Forceert automatisch EC=H zodat de QR via de foto scanbaar blijft.
Batch Generatie
Upload een CSV om tot 500 QR-codes in één batch te genereren. Elke rij wordt een eigen QR — kies een sjabloon of overschrijf 21 eigenschappen per rij: kleuren, frames, stippen-/ogen-/oogbolstijlen, gradiënten, transparantie, formaat, foutcorrectie, bestandsformaat, ingebouwd logo en meer.
21 kolommen: type, data, filename, frametext, frame, template, fgcolor, bgcolor, size, ec, dotstyle, eyestyle, format, logo, gradient, g2, gtype, gangle, transparent, eyeball, eyecolor. Alleen type en data zijn verplicht. Gebruik | om velden binnen data te scheiden (bijv. ssid|password|WPA).
Alle 20 QR-types worden ondersteund, waaronder URL, WiFi, vCard, MeCard, Email, SMS, Event, Location, UPI, SEPA, PayPal, Crypto, Micro QR en rMQR. Download de voorbeeld-CSV om alle kolommen, alle 40 sjablonen, 11 framestijlen en de 12 ingebouwde logo's in actie te zien.
1. Voorbeeld-CSV downloaden · 2. Bewerken in Google Sheets, Excel, Numbers of een teksteditor · 3. Hier uploaden
Sla de hele QR â type, alle veldwaarden, stijl, frame, logo, visitekaartjesontwerp â op als één .qr.json bestand. Laad het later om alles in één klik opnieuw te maken.
Voer inhoud in om je QR-code te genereren
Encoded payload
Recent
You're editing an existing Pro code. Click "Update Pro code" below to save your changes back to Pro.
Need to change the destination after it's printed?
Optioneel: sla op als Pro-shortcode zodat je de bestemming later kunt wijzigen zonder opnieuw te printen. Wachtwoordbeveiliging, geplande activering, heatmap- en ROI-analyse, publieke statistiekpagina's en een statische back-up QR. 90 dagen respijt, geen vendor lock-in.
Scan een QR-code met je camera, upload een afbeelding of plak vanaf het klembord
A SMART Health Card (SHC) is a W3C-style verifiable credential for health information — a signed FHIR bundle, compressed, encoded as a numeric shc:/ URI, and rendered as a QR code. It was developed by the Vaccine Credential Initiative (VCI), a coalition of Microsoft, Salesforce, Oracle, the Mayo Clinic, the Commons Project, MITRE, and Epic, and adopted by the CDC, California, New York, Quebec, the EU (as part of the Digital COVID Certificate interoperability), and 30+ other health authorities.
The QR is tamper-evident: the JWS signature binds the health data to the issuer's public key, which a verifier retrieves from the issuer's /.well-known/jwks.json. Scan with the SMART Health Card Verifier app (Apple / Android) or any compatible health wallet and you see a green check, the issuer name, and the decoded credential.
Why the numeric encoding?
Each character of the JWS is encoded as two base-10 digits — the character's Unicode ordinal minus 45. This lets the QR use the efficient Numeric encoding mode, which packs about 20% more data than Binary mode. A typical vaccination record fits in a V22 QR (~1,191 digits). Longer bundles get chunked: shc:/1/3/..., shc:/2/3/..., shc:/3/3/.... In practice, production SHCs rarely need chunking — issuers trim bundles to single-chunk size.
What's encoded inside?
The JWS (after chunk-reassembly and base-10 decoding) is a compact-serialised JSON Web Signature. The payload is a DEFLATE-compressed JSON FHIR bundle with one or more Immunization, Observation, or Patient resources. The JWS header carries a key ID (kid) that the verifier uses to fetch the issuer's ES256 public key.
What this generator is not
We do not issue SMART Health Cards. An SHC's value is its cryptographic signature from a trusted health authority (CDC, state health department, hospital, pharmacy). A self-signed card verifies as untrusted by every SHC verifier app. To get a signed shc:/ URI, log in to your provider's patient portal (Epic MyChart, Cerner HealtheLife, CVS, Walgreens, state immunisation registry) and export it from the Health Card download UI. Paste the URI here; we wrap it as a QR for printing, sharing, or saving.
Where SMART Health Cards are accepted
Travel — CommonPass, VeriFLY, and airline apps scan SHCs for international entry checks (historical COVID-19 vaccination proof; still active for yellow-fever and other travel-mandated vaccines in select countries).
Employment — healthcare employers, universities, and federal-contractor workflows use SHC verifiers for onboarding compliance.
Events — concert venues, conferences, and cruise ships have historically accepted SHCs in lieu of paper records.
Pharmacy / clinic check-in — Epic, Cerner, and modern EHRs scan SHCs to auto-populate immunisation history.
Ook van Abundera
E-handtekeningen die standhouden in de rechtbank
Abundera Sign gaat verder dan gewone e-handtekeningen. Elk document krijgt cryptografisch bewijs, onafhankelijke verificatie en een manipulatiebestendig bewijspakket.
From your healthcare provider's patient portal. Epic-based MyChart (most US health systems), Cerner HealtheLife, CVS, Walgreens, Walmart Health, and state / provincial immunisation registries (California Digital Vaccine Record, New York Excelsior Pass, Quebec VaxiCode) all offer SHC download. Look for a 'Share COVID-19 Vaccination Record', 'SMART Health Card', or 'Immunisation Record QR' option.
Can I create my own SMART Health Card?
Technically yes — anyone can generate a self-signed shc:/ URI — but no verifier app will trust it. SHC value comes entirely from the issuer's signature being in the VCI Directory or the CommonTrust Network. Self-signed cards show as untrusted red warnings.
What's the difference between a SMART Health Card and the EU Digital COVID Certificate?
Different payload and signing standards. SHC uses W3C Verifiable Credentials on FHIR with ES256-signed JWS. The EU DCC uses CBOR Web Tokens with COSE signatures. Interoperability bridges exist (the CommonTrust Network accepts both) but the QR payloads are not interchangeable.
Why is the QR so dense?
SHC packs a compressed FHIR bundle plus a cryptographic signature into a single QR. Even with Numeric-mode encoding and deflate compression, a full vaccination history can approach the V22 QR limit (~1,191 digits = ~550 FHIR bytes). Use a high-quality print with ECC level L or M and at least a 2-module quiet zone.
What about the multi-chunk shc:/1/2/... format?
Production SHCs rarely use chunking — the VCI recommends trimming bundles to fit a single QR. If you do need to chunk, paste each chunk in order and generate one QR per chunk. Verifier apps scan them sequentially and reassemble before JWS verification. Chunk one: shc:/1/2/[digits], Chunk two: shc:/2/2/[digits].
Does the QR contain my medical record?
It contains whatever FHIR resources the issuer included — typically the minimum for the credential's purpose: name, date of birth, vaccine manufacturer / lot / date for immunisation records; test type / result / specimen date for lab results. A full EHR is not encoded. Treat the QR as sensitive: name + DOB + provider-visible health fact is PHI under HIPAA.
Can I revoke or update a SMART Health Card?
Not directly — the QR is a signed snapshot. If the underlying record changes (correction, new dose, revocation), your provider issues a new shc:/ URI. Verifier apps check the issuer's revocation list (if published) via the key ID. Old QRs keep decoding but may show as revoked.
Is this format used outside vaccination records?
Yes. SHC is a general-purpose W3C Verifiable Credential on FHIR — valid for any FHIR resource. Active deployments include lab results (PCR / antigen), immunisation histories (childhood + travel), prescriptions (pilot programs), discharge summaries (some Epic deployments), and insurance membership cards (early trials).
Which apps verify SMART Health Card QRs?
SMART Health Card Verifier (Apple App Store / Google Play), CommonPass, VeriFLY, CLEAR Health Pass, Apple Health (built-in since iOS 15.1), Google Wallet (since 2022), and Epic MyChart. Built-in iPhone camera recognises shc:/ URIs and hands off to Apple Health automatically.