Encode a shc:/ SMART Health Card URI as a scannable QR — COVID-19 vaccination record, immunisation history, lab result, prescription. No signing, no FHIR server — your health authority issues the signed URI and we wrap it.
Verify our privacy claims live, from your browser▾
These values are computed in your browser right now. No server round-trip. Click any row for a one-line explanation.
Outbound requests after page load…Expected: 0Everything runs in your browser, so no data ever leaves after the initial page load.
Third-party domains contacted…Expected: 0No analytics, no CDN fonts, no avatar services, no trackers — single origin only.
Cookies set…Expected: 0No session, no analytics, no preferences in cookies. Nothing to sync, nothing to leak.
localStorage keys…Only your saved QRs and preferencesSaved templates, history, and language preference. Inspected in Application → Local Storage.
Service worker status…Offline-readyStatic assets cached for offline use. You can disable your network and the generator still works.
Network status…Offline proof: turn off WiFi, click Generate. Still works.The simplest proof. If this were secretly a client for a server, offline would break it.
This symbology renders monochrome with foreground and background colours only. Templates, dot/eye shapes, gradients, frames, and centre logos are QR-only features and are hidden here.
Show 30 more templates
Save a style with the button above to keep your favourites here.
#000000
#FFFFFF
#8B5CF6
Or pick a built-in icon:
Show 108 more icons
No icons match your search.
Renders behind the QR at adjustable opacity. Auto-forces EC=H so the QR still scans through the photo.
Batch Generation
Upload a CSV to generate up to 500 QR codes in a single batch. Each row becomes its own QR — pick a template or override 21 properties on a per-row basis: colors, frames, dot/eye/eyeball styles, gradients, transparency, size, error correction, format, built-in logo, and more.
21 columns: type, data, filename, frametext, frame, template, fgcolor, bgcolor, size, ec, dotstyle, eyestyle, format, logo, gradient, g2, gtype, gangle, transparent, eyeball, eyecolor. Only type and data are required. Use | to separate fields inside data (e.g. ssid|password|WPA).
All 125+ QR/barcode types supported, including URL, WiFi, vCard, TOTP, Swiss QR-bill, PIX, PromptPay, ZATCA, PayNow, Bitcoin + Lightning, and more. Download the sample CSV to see every column, all 50 templates, 11 frame styles, and 336 built-in logo icons in action.
1. Download the sample CSV · 2. Edit it in Google Sheets, Excel, Numbers, or any text editor · 3. Upload it here
Save the entire QR — type, all field values, style, frame, logo, business card design — as a single .qr.json file. Load it later to recreate everything in one click.
Enter content to generate your QR code
Encoded payload
Recent
You're editing an existing Pro code. Click "Update Pro code" below to save your changes back to Pro.
Need to change the destination after it's printed?
Optional: save as a Pro shortcode so you can swap the destination later without reprinting. Password-gating, scheduled activation, heatmap and ROI analytics, public stats pages, and a static backup QR. 90-day grace, no lock-in.
Scan a QR code using your camera, upload an image, or paste from clipboard
A SMART Health Card (SHC) is a W3C-style verifiable credential for health information — a signed FHIR bundle, compressed, encoded as a numeric shc:/ URI, and rendered as a QR code. It was developed by the Vaccine Credential Initiative (VCI), a coalition of Microsoft, Salesforce, Oracle, the Mayo Clinic, the Commons Project, MITRE, and Epic, and adopted by the CDC, California, New York, Quebec, the EU (as part of the Digital COVID Certificate interoperability), and 30+ other health authorities.
The QR is tamper-evident: the JWS signature binds the health data to the issuer's public key, which a verifier retrieves from the issuer's /.well-known/jwks.json. Scan with the SMART Health Card Verifier app (Apple / Android) or any compatible health wallet and you see a green check, the issuer name, and the decoded credential.
Why the numeric encoding?
Each character of the JWS is encoded as two base-10 digits — the character's Unicode ordinal minus 45. This lets the QR use the efficient Numeric encoding mode, which packs about 20% more data than Binary mode. A typical vaccination record fits in a V22 QR (~1,191 digits). Longer bundles get chunked: shc:/1/3/..., shc:/2/3/..., shc:/3/3/.... In practice, production SHCs rarely need chunking — issuers trim bundles to single-chunk size.
What's encoded inside?
The JWS (after chunk-reassembly and base-10 decoding) is a compact-serialised JSON Web Signature. The payload is a DEFLATE-compressed JSON FHIR bundle with one or more Immunization, Observation, or Patient resources. The JWS header carries a key ID (kid) that the verifier uses to fetch the issuer's ES256 public key.
What this generator is not
We do not issue SMART Health Cards. An SHC's value is its cryptographic signature from a trusted health authority (CDC, state health department, hospital, pharmacy). A self-signed card verifies as untrusted by every SHC verifier app. To get a signed shc:/ URI, log in to your provider's patient portal (Epic MyChart, Cerner HealtheLife, CVS, Walgreens, state immunisation registry) and export it from the Health Card download UI. Paste the URI here; we wrap it as a QR for printing, sharing, or saving.
Where SMART Health Cards are accepted
Travel — CommonPass, VeriFLY, and airline apps scan SHCs for international entry checks (historical COVID-19 vaccination proof; still active for yellow-fever and other travel-mandated vaccines in select countries).
Employment — healthcare employers, universities, and federal-contractor workflows use SHC verifiers for onboarding compliance.
Events — concert venues, conferences, and cruise ships have historically accepted SHCs in lieu of paper records.
Pharmacy / clinic check-in — Epic, Cerner, and modern EHRs scan SHCs to auto-populate immunisation history.
Also by Abundera
E-signatures that hold up in court
Abundera Sign goes beyond basic e-signatures. Every document gets cryptographic proof, independent verification, and a tamper-evident evidence package.
Auto-generated court-ready evidence packages
Personal Document Seal — detects tampering instantly
Anchored to 5 independent systems — no single point of failure
From your healthcare provider's patient portal. Epic-based MyChart (most US health systems), Cerner HealtheLife, CVS, Walgreens, Walmart Health, and state / provincial immunisation registries (California Digital Vaccine Record, New York Excelsior Pass, Quebec VaxiCode) all offer SHC download. Look for a 'Share COVID-19 Vaccination Record', 'SMART Health Card', or 'Immunisation Record QR' option.
Can I create my own SMART Health Card?
Technically yes — anyone can generate a self-signed shc:/ URI — but no verifier app will trust it. SHC value comes entirely from the issuer's signature being in the VCI Directory or the CommonTrust Network. Self-signed cards show as untrusted red warnings.
What's the difference between a SMART Health Card and the EU Digital COVID Certificate?
Different payload and signing standards. SHC uses W3C Verifiable Credentials on FHIR with ES256-signed JWS. The EU DCC uses CBOR Web Tokens with COSE signatures. Interoperability bridges exist (the CommonTrust Network accepts both) but the QR payloads are not interchangeable.
Why is the QR so dense?
SHC packs a compressed FHIR bundle plus a cryptographic signature into a single QR. Even with Numeric-mode encoding and deflate compression, a full vaccination history can approach the V22 QR limit (~1,191 digits = ~550 FHIR bytes). Use a high-quality print with ECC level L or M and at least a 2-module quiet zone.
What about the multi-chunk shc:/1/2/... format?
Production SHCs rarely use chunking — the VCI recommends trimming bundles to fit a single QR. If you do need to chunk, paste each chunk in order and generate one QR per chunk. Verifier apps scan them sequentially and reassemble before JWS verification. Chunk one: shc:/1/2/[digits], Chunk two: shc:/2/2/[digits].
Does the QR contain my medical record?
It contains whatever FHIR resources the issuer included — typically the minimum for the credential's purpose: name, date of birth, vaccine manufacturer / lot / date for immunisation records; test type / result / specimen date for lab results. A full EHR is not encoded. Treat the QR as sensitive: name + DOB + provider-visible health fact is PHI under HIPAA.
Can I revoke or update a SMART Health Card?
Not directly — the QR is a signed snapshot. If the underlying record changes (correction, new dose, revocation), your provider issues a new shc:/ URI. Verifier apps check the issuer's revocation list (if published) via the key ID. Old QRs keep decoding but may show as revoked.
Is this format used outside vaccination records?
Yes. SHC is a general-purpose W3C Verifiable Credential on FHIR — valid for any FHIR resource. Active deployments include lab results (PCR / antigen), immunisation histories (childhood + travel), prescriptions (pilot programs), discharge summaries (some Epic deployments), and insurance membership cards (early trials).
Which apps verify SMART Health Card QRs?
SMART Health Card Verifier (Apple App Store / Google Play), CommonPass, VeriFLY, CLEAR Health Pass, Apple Health (built-in since iOS 15.1), Google Wallet (since 2022), and Epic MyChart. Built-in iPhone camera recognises shc:/ URIs and hands off to Apple Health automatically.