MicroCreds LogoMicroCreds.

Blockchain & Security

Understand how MicroCreds ensures 100% authenticity and immutability for every issued credential using real blockchain technology.


Cryptographic Hashes

Every time a credential is issued on the MicroCreds platform, we generate a unique cryptographic hash using the SHA-256 algorithm. This hash acts as a digital fingerprint for the certificate. It is mathematically impossible to reverse-engineer or forge.

// Example Verification Hash
8cd20c1a306abd4400b4751f21b5e282fef5f51f5c7119689499351729b1441b

On-Chain Hash Anchoring

MicroCreds uses a real Smart Contract deployed on the Ethereum Sepolia Testnet to permanently anchor credential hashes on the blockchain. When a credential is issued, the following happens:

  1. A SHA-256 hash of the credential data is generated.
  2. The hash is sent to the MicroCreds.sol smart contract via the issueCredential() function.
  3. The Ethereum network confirms the transaction and returns a Transaction Hash (txHash) and Block Number.
  4. The txHash and block number are stored in the database alongside the credential.

This means that even if MicroCreds ceases to exist, the cryptographic proof of every credential remains permanently on the public blockchain ledger — verifiable by anyone, forever.

// Smart Contract Functions
issueCredential(bytes32 hash) → Records new credential
revokeCredential(bytes32 hash) → Revokes credential
isValid(bytes32 hash) → Free verification check
getCredential(bytes32 hash) → Full credential details

Verification Process

When a verifier views a certificate, they can see:

  • On-Chain Verified badge — confirming the credential is recorded on the blockchain.
  • Network — Shows which blockchain network (e.g., Sepolia Testnet).
  • Block Number — The exact block where the credential was recorded.
  • Etherscan Link — A clickable link to view the raw transaction on a public block explorer.

Revocation Mechanisms

Unlike traditional printed certificates, digital credentials issued on MicroCreds can be instantly revoked by the issuing organization in case of error or policy violation. When a credential is revoked:

  1. The revokeCredential() function is called on the smart contract, permanently recording the revocation on-chain.
  2. The verification page immediately updates to show a red REVOKED status.
  3. The isValid() function on the smart contract will return false for revoked credentials.

This dual-layer approach (on-chain + off-chain) ensures maximum security while maintaining fast response times for end users.

Graceful Fallback

MicroCreds is designed with resilience in mind. If the blockchain network is temporarily unavailable (e.g., network congestion, RPC downtime), credentials will still be issued with full off-chain verification. The system will display an "Off-Chain Only" indicator for these credentials. They remain fully valid through MicroCreds' own verification system.