# Online certificate verification: let employers check your academy's certificates > How a training centre or school lets employers check its certificates online: a unique code and QR code on each certificate, a verification page, and what it should show. With a real example from CCL in Marrakech. By Salaheddine Elfatimi, Full Stack Developer in Marrakech. Published 24 October 2026. Updated 24 October 2026. Canonical: https://salaheddine-elfatimi.com/blog/online-certificate-verification ## Key takeaways - Online certificate verification gives each certificate a unique code (and a QR code) that anyone can check on the academy's own website. - The page answers from the academy's records: valid with the name, programme and date, revoked or expired, or not found. - Show enough to trust the paper (name, programme, date, code, status, issuer) and keep contact details, ID numbers and payments private. - Built into the platform, certificates come from the same data as learners and results, so nobody has to upload a list of graduates by hand. Online certificate verification lets anyone check that a certificate from your training centre is real. Each certificate gets a unique code, often with a QR code printed next to it. An employer types the code or scans the QR code, and a page on your website answers from your own records: valid or not, with the holder's name, the programme and the date. No phone call, no email, no waiting. ![Online certificate verification in one picture: a unique code and a QR code on the certificate, a page on the academy's site, and a live answer from its records.](https://salaheddine-elfatimi.com/uploads/2026/10/cover-103f47e2.webp) ## Why does a training centre need online certificate verification? Tuesday morning. Your secretary gets an email from an HR manager in Casablanca: "Can you confirm that this person really completed your project management programme?" A scanned PDF is attached. She opens the old spreadsheet, searches the name, finds two people with the same surname, and calls the trainer. Forty minutes later, she answers. Then the next email arrives. A certificate is only worth what people believe about it. A PDF can be edited by anyone with a laptop, and a printed page can be copied with a better printer than yours. If an employer can't check your certificate, the honest graduate and the one who edited a PDF look exactly the same on paper. Online certificate verification fixes both problems at once. Employers check on their own, in seconds, and your team stops being a call centre for diplomas. It also says something about you: an academy that lets anyone check its certificates is an academy that isn't afraid of the check. ## How does certificate verification work for an employer? From the employer's side, online certificate verification takes less time than reading the certificate itself: 1. **They look at the certificate.** Next to the name and the programme, there's a short code and often a QR code. 2. **They scan the QR code or open your verification page.** The QR code already holds the link with the code in it; otherwise they type the code into a single field. 3. **Your page answers.** It reads the certificate from your platform's database and shows whether it's valid, with the details they can compare with the paper. Three answers are possible: **valid** (here are the details), **revoked or expired** (it existed, but it no longer counts), or **not found** (this code was never issued by you). That last one is the answer an edited PDF gets. ![How certificate verification works: the learner passes, the platform issues a certificate with a unique code and a QR code, and the employer's check is answered from the academy's database.](https://salaheddine-elfatimi.com/uploads/2026/10/flow-6a44b1fa.webp) ## A real example: CCL's certificate verification [CCL](https://ccl.ma/), the Centre de Compétences et Leadership in Marrakech, runs certifying programmes, MBAs and master's degrees online. Its site, one of the platforms I've built, has online certificate verification right on the home page, plus a dedicated [certificate verification page](https://ccl.ma/certifs/verify) linked from every page's footer under "Vérifier mon certificat". Here is what the public pages actually say and show: - **One unique code per certificate.** "Chaque certificat CCL possède un code unique": every CCL certificate has its own code, and entering it confirms that it's authentic. - **No account needed.** The check works "sans inscription": the employer doesn't create anything, they just type. - **A code or an email address.** The field accepts the code printed on the certificate, or the holder's email address. - **A live answer.** CCL says the result comes in real time from its official servers, and that no data is stored from the check. - **What a result looks like.** A sample card shows the fields: the certificate holder, the code, the cohort, the nationality, who issued it (CCL Marrakech), and a line saying the certificate is authentic and active. ![CCL's certificate verification section on ccl.ma: one field for the code or email, and a sample result card with placeholder data (holder, code, cohort, issuer).](https://salaheddine-elfatimi.com/uploads/2026/10/proof-7d76104a.webp) Why it matters for CCL in particular: the academy says it has trained more than 97,000 learners since 2004, in 13 countries. Nobody can answer that many "is this real?" emails by hand. A page can. ## What should a certificate verification page show? Enough for an employer to trust the paper in front of them, and nothing more. My rule: the page should confirm a certificate, not reveal a person. - **Show:** the holder's full name, the programme or course title, the issue date (and the cohort if you use them), the code, its status (valid, revoked, expired), and your academy's name as the issuer. - **Keep private:** email address, phone number, ID card or passport number, date of birth, payments, and grades unless the learner agrees. - **Never list:** no page that lets someone browse all your graduates or search by name. One code, one certificate. Each academy then adds what makes sense for it. CCL shows the cohort and the nationality, which fits an academy that trains people in 13 African countries; a language school might show the level reached, a CEFR B2 for example. That's a choice you make once, with the learner's privacy in mind. ![What a certificate verification page should show (name, programme, date, code, status, issuer) and what it should keep private (contact details, ID numbers, payments).](https://salaheddine-elfatimi.com/uploads/2026/10/showhide-37df9102.webp) ## Unique code, QR code or both? Both, because they're for different moments: - **The code** works everywhere: on paper, in a CV, read over the phone. It should be short enough to type and random enough that nobody can guess the next one. A code like 2024-0001 invites someone to try 2024-0002. - **The QR code** is the fast path: the employer points a phone at it and lands on the result. It's simply your verification link with the code inside it. On [UpSkills](https://www.upskills-uk.com/), a skills e-learning platform I built, learners who finish a course and pass its final exam download their certificate as a PDF with a QR code anyone can verify. On Polypro, a language-learning platform, learners earn certificates anyone can verify online, and [CCL E-Learning](https://elearning.ccl.ma/) issues certificates for its video courses. If you only need a QR code for a printed document, my free [QR code generator](https://salaheddine-elfatimi.com/tools/qr-code-generator) does that, but a static QR code can't tell an employer whether a certificate was revoked. Only a page connected to your records can. ## How is a certificate verification system built? Under the hood, it's smaller than it sounds. A certificate verification system needs four pieces, and on a custom platform they live next to your courses and learners: 1. **A certificates table.** Each row links a learner and a programme to a unique code, an issue date and a status. Issuing a certificate creates the row; revoking it changes the status, it never deletes the row. 2. **The rule that issues it.** On UpSkills, it's finishing the course and passing the final exam. For a live programme, it can be the admin validating a cohort. The certificate is created by the platform, not typed by someone in Word. 3. **The PDF.** Generated from the same data, with the name, programme, date, code and QR code in place. If the data changes, a new PDF is generated from it. 4. **The public page.** One field, one answer, readable on a phone, and limited to the fields you chose to show. It should also slow down anyone who tries thousands of codes in a row. The important part isn't the QR code: it's that the certificate and the answer come from the same database as your learners and their results. That's the difference with a ready-made tool bolted on the side, where someone has to upload a spreadsheet of graduates after each session. If you're weighing a ready-made LMS against a custom one, I compare them in [Moodle alternative for schools and training centres](https://salaheddine-elfatimi.com/blog/moodle-alternative) and [LearnWorlds alternative](https://salaheddine-elfatimi.com/blog/learnworlds-alternative-custom-elearning-platform). ## How much does online certificate verification cost? On a platform I build, it's one module among others: certificates, the PDF and the verification page. A focused first version of a platform starts from about $1,000, and each extra module is quoted separately. Here is [how I price an e-learning platform, module by module](https://salaheddine-elfatimi.com/blog/e-learning-platform-cost). If you already have a platform, it can often be added on top of your existing learners and results. ## Does your academy issue certificates? Tell me how you issue them today (Word, a spreadsheet, an LMS) and roughly how many per year, and I'll reply with how online certificate verification would work for your academy and a quote: [send me a message here](https://salaheddine-elfatimi.com/#contact). It usually comes as part of [an e-learning platform with courses, payments and certificates](https://salaheddine-elfatimi.com/services/e-learning-platforms), and you can see [the platforms I've delivered](https://salaheddine-elfatimi.com/#projects). ## Frequently asked questions ### What is online certificate verification? It's a page on the issuer's website where anyone can check that a certificate is real. They type the certificate's unique code or scan its QR code, and the page confirms it from the issuer's records, with the holder's name, the programme and the date. ### How can an employer check that a training certificate is real? If the certificate has a code or a QR code, by entering it on the training centre's verification page. If it has neither, the only way is to contact the centre directly, which is why academies add online verification. ### What information should a certificate verification page show? The holder's full name, the programme, the issue date, the code, its status (valid, revoked or expired) and the issuer. It should not show contact details, ID numbers or payments, and it should not let anyone browse or search all graduates. ### Can I add certificate verification to my existing platform? Often, yes: it needs a certificates table linked to your learners, a PDF with a unique code and QR code, and a public page. On a custom platform it's one module, quoted separately.