Security Levels
GoValid offers 3 security levels for QR codes, each designed for different use cases.
Overview
| Security Level | Encryption | QR Code Size | Best For | Plan Required |
|---|---|---|---|---|
| Smart QR | 96-bit | Smallest (Ultra-compact) | Tiny labels, product packaging, space-limited items | All Plans |
| Secure QR | 256-bit | Balanced (Medium size) | Business documents, certificates, standard security needs | All Plans |
| Enterprise QR | Ed25519 + Non-Repudiation | Largest (Maximum security) | Legal contracts, official documents, regulatory compliance, audit trail required | All Plans |
Users choose the QR security level in the generation form before entering the remaining QR details.
Smart QR
The most compact option for everyday use.
Cryptographic Details
- Token generation: HKDF-SHA256 (96-bit)
- Signature: HKDF-HMAC-SHA256 (128-bit, v2) or HMAC-SHA256 (96-bit)
- QR data encryption: AES-256-GCM (NIST SP 800-38D)
- Attachment encryption: AES-256-GCM with managed keys, secure token
- Security standard: NIST 2030+ compliant (v2)
Features
- Ultra-compact QR code size (smallest)
- Fast generation and verification
- Basic scan tracking and analytics
- Anti-counterfeit first-scan anchoring
Best For
- Tiny labels and tags
- Product packaging
- Space-limited items
Limitations
- No digital signature (v1)
- Suitable for low-risk scenarios
Secure QR
Balanced security for business documents.
Cryptographic Details
- Hash algorithm: SHA-256 (FIPS 180-4)
- Compact hash: HMAC-SHA256 (256-bit)
- QR data encryption: AES-256-GCM (NIST SP 800-38D)
- Metadata encryption: ChaCha20-Poly1305 (RFC 8439)
- Compression: zlib level 9
- Attachment encryption: AES-256-GCM with managed keys, secure token
Features
- Medium QR code size (balanced)
- Password protection (master or unique)
- QR transfer (SmartHandover) between users
- Tamper-proof validation
- Metadata verification
Best For
- Business documents
- Certificates
- Standard security needs
Enterprise QR
Maximum security with non-repudiation guarantee.
Cryptographic Details (Ed25519)
- Token generation: Base62 (128-bit)
- Digital signature: Ed25519 (256-bit, RFC 8032)
- Key ID: Unique identifier per key
- Non-repudiation: Cryptographically verified
- Private key storage: AES-256-GCM with managed keys
- Verification fingerprint: Terminal-style display
- Attachment encryption: AES-256-GCM with managed keys
Features
- Ed25519 digital signatures
- Non-repudiation guarantee
- 256-bit encryption with digital signatures
- 128-bit secure token
- Cryptographic signature verification
- Tamper-proof validation
- Legally binding proof of origin
- Unique signing PIN per user
- Largest QR code size (maximum security)
Best For
- Legal contracts
- Official documents
- Regulatory compliance
- Audit trail required
Signing PIN
- Required to sign documents with Enterprise QR
- Adds an extra layer of security
- Prevents unauthorized signing even if account is compromised
Verification Fingerprint
- Terminal-style fingerprint display
- Copy to clipboard functionality
- Cryptographic proof of verification
The verification page shows the QR details, generator identity, QR image, and current verification status after a scan.
Comparison Table
| Feature | Smart QR | Secure QR | Enterprise QR |
|---|---|---|---|
| Token Generation | HKDF-SHA256 (96-bit) | SHA-256 (FIPS 180-4) | Base62 (128-bit) |
| Signature | HMAC-SHA256 (96/128-bit) | HMAC-SHA256 (256-bit) | Ed25519 (256-bit, RFC 8032) |
| QR Data Encryption | AES-256-GCM | AES-256-GCM | AES-256-GCM |
| Metadata Encryption | No | ChaCha20-Poly1305 | AES-256-GCM |
| Compression | No | zlib level 9 | zlib level 9 |
| QR Code Size | Smallest | Balanced | Largest |
| Scan tracking | Yes | Yes | Yes |
| First-scan anchoring | Yes | Yes | Yes |
| Password protection | No | Yes | Yes |
| Digital signature | No | HMAC | Ed25519 |
| Non-repudiation | No | No | Yes |
| Verification fingerprint | No | No | Yes |
| Signing PIN | No | No | Yes |
Choosing the Right Level
| Scenario | Recommended Level |
|---|---|
| Product labels | Smart QR |
| Event tickets | Smart QR |
| Business documents | Secure QR |
| Certificates | Secure QR |
| Legal contracts | Enterprise QR |
| Regulatory filing | Enterprise QR |
| Official documents | Enterprise QR |
Next Steps
- Quick Start Guide - Create your first QR code
- QR Codes Guide - Learn about templates and features
- Security & Compliance - Deep dive into security features