WordPress.org

Plugin Directory

Edutain Certificate Validator – Certificate Verification, QR Code & Digital Credentials

Edutain Certificate Validator – Certificate Verification, QR Code & Digital Credentials

Description

Edutain Certificate Validator is a professional WordPress certificate verification plugin that lets anyone verify a certificate online, in seconds, on your own website. It is a no-code certificate validator built for training providers, educators, online course creators, and organizations that issue certificates.

Edutain Certificate Validator gives you a complete online certificate verification system inside WordPress. No LMS required. No external certificate platform. No monthly credential service. Your certificate database stays on your own site, under your own control.

Upload your certificate records, publish your verification page, and give anyone a secure way to verify certificates online. Learners, employers, and visitors verify a certificate instantly using its unique authentication code.

The core certificate validator, including CSV import, unlimited records, and the public verification form, is free forever and is never restricted by the Pro version.

Key features in the free version

  • Add certificate records individually from your WordPress dashboard
  • Bulk import certificates from a CSV file
  • Import up to 100,000 data rows per uploaded file
  • Publish a public certificate verification page in minutes
  • Let visitors verify certificates using unique authentication codes
  • Share direct certificate verification links
  • Display professional verification results, including learner name, course name, completion date, and certificate details
  • One-click social sharing to LinkedIn, Facebook, and X
  • Add and edit records individually
  • Search, sort, and paginate the records table
  • Delete individual records, or delete all records after confirmation
  • Download your complete dataset as CSV or XLSX
  • Certificate records stored securely in your own WordPress database
  • Built-in protection against automated verification attempts
  • No external certificate storage required
  • Works independently, with or without an LMS
  • Import summary reporting records added, duplicate codes skipped, and invalid rows
  • Downloadable CSV template, so your certificate data imports correctly first time
  • Unlimited certificate records, with no cap on your certificate database

Do more with the Pro version

  • Custom fields — add up to 30 label and value fields per certificate and choose which ones are public. Record grades, credit hours, CPD points, license numbers, or awarding body details.
  • Certificate QR code generator — generate a QR code that opens the verification page for that exact certificate.
  • Download QR codes as PNG or PDF, build multi-certificate QR PDF sheets, and print them.
  • Branded PDF certificates — generate landscape PDF certificates with an optional Media Library logo, accent color, signature name, and embedded QR code.
  • Optionally let learners download their PDF certificate straight from a valid verification result.
  • Certificate expiry management — set expiry dates and control valid, revoked, and suspended states.
  • Show expired, revoked, and suspended states clearly on the public verification result.
  • Bulk record management — bulk delete selected records, and bulk edit expiry, status, email, or custom field values.
  • Certificate email management — send or resend customized certificate emails manually or in bulk, using the stored email address.
  • Verification analytics — log verification attempts and review totals, failed attempts, recent activity, and your most-verified authentication codes.
  • Choose how long verification logs are kept, or retain them indefinitely.

Verify ID cards, gym memberships, test results, and almost anything else

Your organization issues more than course certificates. Staff ID cards. Gym memberships. Library cards. Medical test results. Professional licenses. Every one of them needs a way for someone to check it is real.

Edutain Certificate Validator Pro handles all of them, so the same plugin doubles as an ID card verifier, a library card verifier, or a general document verification tool.

Leave the course name field empty, add your own custom fields — ID Card Number, Card Type, Test Name, Test Result, License Expiry — and the plugin becomes whatever verifier you need. Someone can then verify an ID card, membership, or document on the same trusted public page your learners already use. Same simple setup. No extra plugins, no developer required.

Why choose Edutain Certificate Validator?

Manual certificate checking and spreadsheet tracking do not scale, and they give employers no way to confirm anything independently. Edutain Certificate Validator gives your organization a complete WordPress certificate verification system that helps you:

  • Prevent fake certificates
  • Build trust in the credentials you issue
  • Reduce time spent answering verification requests by hand
  • Provide instant certificate validation, around the clock
  • Manage digital certificates professionally

External services

This plugin connects to Freemius, Inc. for optional account connection, Pro license activation and validation, premium plugin updates, and Pro checkout. It is a third-party service, so using these features means data is sent to Freemius.

The Freemius Checkout script is loaded from https://checkout.freemius.com/js/v1/ on the plugin’s Dashboard, Data Management, Upgrade, and Freemius Account screens, where purchasing controls may appear. As with any remote request, this can send your IP address, browser user-agent, and the referring admin page URL. Opening Checkout also sends the selected product, plan, license quantity, and billing cycle. Any contact, billing, and payment details you enter during Checkout are handled by Freemius and its payment providers.

When an administrator connects a Freemius account, activates or manages a license, checks for premium updates, or opts into data sharing, the bundled Freemius SDK may send: your site URL and title; WordPress, PHP, and SDK versions; site language and multisite context; the plugin version and its active, deactivated, or uninstalled state; the administrator’s name and email address; Freemius account, site, install, product, plan, and license identifiers, including a submitted license key; and, only if you enable that optional permission, a list of installed plugin and theme names and versions.

Freemius permissions are shown to you inside WordPress, and optional diagnostic sharing can be turned off there. Some communication is required to activate and validate a Pro license.

Certificate data is never sent to Freemius. Learner names, email addresses, course names, issue dates, authentication codes, custom fields, and verification analytics stay in your own WordPress database.

Freemius terms of service: https://freemius.com/terms/
Freemius privacy policy: https://freemius.com/privacy/

If you configure a certificate logo using an external image URL instead of the WordPress Media Library, your site downloads that image while generating a PDF, and the image host may receive your server’s IP address and standard request headers. No certificate data is included in that request.

Usage

  1. Install and activate the plugin.
  2. Open Certificate Validator > Data Management.
  3. Download the example CSV, upload your completed file, or add a certificate record manually.
  4. Open the automatically created Validate Certificate page, or add [edcv_validator] to any page or post.
  5. Give each learner their authentication code or a direct verification link.

Privacy

Certificate records, including learner names, optional email addresses, and the optional expiry_date value, are stored in a dedicated table in your WordPress database. Pro certificate status and custom fields are stored in a separate metadata table.

Public verification compares a submitted authentication code against your local certificate table. Rate limiting creates a temporary transient keyed by a hashed version of the visitor’s IP address. With Pro analytics active, each verification attempt is stored with the submitted code, result, certificate state, timestamp, and a salted hash of the visitor’s IP address. The analytics retention setting controls scheduled deletion, and can also be set to keep logs indefinitely.

Pro email management sends certificate information to valid recipients through WordPress wp_mail(). Bulk email jobs store temporary job state in the edcv_pro_email_queue option, including a job identifier, record-scan cursor, maximum record ID, recipient progress, status, and timestamps. WP-Cron processes eligible records in batches of 15. Delivery, and any transfer to an email provider, depends on your site’s mail setup.

QR codes and PDFs are generated locally. QR generation uses temporary files that are deleted after use. A PDF logo selected from the Media Library is read from its local attachment file. A manually configured external logo URL is downloaded temporarily during PDF generation and then deleted.

The bundled Freemius SDK provides account, licensing, premium update, and checkout functionality. See the External services section above for what is sent, when, and links to Freemius’s terms and privacy policy.

Plugin data is kept on uninstall unless you enable the relevant deletion settings. Core certificate data and Pro metadata and analytics have separate opt-in deletion controls.

Screenshots

Installation

  1. Install Edutain Certificate Validator from the WordPress Plugins screen, or upload the edutain-certificate-validator folder to /wp-content/plugins/.
  2. Activate the plugin.
  3. Go to Certificate Validator > Data Management to add or import certificate records.
  4. Confirm the automatically created Validate Certificate page is published, or place [edcv_validator] on your preferred page.
  5. Optional: enter email values if you plan to use Pro email management.

Support

  • FAQ : https://edutain-certificate-validator.edutainmentuk.com/faqs/
  • Documentation:https://edutain-certificate-validator.edutainmentuk.com/documentation/
  • Website: https://edutain-certificate-validator.edutainmentuk.com/

Follow Edutain Certificate Validator on Social Media

LinkedIn | Facebook | Youtube | Instagram

FAQ

Is the free certificate validator limited?

No. CSV upload, individual record management, CSV and XLSX export, unlimited stored records, and the public certificate verification form are all available without Pro. A single CSV upload is limited to 10 MB and 100,000 data rows for safe processing. That is a limit on one import operation, not on how many records you can store.

What columns must my CSV contain?

The required columns are Name, Issue Date (or Completion Date), and Authentication Code. Columns can be in any order, and header matching is not case-sensitive. Email is optional.

Which date formats can I import?

Completion Date and the Pro Expiry Date column accept dd/mm/yyyy or yyyy-mm-dd. Invalid calendar dates are skipped and reported back to you.

Can I upload multiple CSV files?

Yes. Each upload is merged into your existing dataset. Authentication codes that already exist are skipped as duplicates and listed in the import summary.

Can I export my certificate records?

Yes. Your complete dataset can be downloaded as CSV or XLSX. With Pro active, exports also include expiry information and custom fields.

Where is certificate data stored?

Certificate records are stored in the {prefix}_edcv_certificates table in your own WordPress database. Pro certificate metadata and verification analytics use separate plugin tables.

How do visitors verify a certificate?

Visitors enter an authentication code on the automatically created Validate Certificate page, or on any page containing [edcv_validator]. A URL containing ?certificate_code=THEIR-CODE or ?code=THEIR-CODE fills in the form and starts verification automatically, which makes it easy to verify a certificate from a link or a QR code.

Can I use this to verify ID cards, memberships, or other documents?

Yes, with Pro. Custom fields let you record whatever the document needs — ID card numbers, membership types, test results, license details — so the same public page works as an ID card verifier, a library card verifier, or a general document verification page. The course name field can be left empty.

Is the public verification form protected against abuse?

Yes. The verification endpoint is nonce-protected and allows 30 attempts per IP address in a fixed 60-second window. Public PDF downloads use a separate limit of 10 attempts per IP in their own 60-second window.

Does the plugin require an LMS or an external verification API?

No. Certificate lookup, QR generation, and PDF generation all run on your own WordPress site. Freemius is used only for licensing, account, and checkout services, and email delivery depends on your site’s existing mail configuration.

Will the shortcode work with my theme or page builder?

Yes. [edcv_validator] is a standard WordPress shortcode, so it works in the block editor, the classic editor, and any page builder that supports shortcodes, including Elementor, Divi, and Beaver Builder.

Who can access the certificate admin area?

Administrators only, by default. Editors, Authors, and other roles cannot see or manage certificate data.

How does Pro email management choose recipients?

It uses the valid Email value stored in each certificate record. Records without a valid email address are skipped. Bulk sends are queued through WP-Cron in batches of 15.

What does the Pro QR code generator require?

QR generation requires the PHP GD extension, which most hosts enable by default. If GD is unavailable, the plugin shows an administrator notice and does not generate QR images.

What happens when a certificate expires or is revoked?

With Pro active, the public result changes to show expired, revoked, or suspended status. Public PDF download is offered only for certificates that are currently valid.

Do generated PDF certificates support all languages and characters?

Generated PDF certificates work best with Latin-based text. Unsupported characters in learner names, course titles, issuer names, or signature names may be transliterated or omitted in the PDF. Certificate records and the public verification page use WordPress’s normal UTF-8 text handling and are not affected by this limitation.

Will updating from version 1.0 delete existing certificates?

No. The plugin migrates your legacy CSV dataset into its database table and keeps a backup under a random filename. Version 2.0.0 also migrates the former Pro email metadata value into the core Email column where one is available.

What happens to my data when I deactivate or uninstall the plugin?

Deactivating leaves everything untouched. Uninstalling also keeps your data by default. The Data Management page includes an opt-in setting to delete core certificate data on uninstall, and Pro settings include a separate opt-in control for deleting Pro metadata, analytics, and settings. Check both before uninstalling.

For developers

Rate limits can be adjusted with the edcv_rate_limit_max_attempts and edcv_rate_limit_window filters. Trusted hosting environments can supply a validated, server-normalized client IP through edcv_rate_limit_visitor_identity. Record lifecycle actions and verification card filters are preserved from earlier versions.

Reviews

August 17, 2026
This plugin does exactly what it promises without any hassle. Setting it up is easy and seamless. Importing certificate records via CSV is fast and straightforward. Also, the built-in shortcode makes adding the verification form to any page effortless. Highly recommended for anyone looking for a reliable, hassle-free certificate verification solution on WordPress!
April 27, 2026
One of the best aspects of this plugin is how user-friendly it is. Even without technical expertise, you can easily set it up and start validating certificates within minutes. The interface is clean and intuitive, making navigation smooth and hassle-free. What truly makes this plugin unique is its focused functionality combined with performance. It does exactly what it promises—secure and accurate certificate validation—without unnecessary complexity. This makes it a great choice for educational platforms, training institutes, and any organization that needs a dependable verification system. Overall, the Edutain Certificate Validator is a well-built, efficient, and innovative plugin. If you’re looking for a simple yet powerful solution, this is definitely worth using.
Read all 2 reviews

Contributors & Developers

“Edutain Certificate Validator – Certificate Verification, QR Code & Digital Credentials” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

2.0.0

  • New: added Email as an optional core certificate field for manual entry, CSV import, and record editing.
  • New: added complete-record CSV and XLSX exports, including Pro expiry and custom field data when Pro is active.
  • New: added Pro bulk record deletion and bulk field updates.
  • New: added Pro QR PNG downloads, QR PDF downloads, and multi-record QR PDF sheets.
  • New: added tabbed Data Management and Pro Settings workflows.
  • New: added Pro manual email management and queued bulk sending from core Email values.
  • Improved: added live eligible-recipient counts, a capped recipient preview, and loading and error states before a bulk email is queued.
  • Changed: Pro features now unlock with a license key instead of a separate add-on plugin.
  • Changed: certificate email sending is manual only. Adding or importing records no longer sends email automatically.
  • Changed: custom fields are limited to 30 per certificate record.
  • Improved: CSV imports validate supported date formats, reject duplicate headers, and report invalid dates.
  • Improved: legacy Pro email metadata is migrated to the core Email column.
  • Security: added capability and nonce checks to administrative AJAX operations, and retained rate limiting on public verification and PDF endpoints.
  • Security: CSV and XLSX exports neutralize cells that could be interpreted as spreadsheet formulas.
  • Developer: preserved record lifecycle actions, verification card filters, and configurable rate-limit filters.

1.1.0

  • Moved certificate data from a legacy CSV file to a dedicated database table, with automatic migration.
  • Added the redesigned public verification result, direct verification links, and rate limiting.
  • Added individual record management, search, sorting, and pagination.
  • Added drag-and-drop CSV upload, flexible column order, and import summaries.
  • Added the optional core-data deletion setting for uninstall.

1.0.0

  • Initial release.