Professional Credentials, Cryptographically Verified
CVerify is a decentralized protocol allowing companies to attest professional work experiences using DNS-verifiable digital signatures.
How It Works
A trustless system where no central authority controls the data. Everything is mathematically verifiable.
DNS Key Publication
Publish your 2048-bit RSA public key via DNS TXT records. Zero infrastructure required.
Signed Request
User cryptographically signs a validation request with their private key.
Cryptographic Attestation
The company signs the work experience with their private key.
Public Verification
Anyone can mathematically verify the authenticity of the credentials.
Get Your CVerify Instance
CVerify requires your own domain to work. Choose how you want to run your instance.
Self-Hosted
Full control on your infrastructure
- Deploy on your own server (VPS, shared hosting, etc.)
- Complete data ownership and privacy
- Open source — customize as you need
- Requires PHP 8.0+ and domain with DNS access
Managed Hosting
I handle everything for you
- Hosted on my servers with your domain
- Zero configuration — ready in 24 hours
- Automatic updates, backups & SSL certificates
- Priority support via email & chat
Special Discount!
Get 20% off if you use a .cv domain
Let's Talk
Don't have a server? No technical skills? No problem! Contact me to discuss your needs and get a custom quote for managed hosting.
Choose Your Role
Three dedicated portals to manage every aspect of the attestation system.
User Dashboard
Manage your digital identity, add work experiences and request validations from companies.
- Generate RSA keys
- Request validations
- Manage CV
Company Portal
Receive validation requests from professionals and sign the attestations.
- Generate corporate keys
- Approve/reject requests
- Configure corporate DNS
Verifier Lens
Verify anyone's professional credentials. No account required.
- Verify DNS identity
- Validate signatures
- No registration
Security Architecture
A robust, layered security model relying on established cryptographic primitives and the global DNS infrastructure.
DNS Root of Trust
Identity is anchored in the Domain Name System. Public keys are published as TXT records, making the domain owner the only entity capable of signing valid attestations for that organization.
Asymmetric Cryptography
We use RSA-2048 key pairs. The private key never leaves your secure environment. It is used solely to generate digital signatures that any third party can verify using the public key fetched from DNS.
Immutable Integrity
Every attestation is hashed using SHA-256. Changing even a single bit of the credential data invalidates the signature immediately, guaranteeing document integrity.
$hash = hash('sha256', $json_data);
$signature = rsa_sign($hash, $private_key);
$pub_key = dns_get_record('company.com', DNS_TXT);
$valid = rsa_verify($hash, $signature, $pub_key);