QFlowLearn: how we built QTI 3 authoring

Digital Credentials: Open Badges version strategy

Open Badges 2.1 vs 3.0: an institutional decision guide

Compare Open Badges formats, exchange APIs, signatures, and status checks. Use public test source and a worksheet to plan your institution's transition.

By Sam Ottenhoff Published Updated

Summary

Open Badges 2.1 defines how applications exchange 2.0 badges, which can be hosted or signed. Open Badges 3.0 uses a verifiable-credential model and includes an exchange application programming interface (API). For a new credential program, evaluate 3.0. Keep 2.1 exchange where required receiving systems need it. Before you choose a transition date, test exported credentials, signatures, and status checks in those systems.

Written for: registrars and continuing education teams, digital credential program owners, enterprise architects and security reviewers, procurement teams

Separate the credential from the exchange API

Open Badges 2.1 defines the Badge Connect API. Applications use it to move Open Badges 2.0 assertions with the recipient’s authorization. Open Badges 3.0 defines a verifiable-credential model and an exchange API. Ask suppliers which parts they implement. The 1EdTech Open Badges overview explains how the versions relate.

A credential that looks correct in the issuing platform may fail in a recipient’s wallet or verification service. Record four requirements separately: credential format, exchange API, proof format, and status method. A proof is the cryptographic information a verifier uses to check a credential’s signature.

Compare the requirements

Standards differences to confirm with each supplier
Requirement2.0 badges with 2.1 exchange3.0 credentials and exchange
Credential modelAssertion, BadgeClass, and issuer ProfileOpenBadgeCredential with achievement and credential-subject data
AuthenticityHostedBadge verification or SignedBadge verification using a JSON Web SignatureCryptographic verification using a supported proof format
TransferThe 2.1 Badge Connect API defines authorized assertion exchange.The 3.0 API exchanges Open Badges 3.0 credentials. Test the receiving application.
Expiration and revocationBoth exist in 2.0; signed and hosted verification have different procedures.Check credential validity dates and the credential's status mechanism separately from its proof.
Procurement evidenceRequest format support and the claimed 2.1 exchange role separately.Request the claimed 3.0 role, proof formats, status methods, and tested receiving systems.

The Open Badges 2.0 specification, 2.1 specification, and 3.0 specification define these requirements. Version 2.0 already supports signed badges. Neither version label guarantees that a wallet can accept and verify a credential.

Test the systems your learners use

For a new credential program, start by evaluating 3.0 in the applications your learners need. If a required receiving application depends on 2.0 badges and 2.1 exchange, retain that path until you have a tested replacement.

For each workflow, name the issuer, receiving application, proof verifier, and status service. Create a test credential with fictional learner data that represents your program. Transfer it without administrator access to the issuing platform. Record which fields the receiving application preserves and which checks it performs.

If both versions must remain available, budget for two tested paths. Assign someone to maintain the older path and define the conditions for retiring it.

Inspect the public verification tests

Longsight develops CredTrail. CredTrail’s verification tests check credential format, signatures, dates, and status separately. We reviewed the test source on September 22, 2026. We did not run the tests for this comparison.

The following table maps those checks to tests you still need to run in an independent receiving application. JSON-LD means JavaScript Object Notation for Linked Data, the data format used in these examples.

Public test source and checks to run in your receiving systems
Public test casesWhat the tests checkWhat you still need to test
Expired, suspended, and revoked recordsLifecycle and credential-status results, separate from proof resultsWhether the receiving application reports the same state from published status information
Unknown JSON-LD terms and missing required fieldsFailures when safe-mode processing finds unknown terms or validation finds missing fieldsHow an independent receiving application handles the same malformed credential
Available signing keys and mismatched key identifiersWhether the proof passes with the expected key and fails with a mismatched key identifierPublic key discovery, network failures, and proof verification in the receiving application
Historical signing keyVerification when rotation history contains the earlier keyVerification after a real key rotation and platform transition

These tests simulate database and credential-storage responses. They do not establish independent interoperability, production availability, 2.1 support, or certification.

Use the test structure in your procurement requirements. Require separate results for proof, required fields, dates, and current status so you can identify which check failed.

Preserve issued records during transition

Keep the original credential and its supporting records. If you change signed data, the original proof no longer verifies that data. A reissued credential needs a new proof and a documented relationship to the earlier award.

Before you change how you issue credentials, assign responsibility for existing issuer identifiers, public key locations, status services, evidence links, and learner access. Test a sample after you remove the original issuing system from the verification path. If verification still requires a service, record who maintains it and for how long in the contract.

Use the Open Badges governance guide to assign lifecycle responsibilities and the digital credential procurement guide to evaluate supplier evidence. Download the version decision worksheet to record your decision.

Define the tests required for approval

Require each receiving system to distinguish an authentic, active credential from an expired, revoked, altered, or temporarily unverifiable one. If a required network request fails, the system must not report successful verification.

Check the supplier’s current certification evidence against the exact product and role. The Open Badges 3.0 certification requirements include validation and status checks for specific roles. You must also test your content, receiving systems, privacy rules, and accessibility requirements.

Before you approve the transition, record passing results for every required workflow. Assign owners to remaining dependencies and document how they will respond to failures.

Limits of this guidance

  • This guide does not report a cross-vendor interoperability test or claim certification for CredTrail.
  • The public code example covers one Open Badges 3.0 implementation, not a measured comparison of 2.1 and 3.0 products.
  • A valid proof does not establish that an issuer was authorized to award a credential or that the credential remains active.

Procurement checklist

  • Record the credential format, exchange API, proof format, and status method separately.
  • Name the exact issuing and receiving product versions in each required workflow.
  • Test valid, expired, revoked, altered, and temporarily unverifiable credentials.
  • Require evidence for the supplier's claimed certification role and product version.
  • Preserve original credentials and define how existing awards remain verifiable during transition.

Downloads

Related code

  • CredTrail verification tests: Longsight reviewed this source on September 22, 2026, but did not run the tests. The tests simulate database and credential-storage responses.

Standards and sources

  1. [1]Open Badges 3.0 specification. Defines the OpenBadgeCredential model and exchange API.
  2. [2]Open Badges 3.0 certification requirements. Role-specific requirements include JSON-LD processing and credential-status tests.
  3. [3]W3C Verifiable Credentials Data Model 2.0. Credential integrity, issuer trust, and current status are separate concerns.
  4. [4]1EdTech Open Badges overview. Explains the relationship between Open Badges versions and their certification programs.
  5. [5]Open Badges 2.1 specification. Defines Badge Connect exchange of Open Badges 2.0 assertions.
  6. [6]Open Badges 2.0 specification. Defines hosted and signed verification, expiration, and revocation for 2.0 badges.