Credential registry

Three different things called a registry

The word is used loosely enough to cause real confusion in a procurement conversation, so it is worth separating the cases before anything else.

• A national or sector-wide register. One database covering many issuers, usually created by a government or a regulator, holding records submitted by the institutions themselves. Nigeria's National Credential Verification Service is one of these for academic qualifications.
• An issuer's own record of what it has awarded. Every organisation that issues credentials has one, even if it is a spreadsheet. Publishing it in a form strangers can query is what most "verify a certificate" pages actually are.
• A directory of organisations. A list of accredited bodies or approved training providers. Useful, and frequently mistaken for the first kind, but it holds no individual records at all. It can tell you an institution exists, never that a person graduated from it.

What a registry is good at

Its strength is coverage, and that strength is real. A single place to look means someone checking a credential does not need to know anything about the issuer, find the right office, or discover that the issuer has closed. One lookup, many issuers, one format. For a verifier holding a stack of applications from twenty different institutions, that is worth a great deal.

A registry can also do things an individual issuer cannot. It can spot the same credential claimed twice, notice an institution that never existed, and survive the closure of the organisation that made the award, which is precisely when records usually disappear.

What a registry cannot tell you

A registry records what its participating members submitted. That is the important sentence, and it is easy to skip past.

If an institution's records office enters a graduate into the register, the register will confirm that graduate, whether or not the underlying qualification was properly earned. A registry is an efficient way to distribute an institution's claims. It is not, on its own, an independent check on them. When a genuine institution issues a genuine document for a programme nobody attended, a registry faithfully confirms it.

The second limit is coverage in the other direction: a registry only knows about the issuers inside it. A credential from an organisation outside the scheme is not fake, and is not flagged as suspicious. It is simply absent, and absence is what people routinely misread as a negative result.

Registry or signature

There are two ways to make a credential checkable, and they solve different halves of the problem. A registry answers "does this record exist somewhere central". A digital signature answers "was this exact document issued by this exact organisation, unaltered", and answers it from the credential itself, without a central body needing to exist, agree to include you, or stay funded. That is what a verifiable credential is built around.

Neither replaces the other. A registry gives a verifier one place to look, which a signature cannot. A signature proves integrity, which a registry cannot. Schemes that work well tend to end up with both.

Where this matters practically: if your organisation falls outside every registry that exists, as most professional bodies and training providers in Nigeria currently do, signatures and a public credential ID are the route available to you. Whether NERD covers professional certificates sets out where that boundary currently sits.