Tamper-proof, tied to your domain, and impossible to fake
Issue tamper-proof reference letters that travel with your former employees. Verify instantly, no phone calls needed.
Set up in under 5 minutes. Free for verifiers.
A letterhead, a PDF, and a fake phone number. That's all it takes to forge a reference letter. Up to 30% of applicants embellish or fabricate them.
Your HR team fields verification calls for years after someone leaves. Each call is a distraction from work that actually matters.
If circumstances change (disciplinary action, fraud discovered) you can't recall a paper reference. RefPassport lets you revoke instantly.
Three steps. No technical knowledge required.
Sign up with your company email. We guide you through domain verification, similar to setting up email. Takes 2 minutes.
Write your reference as normal. RefPassport digitally seals it and generates a branded PDF with a verification QR code.
Recipients scan the QR code or visit the link. They see instantly whether the reference is authentic. No account needed.
Tamper-proof references that can't be forged or altered.
No more fielding verification phone calls years later.
Revoke a reference at any time if circumstances change.
References are tied to your company domain and verifiable by anyone, anywhere.
RefPassport works for every employer, but some sectors need it more than most.
High-volume placements need fast, reliable references.
Learn more →SRA compliance demands verifiable due diligence.
Learn more →Safeguarding starts with references you can trust.
Learn more →CQC compliance and patient safety depend on verified hires.
Learn more →Airside access requires thorough background verification.
Learn more →BS 7858 vetting demands references that stand up to scrutiny.
Learn more →Connect your HRIS or payroll system and have references created automatically when someone leaves. No manual effort at all.
Explore Integrations →Every RefPassport reference is cryptographically signed by the issuing employer and tied to their company domain via DNS. When you verify a reference, RefPassport checks the digital signature against the employer's public key published in their DNS records. If a single character has been altered, verification fails instantly. This is fundamentally different from a PDF on letterhead, which anyone can forge.
Yes. If circumstances change after an employee leaves, such as a disciplinary matter or fraud discovered retrospectively, you can revoke their reference immediately from your dashboard. Anyone who subsequently tries to verify it will see that it has been withdrawn by the issuing organisation.
Under 5 minutes. You sign up with your company email, then add a single DNS TXT record to your domain. We provide step-by-step instructions for every major registrar including GoDaddy, Namecheap, Cloudflare, and AWS Route 53. The process is similar to verifying your domain with Google or setting up email.
If your organisation changes its domain (for example, after a merger or rebrand), you can register the new domain and continue issuing references. Existing references issued under the old domain remain verifiable as long as the DNS TXT record stays in place on the original domain. We recommend keeping the old DNS record active during any transition period.
Yes. RefPassport is completely free for employers to use, with no usage limits. Verification is also free for anyone checking a reference.
Give your people references they can actually use: portable, verifiable, and tamper-proof.