Guides · Authentication
Product authentication and resale with Digital Product Passports
By Cat Taylor and Leanne Elliott Young · 7 October 2026 · 7 min read
Counterfeits cost fashion brands revenue, trust and control of their resale market. A Digital Product Passport (DPP) gives every product a verified digital identity that customers, resellers and repairers can check in seconds.
When that passport is linked to a cryptographic NFC chip, it becomes much harder to fake. Each tap creates a new encrypted code that only the brand's system can verify, so copying a chip or its link doesn't work. This guide explains how it works, what the EU rules do and don't require, and what brands should do now.
Why authentication matters now
- Global trade in counterfeit goods reached USD 467 billion, 2.3% of world imports (OECD and EUIPO, Mapping Global Trade in Fakes 2025).
- Fakes account for up to 4.7% of all goods imported into the EU, worth USD 117 billion. Clothing, footwear and leather goods are among the most targeted categories (OECD and EUIPO, 2025).
- EU customs and market authorities detained 112 million infringing items worth an estimated €3.8 billion in 2024, the highest value on record (European Commission, October 2025).
Counterfeits don't just take sales. They damage brand trust, make resale riskier for buyers, and put fake products into repair and take-back schemes. A verifiable identity on every product helps fix this at the source.
How a Digital Product Passport proves authenticity
A DPP is a digital record linked to a physical product through a data carrier such as a QR code, NFC chip or RFID tag. It can be created at three levels:
- Model level: one passport for every product of the same design. Useful for compliance information, but it can't prove a single item is genuine.
- Batch level: one passport per production batch. Adds traceability to a specific run.
- Item level: a unique passport for each individual product. This is what authentication needs, because each item has its own identity and history.
For authentication, item-level passports linked to a secure data carrier are the strongest option.
Why can't cryptographic NFC chips be cloned?
A standard QR code or basic NFC tag holds a fixed link. Anyone can copy it onto a fake product.
A cryptographic NFC chip works differently:
- It holds a secret key in secure memory that can't be read out.
- Every time someone taps the product with a phone, the chip generates a new, one-time encrypted code.
- The brand's system checks that code. If it matches, the product is confirmed as genuine.
- A copied code fails, because it has already been used. A copied link fails for the same reason.
This makes cryptographic chips practically impossible to clone with current technology. Brands can also choose tamper-evident chips, which stop working if someone tries to remove them from the product.
One tip for customers: always check that the verification page is on the brand's own website. Counterfeiters may try a fake chip that points to a look-alike page, and a genuine verification always comes from the brand's own domain.
The roles of QR, NFC and RFID
- QR codes: cheap, visible and readable by any phone camera. Great for product information and access, but easy to copy, so not secure on their own.
- NFC chips: tap-to-read with any modern smartphone. Cryptographic NFC adds secure authentication.
- RFID tags: read at distance by scanners. Ideal for stock, logistics and stores, not for customer checks.
Many brands combine them: a QR code for easy access, a cryptographic NFC chip for authentication, and RFID for operations.
How Digital Product Passports change resale
Resale depends on trust. Buyers want to know an item is genuine, and resellers need to check it quickly.
Reuse is still small. In the EU, about 1.7 kg of textiles per person was reused in 2021, compared with 15.9 kg of new textiles bought per person (European Environment Agency, 2025). Verified product identity is one of the things that can help resale grow.
With an item-level passport, a reseller can confirm authenticity, see the product's materials and care history, and record a change of owner. The brand stays connected to the product through every resale, repair and return, instead of losing sight of it after the first sale.
What the law says: the EU Ecodesign for Sustainable Products Regulation (ESPR, Regulation (EU) 2024/1781) creates Digital Product Passports for compliance and transparency. It does not require brands to authenticate products or support resale. The textile delegated act is expected in 2027, followed by an 18-month window before passports become mandatory. Authentication and resale are choices brands make on top of compliance, and the ones that build them into the same passport get more value from it.
What brands should do now
- Decide which products need item-level passports. Start with high-value or often-faked lines.
- Choose your data carriers. Use cryptographic NFC where authentication matters, plus QR for easy access.
- Plan where the chip goes. It should be secure, durable and tamper-evident where needed.
- Make sure verification happens on your own domain, and tell customers to check it.
- Design the resale and ownership flow so the passport follows the product through every new owner.
- Build on standards like GS1 Digital Link so your passports work with retail, logistics and the EU registry.
How PATINA works for authentication and resale
PATINA is a post-purchase operating system for fashion brands. It:
- Supports cryptographic NFC, QR codes and RFID, so brands can combine secure authentication with easy access.
- Creates passports at model, batch or item level, depending on the product.
- Uses GS1 Digital Link so each product has one standard web identity.
- Verifies every scan on the brand's own domain.
- Records ownership changes, repairs and resale, so the passport follows the product through its whole life.
- Uses a rules engine to decide what each customer sees, from care guides to resale offers and rewards.
See PATINA in action: how a single cap opened London Fashion Week.
Quick answers
What is product authentication with a Digital Product Passport?
It means using a product's unique digital passport, linked to a secure data carrier such as a cryptographic NFC chip, to confirm the item is genuine.
Why can't cryptographic NFC chips be cloned?
Each tap creates a new one-time encrypted code from a secret key stored in the chip. Only the brand's system can verify it, so copied codes and links fail. This makes them practically impossible to clone.
Is a QR code enough to stop counterfeits?
No. QR codes are easy to copy. They're useful for access and information, but authentication needs a secure carrier such as cryptographic NFC.
Does the EU require brands to authenticate products?
No. ESPR requires Digital Product Passports for compliance and transparency, not authentication. Brands add authentication on top.
How do Digital Product Passports help resale?
Item-level passports let resellers and buyers confirm a product is genuine, see its history and record new owners, which builds trust in second-hand sales.
