[Updated] What are vaccine passports and how would they work?

This section will update as more information on vaccine passports becomes available. To view current travel restrictions and destination-specific requirements for COVID-19 testing and quarantine, visit our new travel policies page.

[2022-01-12 04:05 UTC]

While it's true the COVID-19 pandemic is the largest global health emergency in a generation, it is not the first time a novel pathogen has impacted international travel. One need only consider 2002-2004 SARS outbreak for a relatively recent example. A vaccine passport, which is simply a way of proving one has been vaccinated against a particular disease, is not a new concept. Travelers from places where endemic diseases such as yellow fever, measles, or tuberculosis remain prevalent have long been required to demonstrate vaccination before traveling abroad. What makes this time different, however, is the expectation that some form of a vaccine passport will become as ubiquitous as a standard identity passport, and required in much the same way. In order to avoid confusion and the increasingly bitter partisan wrangling that has emerged in places like the United States, it’s instructive to remember the extent to which citizens are already asked to prove their vaccine status. Primary schools and colleges across the global North nearly all require some sort of proof of vaccination against childhood diseases before enrolling students. A COVID-19 vaccine passport will most likely function the same way. It will be simply show the holder has received a vaccine.

At this point much remains to be worked out by governments, civil society groups, and travel providers. Whil there are no agreed upon standards, governments and private companies are racing to create proofs of concept. Travelers can be forgiven for feeling a bit lost in the constant stream of information. Here are some of the major issues and challenges standing in the way. At the end of the day, it remains far from clear exactly how (or even if) a COVID-19 vaccine passport will materialize.

The ubiquity of smart phones and other devices have fueled speculation that a COVID-19 vaccine passport will be an app or other digital document. Travelers might be expected to upload proof of vaccination into their phones or download it from their doctor or vaccine provider. Digital passports, their advocates maintain, provide convenience to both travelers and governments. Travelers could access multiple records such as test results and vaccination certifications in a single environment. Governments would then quickly verify such records by matching them to preapproved testing providers or vaccine administrators. It’s fair to assume some form of a digital vaccine passport will be an option. The question is whether a digital passport will exist alongside paper-based alternatives or if it will supplant them entirely.

At this stage, there is little consensus regarding what information vaccine passports should contain. At a bare minimum will be the assertion a traveler has received a COVID-19 vaccination. Proposals range from this most basic to complex designs that merge additional health records such as test results and contact tracing information, compare those against current restrictions, and determine whether an individual traveler is approved to enter a particular destination. The lack of widespread and high-level coordination among the various stakeholders has resulted in a proliferation of proposed implementations. At this stage, travelers might expect to be required to obtain destination-specific solutions similar to how many countries now require visitors to get an entry visa prior to travel.

Every prospective vaccine passport provider touts their security credentials. However, the proof remains very much in the pudding as they say. Current solutions make use of standard encryption tools and blockchain technology to protect sensitive information and prevent unauthorized tampering. Travelers should keep in mind that the data security challenges surrounding vaccine passports are essentially twofold. On the one hand, travelers need to be sure their information is protected and accessible only by those with authorized access. On the other hand, governments need to know information contained in a vaccine passport is accurate, reliable, and tamperproof. Cybersecurity experts are warning of an alarming rise in fake vaccine credentials for sale on the so-called dark web, a network of hidden websites and services accessible only through specific browser tools. Researchers at the cybersecurity company Check Point have reported a dramatic rise in the number of listings offering vaccines or fake vaccine credentials. Check Point researchers point to this growing trend as further evidence of the need to develop an agreed upon and enforceable verification standard underlying vaccine passports.

Overcoming these challenges involves an inevitable tradeoff between security and convenience. Increased data security likely means reduced portability and vice versa. Travelers should be aware of this tradeoff and also know that data security claims are essentially marketing spin unless accompanied by robust and meaningful scrutiny, preferably by outside experts. Here are a few questions to keep in mind. Are the data contained in a vaccine passport protected both "in transit" and "at rest"? Is a traveler’s information ever transmitted to or stored by vaccine passport providers? What safeguards are in place to ensure data, once entered, cannot be altered unless intended? Will travelers be able to delete or transfer their data?

A growing number of providers have either begun active development of a vaccine passport or indicated their intention to do so. The following list provides a representative sample. It relies on claims made by providers themselves so standard caveats apply.

AOKpass offers to provide "a digitally authenticated, secure and portable copy of your medical records." After receiving test results from their healthcare provider, AOKpass users will be able to manually enter their information, which is then secured by AOKpass and available for use while traveling.

CommonPass aims to provide "a trusted, globally-interoperable platform for people to document their COVID-19 status (health declarations / PCR tests / vaccinations) to satisfy country entry requirements, while protecting their health data privacy." CommonPass plans assess health records based on current travel requirements and help travelers easily confirm their COVID-19 status.

The COVID-19 Credentials Initiative (CCI) is a member of the Linux Foundation Public Health (LFPH) and it aims "deploy and/or help deploy privacy-preserving verifiable credential projects in order to mitigate the spread of COVID-19 and strengthen our societies and economies." The CCI claims to "adopt an open-standard-based open-source development approach to public health, which has been proven very effective and efficient with LFPH's work in exposure notification apps."

Docket Health says it is a "health company that partners with government to put more Americans in control of their personal health data." Docket's mobile application allows users to upload vaccination records and then displays a QR code for use at receptions areas or during check-in. Residents in the US states of New Jersey and Utah can access to their immunization records through the Docket app to access services in those states.

The Good Health Pass Collaborative bills itself as an "open, inclusive, cross-sector initiative, bringing together leading companies and organizations from the technology, health, and travel sectors." Their aim is to create "a blueprint for interoperable digital health pass systems" that will help "restore international travel and restart the global economy." Less a single pass, the collaborative is an effort to coordinate multiple stakeholders in developing a set of best practices.

The Health Pass platform envisions integrating lab results, vaccine validation, and real-time health survey data to offer a solution aimed at both travel and venue access. With Clear kiosks at airports and venues, travelers could access their records directly using biometric identify verification or through an app-based system.

The International Air Transport Association (IATA) Travel Pass envisions "informing passengers on what tests, vaccines and other measures they require prior to travel." Travelers will then be able to share test and vaccination results in a “verifiable, safe and privacy-protecting manner.”

IBM’s Digital Health Pass "is designed to provide organizations with a smart way to bring people back to a physical location, such as a workplace, school, stadium, or airline flight. Built on IBM Blockchain technology, the solution is designed to enable organizations to verify health credentials for employees, customers and visitors entering their site based on criteria specified by the organization."

Offering a different take on a vaccine passport, ImmunaBand will allow people to share their vaccination status via a QR code worn around their wrists. According to the company, "the sleek bracelets [will be a] symbol of vaccination and -- hopefully -- of society’s eventual triumph over this pandemic."

According to the companies, "the Mvine-iProov passport enables a person’s test result or vaccination status to be registered and proved without disclosing their identity, and without the need for extensive new infrastructure." It is largely designed to integrate with existing healthcare infrastructure in the United Kingdom.

Safe Travel claims their "verifiable QR technology gives you a seamless travel experience while preserving your privacy." The system is designed to work by directing travelers to partner testing providers whose results can be uploaded directly into the Safe Travel ecosystem and used during check-in.

Developed by AirAsia, "Scan2Fly is an AI-based feature that allows you to upload your documents…like a Polymerase Chain Reaction (PCR) test certificate or SafeTravel Pass. This feature takes just a few seconds to analyze your document(s) validity and determine your travel eligibility."

SMART Health Cards come in both paper and digital versions. Users are able to request a SMART Health Card from pharmacies, medical service providers, or immunization clinics that are able to offer them. Once issued, relevant medical information is stored in a QR-code that can be uploaded into another third-party app such as CommonPass for use during travel.

The Smart Vaccination Certificate is an effort by the World Health Organization (WHO) that is "focused on establishing key specifications, standards and a trust framework for a digital vaccination certificate to facilitate implementation of effective and interoperable digital solutions that support COVID-19 vaccine delivery and monitoring, with intended applicability to other vaccines." The effort is currently still in development.

Less a consumer-oriented product, the Vaccination Credential Initiative (VCI) wants to "enable individuals to access a trustworthy and verifiable copy of their vaccination records in digital or paper form." The effort aims to reduce global inequities by allowing those without access to digital solutions to "receive papers printed with QR codes containing W3C verifiable credentials."

VaccineGuard attempts to include "vaccine manufacturers, hospitals, public health authorities, certificate providers, wellness app providers, citizens, border guards, vaccination program managers, and insurance companies" in order enable them to "share data and verify its authenticity across organizational boundaries and international borders."

VaxVisa says they do not intend to create an "immunity passport." Rather, they envision VaxVisa as an "evidence based technology solution designed to present digital copies of vaccination and test results to your personal device. … [VaxVisa] provides the digital evidence, secure personal storage, transport and sharing of vaccinations and laboratory test results."

VeriFLY claims their "adaptable, real-time digital credentials allow users seamless, touch-free transactions." Users can input different information such as "proof of age, business membership, citizenship, health status, travel reservations," etc.

A growing number of countries have announced plans to support at least some aspects of a vaccine passport. Those destinations that now allow vaccinated travelers require varying degrees of proof and confirmation of vaccination. Some places have begun offering vaccinated travelers the option to skip pre-departure testing and quarantine requirements, which helps to remove a significant impediment to travel.

European Union Member States have begun large-scale rollout of the new EU Digital COVID Certificate. The certificates, which are not mandatory for travel, require that travelers be vaccinated with a COVID-19 vaccine approved by the European Medicines Agency (EMA). So far the EMA has granted authorization to only 5 manufactures: AstraZeneca-Oxford, Johnson & Johnson, Moderna, Novavax, and Pfizer/BioNTech. EU Digital COVID Certificates should permit travelers who can prove they are fully vaccinated against COVID-19 with an EU-approved vaccine to once again enter the EU for non-essential travel, which would include tourism. The certificates are QR-code based, available in digital or paper formats, and free of charge. The hope is to significantly reduce the barriers to travel within the bloc while also allowing tourism-heavy economies such as Cyprus 🇨🇾, Greece 🇬🇷, Malta 🇲🇹, Portugal 🇵🇹, and Spain 🇪🇸 to once again welcome travelers from non-EU countries.

The African Union Commission and the Africa Centers for Disease Control and Prevention have announced plans to launch a "#TrustedTravel My COVID Pass" to facilitate travel on the African continent. Ethiopian Airlines and Kenya Airways both intend to roll out support for the new system, which will work with a network of testing providers and labs to provide verifiable and trusted test results to travelers. The system aims to simplify document verification for cross-border travelers in Africa.

The Persian Gulf Monarchy recently released the "BeAware Bahrain" mobile application that serves as a single point of access for residents and travelers. The app offers contact tracing features, monitoring of persons in self-isolation or quarantine, and the ability to locate and book appointments with COVID-19 testing providers.

Brazil Supreme Court Justice Luis Roberto Barroso recently overturned an attempt by Brazilian President Jair Bolsonaro to block health authorities there from requiring foreign travelers to present proof of vaccination. The decision, which follows a challenge by Brazil’s health regulatory body, opens to the door to Brazil requiring visitors to present some form of a vaccine passport when traveling to the South American nation. It is not clear yet how the ruling will be implemented. Under current policies, unvaccinated travelers are allowed to enter Brazil subject to a 5-day quarantine and additional testing for COVID-19.

Canadian Prime Minister Justin Trudeau announced Canada would adopt a national standard for vaccine credentials. The national system will be designed to unify several competing paper-based and digital credentials currently offered by Canadian provinces. The Canadian government currently requires all travelers departing Canadian airports or using national rail services to show proof of vaccination.

China has developed several mobile applications that allow people to show their vaccination status. This includes the massively popular WeChat messaging application. Widely used in China, authorities hope to expand coverage and to collaborate with regional destinations such as Singapore and Thailand, both of which welcomed large numbers of Chinese visitors before the onset of the COVID-19 pandemic. China has previously relaxed restrictions on visa processing for foreign nationals who can prove they were vaccinated with a Chinese vaccine. However, China still maintains strict quarantine requirements for all incoming travels, which makes travel exceedingly difficult.

Authorities in France require people who want to see a movie, go to a restaurant or bar, or take a train in France to show proof of vaccination or a negative COVID-19 test result. Residents are expected to have to use the so-called "pass sanitaire," the official French health pass available in both paper and digital formats. Digital versions reply on the government's "TousAntiCovid" application, which also gives holders the ability to acquire an EU Digital COVID Certificate for use throughout the European Union.

The government of the Hong Kong Special Autonomous Region has indicated it is working with The Commons Project to adopt the CommonPass digital vaccine passport solution. No clear timeline has been announced. HKSAR health secretary Sophia Chan told a press conference the government there was considering requiring various local businesses to begin requiring proof of vaccination from patrons. Chan indicated the government was in the first phase of determining which businesses and sectors might see the new rules applied. Authorities in the Chinese territory are also keen to see the return of quarantine-free travel with Mainland China, which despite having been under discussion for some time, appears to remain off the table for now.

Japan has affirmatively announced plans to launch a vaccine passport. Authorities expect the system will integrate with existing tools that track the progress and rollout of Japan's vaccination program. The app will be focused on Japanese citizens who travel abroad and foreigners in Japan who want to return to their home countries. Early reports indicate Japan is modeling its system on the EU Digital COVID Certificate. It is expected Japan's system will allow travelers to demonstrate both their vaccination status as well as recent COVID-19 test result information.

As an earlier global leader in vaccine administration, Israel plans to roll out a "Green Pass" that will help facilitate travel and access to domestic facilities such as restaurants, night clubs, and sporting venues. Hoping to incentivize continued vaccine acceptance among its population, the Israeli government hopes the new pass will convince skeptical Israelis to get vaccinated.

Italy requires everyone visiting any type of indoor restaurant, sporting event, museum, or recreational and entertainment venue to show a valid COVID-19 digital green certificate. The so-called "Green Pass" is also required when accessing all air, sea, and land based public transportation including ferries, high-speed trains, and regional bus services. The Green Pass allows holders to prove they've either been vaccinated, fully recovered from a previous infection, or recently tested negative for COVID-19.

The New Zealand Ministry of Health has developed a digital vaccine passport to allow Kiwis to provide proof of their COVID-19 vaccine status. New Zealand's success in combatting COVID-19 has meant Kiwis continue to be welcome in many places abroad, including destinations with rather strict entry policies such as Singapore. Recently, the European Commission announced New Zealand is joining the EU Digital COVID Certificate system. Vaccination certificates issued in New Zealand are now recognized by all EU Member States as well as several non-EU members who also participate in the system.

The Norwegian government says it plans to introduce a system that will allow vaccinated Norwegian citizens to prove their vaccine status in order to enter and leave the country. In addition to travel, Prime Minister Erna Solberg suggested Norway will also seek to implement a vaccine certificate at larger public events and cruises, for example. Technical details remain to be worked out; however, the expectation is Norway's vaccine certificate will align with the draft standards being developed for the European Union's Digital Green Certificate.

Singapore has been a pioneer in developing procedures to allow a resumption of travel. Recently, Singapore has expanded its so-called Vaccinated Travel Lane (VTL) to encompass 21 countries. Visitors from approved locations can apply for a Vaccinated Travel Pass (VTP) for travel to Singapore for short-term visits including tourism. Travelers are required to show proof of vaccination using one of several accepted vaccine credentials including EU Digital COVID Certificates, SMART Health Cares, NHS COVID Passes, and Digital HealthCerts.

South African President Cyril Ramaphosa has announced plans to introduce a COVID-19 vaccine passport in an effort to boost public support for the country's struggling vaccination efforts. Ramaphosa said more information would be forthcoming regarding how a South African vaccine passport system will work. He hinted at plans to use vaccine passports for access to public events. South Africa has struggled to contain COVID-19 and the plan for a vaccine passport comes as the country aims to vaccinate two thirds of the population by March 2022.

South Korean Prime Minister, Chung Sye-kyun, announced South Korea will join the growing number of countries to issue some form of a vaccine passport. The mobile app-based technology allows travelers to South Korea to prove they have been vaccinated. According to the government's statement, the app incorporates blockchain technology to secure credentials and prevent counterfeiting. South Korea allows fully-vaccinated citizens and permanent residents to avoid the country's mandatory 14-day quarantine for people who have been in contact with someone confirmed to have COVID-19 or who have returned from overseas travel. The exemption will only apply to persons with a negative COVID-19 test and who are not exhibiting COIVD-like symptoms. It will not apply to residents arriving from locations where coronavirus variants are prevalent such as Brazil and South Africa, or to people who were vaccinated abroad.

Thailand has announced plans to issue vaccine passports for travelers. According to an order recently published by the Thai Public Health Ministry’s Disease Control Department, residents who receive their COVID-19 vaccinations in Thailand will be issued an official travel document showing their vaccination status. Travelers need to show proof they have completed a full vaccination regimen at least 14 days before traveling to Thailand using COVID-19 vaccine approved for emergency use by the World Health Organization (WHO).

Authorities in Scotland have rolled out an update to their NHS Covid Status mobile application designed to include information on booster vaccinations. As Europe continues to battle the Delta variant, confirmed cases of the new Omicron variant have appeared in several countries and regions. Authorities in Scotland have signaled they plan to extend requirements for Scotts to show proof of vaccination when entering various high-risk venues. First Minister Nicola Sturgeon suggested that Scotts would need proof of a so-called "booster" shot if they received their second vaccine dose more than four months ago. Meanwhile, the government of UK Prime Minister Boris Johnson is facing opposition from within his own governing Conservative Party to plans to expand the use of vaccine passports in England.

Foreign nationals must carry proof of vaccination in order to enter the United States. Both digital and paper-based certificates are accepted. Travelers will need to show proof they have completed a full regimen of a COVID-19 vaccine authorized for emergency use by the World Health Organization (WHO) and will need confirmation of a negative PCR test result for COVID-19.

The Vietnamese government allows fully vaccinated foreign travelers to enter the country for travel and tourism. Travelers must carry proof of vaccination recognized by local authorities. Vietnam has reciprocal agreements with several countries and regions to recognized vaccine credentials issued in those jurisdictions. Interested travelers can contact their local Vietnamese embassy or consulate regarding current requirements for proof-of-vaccination.

View The Latest Policies >>

COVID-19 vaccine passports represent an important step towards the resumption of international travel. As our long pandemic year continues to grind on, travelers can at least take heart that efforts are well underway to allow for the return of something approaching normal life. The best advice now is to stay the course, keep doing things to protect yourself and others, and get vaccinated if you’re willing and able to do so. Remember, unless everyone is protected, no one is protected.