Back to guides

NFC for Artists: Linking Physical Artwork to Verified Provenance

A tag on an artwork can open a provenance record, but only the right chip and an honest registry make it worth trusting. Here is what an NFC tag does and doesn't prove.

Published

Introduction

An NFC tag can link a physical artwork to a record you can check, but the tag alone proves very little. What makes it useful is the chip you pick, where you put it, and who stands behind the record it points to. Museums use tags for visitor-facing labels, as covered in our piece on NFC exhibit labels in museums. This guide is for the other side: artists and small studios who want a certificate of authenticity that is harder to photocopy than a signed card.

Why a plain tag is not enough

A basic NDEF sticker such as an NTAG213 stores a URL, and anyone with a phone can read that URL and write the same one onto another tag. Pointing a tag at your portfolio page is fine. Calling it a certificate of authenticity? That's a stretch.

Chips built for authentication change this. NXP's NTAG 424 DNA adds a Secure Unique NFC (SUN) message. Each time a phone reads the tag, the chip builds a URL with authentication data that is different on every tap, using AES-128. This all happens inside an ordinary NDEF read, so a buyer needs no special steps. NXP also lists an ECC-based originality signature and an AES-based originality check, which help confirm the chip itself came from NXP.

Two things matter. First, the tag doesn't verify anything on its own: a server has to check the tap-unique message against the tag's key. Second, a URL copied from an earlier tap should fail that check, which is the point, but the keys must stay safe on your backend. If they leak, a clone can produce valid messages. For the mechanics, see how NTAG 424 DNA tap-unique messages work and our broader look at NFC product authentication.

Where to put the tag

Placement decides how easily someone can move a tag to a different piece. Vendors describe small discs or wet inlay labels that are moulded or laminated into the work, hidden from view and hard to remove without damage. One example is Mahajati, a Singapore wood-carving studio that adopted ixkio's platform, where each tag is tied to a blockchain record and each scan produces a code a third-party server can verify. Treat that as the vendor's account. The report cites no independent testing.

For your own work, think about the medium. A tag set into a wooden panel, a sculpture base or the backing of a framed print is far less exposed than a sticker on the front. Metal behind or near the tag can weaken reads, so test with a phone before you seal anything in. A tag on the frame is easier to attach, but it only vouches for the frame.

The registry: who vouches for the data

The tag is a pointer. The record behind it is the actual provenance, and that is where trust lives. Blockchain Art Collective, a New York company backed by Chronicled, links a tag on each artwork to a registry entry: artists register the work in an app, attach the matching tag, and anyone with the app can scan to see the public details. Its starter kit of two NFC certificates cost US$20 when reported. These are company claims, and the coverage doesn't say how registry accuracy is checked.

A blockchain is one way to keep a record from being quietly edited, but it is not required. A page on your own site that lists the title, year, medium, edition number and sale history can do the job, as long as you keep it up to date and stand behind it. What matters is that the record names who registered the work and when.

What a tag cannot prove

A scan shows that a particular tag was read and that its data matched a record. It doesn't show that the artwork is genuine, that the registrant was honest, or that the tag is still on the piece it started on. Keep dated photos, invoices and condition notes alongside the tag. If you want to inspect or write a tag you own, an app like NFCore can read its NDEF contents and write a URL to it, though secured chips like NTAG 424 DNA need to be configured with their own tools and keys.

Conclusion

Use an NFC tag as a link, not a verdict. Pick an authenticating chip if the record matters, hide the tag where moving it would damage the work, and keep the registry honest and current. The tag makes checking easier; it doesn't replace the paperwork.

Frequently Asked Questions

Can an NFC tag prove a painting is genuine?

No. A tag proves that a tag was scanned and that its data matches a registry entry. Whether the artwork is genuine depends on who registered it and how carefully they did it.

Do I need a blockchain?

Not necessarily. The tag only needs to point to a record someone can check. A blockchain is one option for keeping that record from being altered; a well-kept page you host is another.

What if the tag falls off?

The record still exists, but the physical link is gone. Keep photos and paperwork so you can re-tag the work and show why.