How to Choose an NFC Tag for Product Authentication

NFC tag is a broad category. It covers everything from basic NDEF chips that store a single URL to cryptographic processors with hardware-protected keys and on-chip authentication engines. For product authentication, most of the NFC tag market is irrelevant.

A standard NFC tag, the NTAG213 or NTAG216 class, stores plain data in open memory. Any smartphone with a free NFC writer app can read the contents and write them to a blank tag. The copy is indistinguishable from the original. These tags work for content delivery, product information pages, or NFC-triggered URLs. They do not work the moment the goal is detecting copies.

A cryptographic NFC tag, the NTAG 424 DNA class, stores a symmetric secret key in hardware-protected memory that cannot be extracted under normal operating conditions. Every time a phone taps the tag, the chip generates a unique, one-time authentication code using AES-128 encryption and a monotonic counter that only increments. The code changes on every tap. No two taps produce the same response. No commercial counterfeiting operation can replicate this behaviour.

A standard NFC tag is a door with a key taped to the frame. A cryptographic NFC tag generates a new one-time code on every approach, and the only way to produce the right code is to hold the secret already locked inside the chip.

The decision is binary. If the deployment goal is logistics, consumer engagement, or Digital Product Passport data delivery without authentication, a standard tag may be sufficient. If the goal includes any form of anti-counterfeiting or item-level proof of genuineness, the chip must be cryptographic.

The authentication flow from chip to consumer follows a consistent sequence, regardless of product category.

1. Chip commissioning. Each tag is written with a unique cryptographic key pair and linked to a product record in the authentication platform. The tag receives a serialised identifier, typically a GS1 Digital Link URL encoding a GTIN and a unique serial number.

1. Tag integration. The commissioned tag is applied to or embedded in the product or its packaging during production. Integration methods vary: adhesive label on a box, inlay inside a leather lining, chip embedded in a spirits capsule, tag laminated under a watch caseback.

1. Consumer tap. The consumer holds a smartphone near the tag. On iPhone (XS/XR and later), the tag is read in the background with no app required. On Android, the tag is read natively when the screen is on. The phone opens the URL encoded on the tag.

1. Server-side verification. The URL includes the one-time authentication code generated by the chip’s AES-128 engine and the current tap counter value. The authentication platform verifies the code against the secret key stored server-side and checks the counter against its last known value.

1. Result delivery. The consumer sees a clear, immediate result in their browser or via an App Clip: authenticated or failed. The entire process, from tap to result, takes under two seconds.

No app download. No QR scan. No manual entry. The phone does the work.

Both NFC and QR codes can carry a serialised identifier linking a physical product to a digital record. The security architecture behind each is fundamentally different.

Criterion	Secure NFC (NTAG 424 DNA)	Serialised QR code
Clonability	Cannot be cloned. Secret key never leaves the chip.	Can be photographed and reprinted in seconds.
Authentication method	Hardware challenge-response (AES-128, SUN/SDM)	Server-side lookup of a static serial number
Replay protection	Monotonic tap counter, unique code per tap	None inherent. Same QR yields same response.
Tamper evidence	TagTamper variants detect physical opening	Print-level only. No inherent tamper detection.
Consumer interaction	Tap (background read on iOS, screen-on Android)	Camera scan, focus, framing
Unit cost	Published converter prices for NTAG 424 DNA-class labels cluster around $0.45-0.65/unit at five-figure volumes (public catalogues, 2026)	Printed QR adds near-zero marginal print cost; the real cost is serialisation and platform (industry sources, 2026)
Standard	ISO/IEC 14443-A, NFC Forum Type 4, AES-128	GS1 Digital Link (data carrier standard, no cryptographic layer)

The core difference: a secure NFC tag proves it is the original. A QR code proves only that someone has the same image.

When QR is the right choice

QR wins on cost at very high volumes with low unit value, where counterfeiting risk is low and the primary goal is information delivery or DPP compliance rather than authentication. A mass-market FMCG product at €3 per unit, produced in tens of millions, with no meaningful secondary market, does not need hardware cryptography on every item. In the EU Digital Product Passport context, GS1 Digital Link QR is emerging as the de facto visible data carrier for compliance. For categories where authentication is also needed, the optimal architecture layers NFC for trust on top of the visible QR carrier for compliance. NFC for trust, QR for access.

1. Security architecture

The chip must implement AES-128 or stronger symmetric cryptography with the key stored in hardware-protected memory inaccessible under normal operating conditions. It must also implement a monotonic tap counter to prevent replay attacks. The NXP NTAG 424 DNA family, implementing the SUN/SDM (Secure Unique NFC / Secure Dynamic Messaging) standard, is the reference for production deployments at volume. The standard it conforms to: ISO/IEC 14443-A, NFC Forum Type 4.

2. Smartphone compatibility

The chip must be readable by the consumer’s phone without any app. NFC Forum Type 4 tags are compatible with all modern NFC-enabled Android and iOS devices. iPhone XS/XR and later read tags in the background. Android reads natively when the screen is on. Verify that the specific chip variant is confirmed compatible with the current iOS NFC API: Apple’s implementation has historically been more restrictive than Android’s.

3. Form factor and integration method

NFC chips for authentication ship in three primary forms:

• Inlay. Chip mounted on a flexible antenna, delivered on a reel for automated processing.
• Label. An inlay with adhesive backing and optional printed face, for manual or semi-automated application.
• Embedded housing or wet inlay. For integration inside products or closures, shaped to fit specific geometries (capsules, watch cases, product housings).

The integration point dictates the form factor. A chip inside a spirits capsule must fit the capsule geometry and survive the capping process. A chip in a leather goods lining must be thin enough to leave no visible bump. A chip on a metal watch caseback needs a ferrite spacer layer.

4. Environmental performance

This is the most common source of post-deployment failure. Address it during chip selection, not during testing.

5. Supply chain and ecosystem maturity

A chip with strong cryptographic properties but limited availability from qualified inlay manufacturers creates procurement risk. The NTAG 424 DNA’s wide adoption means a large ecosystem of validated antenna designs, inlay converters, commissioning hardware, and platform integrations. Newer or less common chips may offer marginal improvements at the cost of supply chain complexity and integration effort.

Many NFC failures in the field are not chip failures. They are antenna failures triggered by environmental conditions the selection process ignored.

Metal proximity. Metal detunes the antenna by disrupting the magnetic coupling field. A tag placed directly on a metal surface will not read reliably, or at all. The fix is a ferrite backing layer between chip and metal. This restores operation but reduces read distance and adds thickness. Standard tags detune on metal: on-metal tags with a ferrite layer solve it.

Liquid proximity. Liquids absorb RF energy at 13.56 MHz. A tag on a full bottle of spirits performs differently from the same tag on an empty bottle. The antenna design must account for the range of fill levels the product will experience across its lifecycle, from production line to consumer’s glass.

Temperature extremes. Wine and spirits supply chains routinely expose products to temperature ranges from cold storage to heated shipping containers. Verify the chip’s rated operating range covers the full distribution environment.

Humidity and condensation. Chips in beverage closures face sustained high humidity. The housing material and adhesive must be rated for the expected conditions to maintain both adhesion and chip function over time.

Production process exposure. Capsule sealing, UV curing, steam sterilisation: each process exposes the chip to heat, pressure, or chemicals. The chip must survive the specific production process it will pass through during integration. Test with the actual process, not a specification sheet.

Long-term storage. Wine aged for a decade, spirits stored for years, luxury goods held in warehouses: the chip must maintain read performance over the entire expected storage period without degradation.

Published converter prices for NTAG 424 DNA-class labels cluster around $0.45-0.65 per unit at five-figure volumes, with on-metal variants adding 7-30% (public catalogues, 2026). At 50,000 units and above, pricing is typically quote-only and volume-dependent. Standard non-secure NFC tags (NTAG213 class) list around €0.19-0.23 at 1-10k units (public catalogues, 2026), but these cannot authenticate.

The chip cost is one line in the total system cost. Commissioning hardware, platform licensing, integration engineering, and ongoing support add to the programme budget.

The comparison that matters: for a product retailing above €100, a cryptographic tag at $0.45-0.65 represents well under 1% of product value. Counterfeit trade reached USD 467 billion globally in 2021, up to 2.3% of global trade (OECD/EUIPO, Mapping Global Trade in Fakes 2025). The cost argument against NFC authentication in premium goods rarely survives contact with the cost of not authenticating.

Different product categories impose different constraints. The chip may be the same; everything around it changes.

Wine and spirits. Tag integrated into the capsule or closure. Must survive capping pressure, temperature variation, liquid proximity, and potentially years of cellar storage. TagTamper variants provide tamper evidence on opening. Antenna must perform across fill-level variation.

Luxury watches. Tag mounted on or near the caseback. Metal housing requires ferrite-backed on-metal tags. Space constraints are tight. Read distance is reduced. The tag must survive years of wrist wear, moisture exposure, and temperature cycling.

Leather goods and fashion. Tag embedded in lining, stitched into a label, or placed behind a brand patch. Must be thin, flexible, and invisible to touch. Clothing and leather goods represent the largest share of seized counterfeits: 62% of all seizures (OECD/EUIPO, 2025).

Cosmetics and fragrance. Tag on packaging or integrated into the cap/closure. Production lines run at high speed; tag application must keep pace. Humidity and chemical exposure from product contents are common constraints.

Cigars. Tag in the band or box. Must survive humidity-controlled storage environments over extended periods. Thin, flexible form factor required to conform to curved surfaces.

Furniture and premium audio. Larger products with more integration flexibility but often metal or composite housings. On-metal solutions with ferrite layers are standard. Tags may be placed inside housings, under panels, or behind brand plates.