FIRS Cryptographic Keys and QR Receipts Explained
Why FIRS requires cryptographic keys, how QR verification works on receipts and invoices, and how to upload keys to ZoboLedger from WhatsApp.
Why FIRS requires cryptographic keys
FIRS e-invoicing uses cryptographic keys to sign receipts and invoices and embed verification QR codes. When a customer or auditor scans the QR code, FIRS can confirm the document was issued correctly under your business profile.
Without active keys, ZoboLedger can still record some B2C receipts, but compliant QR embedding requires your public key and certificate to be on file.
When you need keys
- B2B and B2G invoices — keys are required for compliant issuance with QR verification.
- B2C receipts — you can use Continue without QR in WhatsApp to issue immediately; the receipt is recorded but will not include a verification QR until keys are uploaded.
If keys are missing when you need them, ZoboLedger prompts Upload Crypto Keys in WhatsApp.
How to generate keys on FIRS
- Log in to the FIRS e-invoice portal.
- Open My Account → API Credentials → Manage Cryptographic Keys.
- Generate or export your key bundle (JSON) or separate public key and certificate files.
Keep your private key secure. Only upload the public key and certificate through ZoboLedger’s secure link — never share your private key in chat or email.
Upload keys via ZoboLedger
When ZoboLedger detects missing keys:
- Tap Upload Crypto Keys in WhatsApp.
- Open the secure, time-limited upload link ZoboLedger sends you.
- Upload the JSON bundle or separate public key and certificate files.
- Return to WhatsApp — once keys are active, new receipts and invoices can include FIRS-compliant QR codes.
Use the upload page only from the link ZoboLedger sends you in WhatsApp. Do not use third-party upload links.
If QR still does not appear
Confirm activation is complete and your NRS provider is set to PASCA. If setup is incomplete, complete E-invoice setup first, then retry key upload.
For the full walkthrough — NRS provider, Activate business, IRN recovery, and key upload — see our E-invoice setup guide.