NFT-Based Authentication in Education: ERC-721 Token Use for Moodle LMS Security and Credentialing

Abstract

The increasing adoption of blockchain technology in education has introduced alternative approaches to identity verification beyond centralized credential systems. This study proposes and implements a decentralized authentication mechanism for Moodle LMS using ERC-721 non-fungible tokens (NFTs) verified through MetaMask. Developed as a proof-of-concept following a design science methodology, the system links on-chain identity tokens to Moodle accounts without storing usernames or passwords. The architecture integrates Ethereum smart contracts, nonce-based digital signature verification, and Moodle’s Role-Based Access Control (RBAC) framework. Functional testing confirms that access is granted exclusively to users possessing valid ERC-721 tokens and verified wallet signatures. Replay attack simulations demonstrate effective resistance through nonce validation, while ensuring that no sensitive credential data is exposed during the authentication process, in contrast to default Moodle login mechanisms. Performance evaluation using Apache JMeter indicates stable operation under moderate loads. Although scalability and token management limitations remain, the results demonstrate the technical feasibility and enhanced security advantages of NFT-based authentication for learning management systems.