Skip to main content
An encoding profile describes what CaptrID writes onto a card’s chip when it prints. Define it once, attach it to a Master List, and every card produced from that list is encoded identically. Without a profile, printing produces a card with your design on it and nothing on the chip.
Encoding profiles configure the encoding. Actually writing to a card needs the CaptrID print utility, a small desktop application that talks to your printer and encoder over USB. It is not a download — contact us and we will provide it.You can build and save profiles before you have the utility; they simply will not do anything until a machine is set up to print.
You will find them under Encoding Profiles in the sidebar.

Choosing a card technology

This is the first decision and the one worth getting right, because it depends on what your card is for and what your other systems already read.
If the card has to open a door, ask whoever maintains your access control what their readers expect before building a profile. Getting the technology wrong means reprinting the batch.

The cards in the hopper have to match the profile

CaptrID checks the chip in the printer against the profile before it writes anything. Load DESFire stock and run it against an NTAG profile and the job is refused, naming what is loaded and what the profile expects, rather than writing to a chip that cannot take it.
The check only refuses on a definite mismatch between card families. A chip CaptrID cannot identify is allowed through — some perfectly good cards do not announce themselves clearly, and refusing those would block work for no reason. So it catches the wrong box of cards, not every possible problem.
This is worth knowing because the old failure was unhelpful: a mismatched card failed deep inside the encoder with a message that read, literally, “The operation completed successfully” — which told nobody that the wrong stock was loaded.

Tap-to-web (NDEF)

The simplest option: the chip holds a URL, and tapping the card with a phone opens it. Point it at the person’s profile page and a tap becomes an instant credential check. Build the URL from a template with placeholders that fill in per person.
A tap-to-web card is readable by anyone with a phone — and rewritable by them too, unless you lock it.If the cards leave your building, add a 4-byte password block under Advanced to lock writes. Otherwise someone can point your card at a URL of their choosing.

MIFARE Classic 1K

A 1K card is divided into sectors, each with blocks that hold data. Tap a sector in the editor to bind its blocks to fields from your Master List. Two things the editor enforces, both physical properties of the card rather than choices:
  • Block 0 is the manufacturer block and holds the card’s UID. It is not writable.
  • Block 3 of every sector is the trailer, holding keys and access bits. It cannot hold your data.

Keys

Key A authenticates every sector. The factory default is FF FF FF FF FF FF, and for a simple card that is fine. Choose an organisation key instead when the card controls access to something that matters. An organisation key means a card cannot be read or rewritten by anyone with an off-the-shelf reader.
Keys are locked on existing profiles — you cannot change the key on a profile that has already produced cards, because the cards in circulation still use the old one. Clone the profile to use a different key, and be clear about which batch has which.

DESFire EV3

DESFire works in one of two modes:
  • Tap-to-web — an NDEF URL, as above
  • Data files — structured data in applications
For data files, each application needs a 6-hex-digit AID (3 bytes) and at least one file. File IDs run from 0 to 31. Bind each file to a field from your list. DESFire has its own card-level key for create and format operations. As with MIFARE, the factory default suits simple cards; an organisation key suits cards that gate access.

Field bindings

Whatever the technology, encoding comes down to field bindings: which field from your Master List goes where on the chip, and how it is encoded. Each binding needs a logical key — the name your other systems reference. It is auto-filled from the source field name, and you only rename it to reuse a key across lists. If two lists both produce cards a door controller reads as employee_id, give both bindings that same logical key. Preview the encoded bytes before saving. It is much cheaper than discovering a mis-encoding after printing three hundred cards.

Magnetic stripe

For cards that carry both a chip and a stripe, or a stripe alone. Set the track data as your legacy system expects it: track 1 takes letters and numbers (up to 79 characters), tracks 2 and 3 take numbers (up to 40 and 107). CaptrID checks the lengths before a card is fed and names the track that is too long.
Magnetic stripe needs an Entrust or Datacard printer. No other brand CaptrID supports can write a stripe — not Zebra, Magicard, Matica or Evolis.Select a stripe profile against one of those and the job is refused, naming the brand, before a card is fed. Nothing is wasted, but the card cannot be produced.
On an Entrust/Datacard printer the stripe and the chip are written on the same pass, so one card can carry both from a single profile. The printer reads the stripe back as it writes it, so a job that reports success has been verified.

A mag head in the printer is not the same as CaptrID supporting it

This catches people out, so it is worth saying plainly. Several of these printers have a magnetic encoder physically fitted, and a Matica XID will even report that it has one. That does not mean CaptrID can drive it. The capability shown in the Print Card dialog is what CaptrID can write, not what the hardware contains. Zebra is the case that surprises people. The stripe works on the printer itself — if you have encoded one using Zebra’s own tools, you were not imagining it. CaptrID still cannot, for a mechanical reason: a Zebra takes a fresh card from the hopper to write a stripe, so the stripe and the printed artwork would end up on two different cards. Until CaptrID can send a stripe as a job on its own, it declines rather than eject two cards.

Coercivity

HiCo and LoCo describe the magnetic strength your card stock needs. Writing at the wrong one wastes the card: HiCo settings on LoCo stock, or the reverse, give a stripe that reads back blank. On an Entrust/Datacard printer this is set in the printer’s own Windows driver properties, not in CaptrID, because the printer applies one setting to every card rather than taking it per job. So:
  • Leave the profile on HiCo, which matches the printer’s default.
  • If you need LoCo, change it in the printer’s driver properties on the workstation. A profile asking CaptrID for LoCo is refused with a message pointing you there — deliberately, because quietly writing at HiCo instead would hand you a batch of blank stripes that all looked successful.
If you built a magnetic stripe profile before October 2026, re-check the cards it produced. Track data was being lost between the portal and the printer, so those jobs wrote nothing to the stripe and still reported success. The card design printed normally — only the stripe is affected. This is fixed, but the fix cannot reach cards already made.

Archiving a profile

Archiving stops a profile appearing in the print wizard. Cards already produced with it are unaffected — they carry what they were encoded with, and archiving does not reach out to change them.

Card Printers

Registering the printer and encoder that use these profiles

Printing ID Cards

The print wizard, and exporting print-ready PDFs

Creating Card Templates

The visual design, as opposed to the chip contents

Support

Getting the print utility set up