A data authentication system stores a token representing data distributed from a data source to a data recipient, allowing the data recipient to authenticate the data. The data authentication system receives, from a data source, a first token that represents a digital entity distributed by the data source to a data recipient. A representation of the first token is sent for storage on a blockchain. A request is received from a data recipient to authenticate the digital entity, where the request includes a second token that represents the digital entity as distributed to the data recipient. The data authentication system authenticates the second token against the stored first token to verify that the data recipient received authentic data.