An online security firm has warned that the federal government‘s digital Covid vaccination certificates will be easy to forge without better security.