Is it safe to send your ID over WhatsApp or email?

It is the path of least resistance: a landlord, a recruiter or a rental host asks for your ID, and you send a quick photo over WhatsApp or email. Done in seconds. The problem is that both tools were built to deliver images, not to protect them — and once your document arrives, it takes on a life of its own.

What happens to the image after you send it

The moment your passport or ID photo leaves your phone, copies start multiplying in places you do not control:

• It saves to the recipient’s gallery. WhatsApp often auto-saves received images to the camera roll, which then syncs to iCloud or Google Photos.
• It gets backed up. Chat backups and mailbox backups copy the image to cloud servers, sometimes with weaker protection than the original chat.
• It can be forwarded in one tap. A single share sends your document to people you never intended.
• It lingers indefinitely. Email in particular keeps your document on mail servers, in “Sent,” and in the recipient’s inbox for years — a standing target for any future breach.

End-to-end encryption, which WhatsApp does provide, only protects the message on its way to the recipient. It does nothing about what that person’s phone, backup and habits do afterwards. Encryption is not the issue; persistence and copying are.

Why that matters for an ID specifically

A document photo is uniquely dangerous to leak because it is high-value and unchangeable. Your passport number, DNI number and machine-readable zone are enough to fuel account fraud and forgery, and unlike a password you cannot simply reset them. A copy that escapes today can be used months later. That asymmetry — cheap to leak, expensive and slow to recover from — is why “just send a photo” is a bad default.

The safer way to share

You rarely need to stop using WhatsApp or email. You need to change what you send:

1. Redact before you send. Hide the document number, the machine-readable zone (the code lines on a passport, or the block on the back of an ID/DNI), your date of birth and your signature. Keep only what the recipient must match.
2. Add a watermark naming the recipient and purpose, so a forwarded or leaked copy is obviously out of place and hard to reuse.
3. Do it on-device. Prepare the copy in an app that never uploads your original — Anonymize my ID works entirely offline — so the only file that exists is the safe one.
4. Clean up. Delete the image from the chat or thread once it has served its purpose.

A redacted, watermarked copy is safe to send over almost any channel, because even if it spreads, there is little a stranger can do with it. For the exact fields to cover, see how to redact a passport or ID card; for the wider habit of sharing documents on the road, see how to send a copy of your passport safely.

Frequently asked questions