How to send a copy of your passport safely

Sooner or later, someone asks for “a copy of your passport.” A hotel at check-in, a car-rental desk, a visa application, a new employer, a bank. Most people do the obvious thing: snap a photo and send the whole page. That single image contains almost everything needed to impersonate you — and you have just handed it to a stranger’s inbox, where it can be stored, forwarded or leaked without you ever knowing.

You do not have to choose between cooperating and protecting yourself. The trick is to send a copy that proves who you are while hiding the details that make identity theft possible.

Why a plain photo of your passport is dangerous

A passport data page is a compact bundle of everything an identity thief wants. The passport number and the machine-readable zone — the two lines of < characters at the bottom — encode your document number, nationality, date of birth and expiry in a form that is trivial to copy. Add your date of birth and signature, both printed on the same page, and a fraudster has enough to open accounts, apply for credit or forge a document in your name.

A photo makes this worse, not better. Unlike showing your passport in person, a digital copy can be duplicated perfectly, an unlimited number of times, and it does not expire when your trip ends. Once it lands in an email thread or a chat backup, you have lost control of it for good.

What the other side actually needs

Here is the part most people miss: whoever is asking almost never needs the whole page. They need to confirm a specific thing.

• A hotel needs to match your face and name to the booking and meet local guest-registration rules.
• A car-rental or visa desk needs your name, nationality and that the document is valid.
• An employer or bank needs to verify your identity, usually alongside other checks.

None of that requires your passport number, your machine-readable zone or your date of birth sitting permanently in their files. So do not give it to them.

What to redact before you send

Cover these before the copy leaves your phone:

• The passport or document number.
• The machine-readable zone — the two code lines at the bottom of the page.
• Your date and place of birth.
• Your signature.
• Issue and expiry dates, unless the recipient specifically needs to see validity.

Keep visible only what the recipient must match — typically your name, photo and nationality. If you are unsure, hide it; a business will tell you if it genuinely needs more.

Add a watermark that ties the copy to its purpose

Redaction hides the sensitive fields. A watermark limits what can be done with what remains. Write across the image who the copy is for and why — for example, “For Hotel Marina check-in only — 2 July 2026” — tiled so it cannot be cropped out. Now, if that file is ever forwarded, breached or reused for a different purpose, it visibly does not belong there, and it is far harder to pass off as an original.

Do it on your phone, so the original never leaves it

The safest tools do the whole job on the device, with no upload and no account, so your original photo is never sent to a server that could be hacked or subpoenaed. That is exactly how Anonymize my ID works: photograph the passport, drag boxes over the sensitive fields, add a watermark, and export a copy that is safe to share — all offline. For the mechanics of which fields to cover and how, see how to redact a passport or ID card.

One last habit worth keeping: send the redacted copy, never the original, and delete the copy once it has done its job. The safest document is the one that was never left lying around.

Frequently asked questions