Is It Safe to Send a Passport Copy? What to Redact First

A passport copy is the most requested identity document in the world: landlords, employers, hotels, banks, and government portals all ask for it. And it is also one of the most dangerous files to send carelessly -- the passport number and the machine-readable zone (MRZ) at the bottom of the page are enough for sophisticated identity fraud.

The answer is not "never send it." It is: know what the recipient actually needs, redact the rest, and send through a channel you control.

What's Actually on a Passport Copy

Beyond your name and photo, the page contains two high-value machine-readable elements:

• The passport number -- the primary identifier tied to your travel and identity records.
• The MRZ -- the two lines of characters at the bottom. It encodes your passport number, name, date of birth, and a check digit that lets an attacker validate the data.
• Your signature -- usable to forge consent on other documents.

A full, unredacted passport copy in the wrong hands enables identity fraud, fake document applications, and account-takeover attempts. The value is higher than a bank statement -- which is why the handling should be stricter.

What Different Recipients Need

• Landlords and property managers: identity confirmation. They do not need the passport number or MRZ in most cases.
• Employers: identity verification for onboarding. Some legally require the full document (e.g., I-9 in the U.S. -- though employers may accept alternatives); ask what their compliance process requires.
• Hotels and travel: front-desk verification only. A redacted copy should not be an issue.
• Banks and government: often need the full document for legal identity verification. Confirm before redacting.

The principle is the same as for bank statements: the recipient gets what proves the claim, and nothing more.

What to Redact

1. The passport number. Cover it unless the recipient's verification genuinely requires it.
2. The MRZ (bottom two lines). Almost nobody outside border control and issuing authorities needs it.
3. Your signature, when the purpose is identity confirmation rather than consent.
4. Any personal details beyond what they asked for -- e.g., your place of birth if they only need your name, photo, and expiry.

Keep visible: your name, photo, date of birth, nationality, and the document's expiry date -- that is what identity checks typically verify.

How to Prepare the File

1. Scan or open the passport page in the LanaPDF editor at lana-pdf.com. Processing is local -- the file never gets uploaded while you work on it.
2. If the copy is a scan, check for a hidden text layer. Run OCR or repair first so there is no invisible text that survives redaction.
3. Redact the fields above with the Redaction tool -- not the rectangle tool, which only covers text visually. LanaPDF removes the covered content from the file on save.
4. Flatten the page so no hidden layer can remain.
5. Verify: open the exported file, press Ctrl+F / Cmd+F, and search for part of the passport number. Nothing should be found.
6. Send through a secure portal or a password-protected file -- never a public upload or a social media direct message.

For the same preparation applied to financial documents, see how to redact a bank statement and how to share documents securely.

Conclusion

Sending a passport copy is normal, but sending it unprepared is risky. Redact the passport number and MRZ when the recipient doesn't need them, flatten the file, verify the redaction, and use a secure channel. The person you send it to gets proof of identity; the person who intercepts it gets nothing of value.