Hide Numbers on Passport Scans (Redaction Tool)

To hide a passport number safely, make a separate copy and use a tool’s permanent redaction function, not a black box or blur. Remove the number from visible pixels and any searchable text, then check the exported file in another viewer. Keep the original secure, and label the redacted copy as altered.

If you need to share a passport scan, you may not need to share every detail on it. A redacted copy can limit exposure of the passport number while preserving the information a recipient actually needs. The work is easy to maintain if you keep one controlled original and make a fresh, clearly named copy for each sharing purpose.

I treat the export as a new file, not as proof that the source has been cleaned. A rectangle that looks black on screen can still leave the number selectable or recoverable underneath. The steps below help you remove the intended information, check for hidden copies, and avoid changing the only original.

Planning the Redaction and Identifying Every Occurrence

A good redaction starts with a clear scope: decide which number the recipient does not need, then locate each appearance in the actual file. Passport layouts and scans vary, so there is no universal position, field size, or safe pixel margin to use without checking the image.

First, confirm that you have the right passport file and page. If the scan contains several pages, inspect each one. Find the passport number on the visible page, then check whether it also appears in a machine-readable zone (MRZ), a text layer, or another page or image embedded in the file.

A passport number may appear in the MRZ, but its location and format can vary. Do not cover a standard-sized box based on a different passport or scan. Identify the number on your copy, and decide whether the MRZ appearance is also in scope. Avoid hiding unrelated identity details by assumption.

Before editing, check what the recipient actually requires. A business, agency, or service may need specific fields to complete a process. If it requires an unredacted passport, a redacted copy may not be accepted. Ask before removing information, and do not present an edited copy as an untouched or valid passport.

A simple survey checklist:

• Confirm the source file and the page or pages to share.
• Locate every visible appearance of the number.
• Check for OCR text, which lets a scanned image be searched or copied.
• Note whether the MRZ number is also in scope.
• Make a working copy and leave the original unchanged.

Access, File Copies, and Hidden Content Checks

A passport scan may contain more than the picture you see. A PDF can include searchable text, annotations, attachments, form fields, layers, thumbnails, or metadata. Check these parts because hiding the number on the page alone may not remove other stored versions.

Keep the original in a restricted location and work on a duplicate. Use a clear filename that distinguishes the files, such as passport-redacted-share.pdf. Do not overwrite the only source. Limit access to the original to people who need it, and follow the retention rules that apply to your situation.

Before editing a PDF, inspect its document properties and available panels for attachments, comments, and layers. If the program offers a document inspection or hidden-content removal feature, review what it finds. Remove unnecessary content from the derivative, but be careful not to delete information needed for the intended use.

For an image file, check whether it is a simple raster image or includes extra frames, layers, or metadata. A flat image can still retain identifying details outside the visible crop, depending on how it was created. Save a new copy and inspect that exported copy rather than assuming the editing view tells the whole story.

NIST SP 800-88 Rev. 1 discusses sanitizing storage media. It is not a test or certification method for deciding whether a redacted passport scan is safe. For this task, the practical checks are whether the number remains visible or searchable, whether hidden content remains, and whether the original is separately controlled.

File or feature	What to check	Safe next step
PDF page	Visible number and repeated pages	Redact each in-scope appearance
OCR text	Search or copy the number	Remove it with permanent redaction
Comments or annotations	Text or images containing the number	Delete unnecessary items
Attachments or layers	Alternate copies of page content	Remove items not needed in the shared copy
Image metadata	Unneeded identifying details	Remove where appropriate, then recheck

Applying and Exporting the Permanent Redaction

Permanent redaction removes the selected content from the saved derivative, rather than merely covering it on screen. Use a tool that offers a redaction operation and a way to apply or commit it. A shape, highlight, blur, pixelation, or crop is not a substitute for removing the underlying content.

For a PDF, select the redaction tool, mark the full number field, and apply or commit the redaction. Do not stop when the box appears on the page. Some programs keep marks pending until you apply them, and a pending mark may be removable. Follow the tool’s prompts and save the result as a new file.

For a scanned image, use an editor that replaces the selected pixels in the exported image, rather than adding a separate editable shape above them. Export a new file in a suitable format, then close and reopen it. If the file is placed inside a PDF later, check that PDF as well.

Use the smallest area that fully removes the in-scope number, including all characters. There is no universal pixel tolerance: scan resolution, document layout, and character spacing differ. Inspect the result at high zoom to ensure no digit edge remains, while avoiding unnecessary removal of neighboring information.

After applying redaction, flatten the copy where appropriate. Flattening combines visible page content into a less editable form, but it does not replace permanent redaction or the checks below. Remove unnecessary comments, attachments, hidden layers, and metadata, then export the derivative. Keep the original separate.

An illustrative workflow: sharing a booking document

A homeowner needs to send identity evidence for a booking, but the recipient confirms that the passport number is not required. They make a duplicate, redact the number on the visible page and any in-scope MRZ appearance, then apply the redaction. They inspect the export before sending and retain the original securely.

This is an example workflow, not a report of a specific case or a guarantee that every recipient accepts redacted documents. The key step is confirming what information is needed before editing. If the recipient cannot accept a redacted copy, do not assume that a partially hidden scan will meet its rules.

An illustrative workflow: image embedded in a PDF

A small business has a PDF made from a scanned passport image. A black rectangle looks correct, but the number can still be found by searching the PDF. The business replaces the temporary cover with the program’s permanent redaction function, applies it, exports a new copy, and repeats the search.

This example shows why appearance alone is not enough. A scan may have OCR text that is not obvious when viewing the page. If the editing tool cannot remove content permanently or you cannot verify the result, use a tool with clear redaction controls or ask a qualified document professional for help.

Verification of the Redacted Copy

Verification means testing the exported derivative, not just looking at the editing screen. Reopen the file in a separate viewer, inspect the page at high zoom, search for the number, and check for other content that could reveal it. Keep the unredacted source separate and do not distribute it by mistake.

Use this sequence after export:

• Open the new file in a different PDF or image viewer.
• Inspect the redacted area at high zoom for visible characters or edges.
• Search the PDF for the full number and, where practical, distinctive parts of it.
• Try selecting and copying text around the redacted area, then inspect the copied text.
• Review document properties, annotations, form fields, attachments, layers, and thumbnails where the tool allows.
• Confirm the filename and recipient attachment are the redacted derivative, not the original.

A search that finds nothing is useful, but it is not the only check. OCR may be incomplete, and file structures vary. Combine text checks with visual inspection and hidden-content review. If a number remains selectable, searchable, or visible, do not share that export. Return to the source copy, correct the redaction, and run the checks again.

Keep the original only as long as needed under your applicable retention policy. Store it with access controls suited to the sensitivity of the document. NIST’s media-sanitization guidance does not validate a redacted file, so do not cite it as proof that a passport number has been removed.

Conclusion: Share Only the Copy You Checked

A trustworthy redacted scan is a separate derivative with the intended number removed from both the visible page and other accessible content. Check the actual file rather than relying on standard passport layouts, and use a permanent redaction feature instead of a visual cover.

Make the workflow repeatable: survey the file, redact each in-scope occurrence, export a new copy, and verify it in another viewer. If the recipient requires an unaltered passport, a redacted copy may not serve that purpose. Confirm the requirement before sending anything.

Frequently Asked Questions

Can I hide a passport number with a black rectangle?
Not safely by itself. A rectangle may cover the number visually while leaving the text or image underneath intact. Use a permanent redaction function, then verify the exported copy.

Is blur or pixelation enough?
No. Blur and pixelation alter appearance but may leave information partly readable or recoverable. They are not substitutes for removing the underlying content.

Should I redact the number in the MRZ too?
Redact it if that appearance is within your privacy goal. First identify the number on the actual scan, since passport layouts vary, and avoid obscuring unrelated information without a reason.

Will a visual check prove the number is gone?
No. A visual check is necessary, but it cannot show whether searchable text, annotations, attachments, or other hidden content remain. Combine it with text search and file inspection.

Should I edit the original file?
Keep the original unchanged and restricted. Make a separate working copy, then save the redacted result as a new derivative.

How can I check whether OCR text remains?
Open the exported PDF in a viewer, search for the number, and try selecting or copying text near the redacted area. If the number appears, the export is not ready to share.

Does flattening guarantee permanent redaction?
No. Flattening can reduce editability, but it does not prove that the number was removed from all content. Apply permanent redaction first, then inspect the export.

Can a redacted scan be used as an official passport?
Do not treat it as an unaltered official document. It is an edited copy for sharing, and a recipient may require an unredacted document.

What if my tool has no redaction feature?
Do not substitute a drawing tool, blur, or crop. Choose a tool that permanently removes selected content and lets you review the result, or seek help from a qualified document professional.

Should I delete the original after making a redacted copy?
Follow the retention rules that apply to you. If you must keep it, restrict access and store it separately from the copy you plan to share.

(This article was written by one of our staff writers, Richard Montclair. Visit our Meet the Team page.)