Opens on your device
Your browser decodes the file locally. The page's security policy forbids it from opening any network connection, so even a bug couldn't upload your data.
Zero-upload identity protection
Black out passport numbers, MRZ codes and bank balances, stamp every copy with a forensic watermark, and strip hidden GPS data. Everything runs on your device. Your document is never uploaded.
PNG, JPG, WebP or PDF. Add front and back as separate pages.
Opened locally. Your file never leaves this device.
Swap names, emails, amounts and API keys for placeholders before you paste into ChatGPT, Claude or Gemini. When the AI replies, restore the real details in one click. The key stays in this tab's memory.
Nothing detected yet.
The key maps each placeholder to your real data. It exists only in this tab's memory and is gone when you close it, unless you save it yourself.
Your browser decodes the file locally. The page's security policy forbids it from opening any network connection, so even a bug couldn't upload your data.
One-click presets cover the MRZ, the document number and your SSN. A diagonal lattice watermark names the recipient and date, so a leaked copy can't be reused anywhere else.
On export, every page is rebuilt from flattened pixels. There are no hidden text layers or removable annotations, and no EXIF or GPS data. There is nothing underneath to peel away in Acrobat.
Blur and pixelation are reversible. Researchers have recovered text from both, and AI makes it easier every year. SafeID only uses 100% opaque black fills written straight into the image data.
No. Many PDF tools only draw a box on top of the page, and the original text stays underneath. SafeID renders every page to pixels, paints the redactions into those pixels and builds a brand-new PDF from the flattened images. The original content is simply not in the file.
The Machine Readable Zone is the two lines of <<< text at the bottom of your passport. It encodes your name, passport number, nationality, date of birth and expiry, with checksums. A clear photo of it is exactly what a forger needs.
Don't take our word for it. Click Verify in DevTools at the top of the page. It shows the connect-src 'none' policy your browser enforces and lets you run a live test that tries to connect out and gets blocked. You can also load the page, switch on airplane mode, and use it normally.
They can. An extension you've allowed to "read and change data on websites" can see anything on screen, including a passport you open here, and no website can block that. SafeID's security policy stops the page from uploading your data, not extensions you've installed. SafeID watches for extensions changing the page and warns you when it spots one, but an extension that only reads leaves no trace. For passports and bank statements, open SafeID in a private or incognito window, where extensions are usually switched off, or use a browser profile with no extensions.
Your documents are never stored anywhere but your own device. The app has no accounts, no cookies and no analytics or tracking code, and its security policy would block any. The only thing it saves is your light/dark theme choice, and closing the tab wipes your document from memory. Like any website, our host (Cloudflare) counts page visits and which country they come from, and we look at those totals to see where SafeID is used. That never includes your files or anything you type.