SafeID.app

Zero-upload identity protection

Share your ID. Not your identity.

Black out passport numbers, MRZ codes and bank balances, stamp every copy with a forensic watermark, and strip hidden GPS data. Everything runs on your device. Your document is never uploaded.

Drop your passport or ID here

PNG, JPG, WebP or PDF. Add front and back as separate pages.

Opened locally. Your file never leaves this device.

How SafeID keeps you safe

01

Opens on your device

Your browser decodes the file locally. The page's security policy forbids it from opening any network connection, so even a bug couldn't upload your data.

02

Redact & watermark

One-click presets cover the MRZ, the document number and your SSN. A diagonal lattice watermark names the recipient and date, so a leaked copy can't be reused anywhere else.

03

Burned into pixels

On export, every page is rebuilt from flattened pixels. There are no hidden text layers or removable annotations, and no EXIF or GPS data. There is nothing underneath to peel away in Acrobat.

Why not just blur or pixelate the number?

Blur and pixelation are reversible. Researchers have recovered text from both, and AI makes it easier every year. SafeID only uses 100% opaque black fills written straight into the image data.

Can someone remove the black boxes in Acrobat or Preview?

No. Many PDF tools only draw a box on top of the page, and the original text stays underneath. SafeID renders every page to pixels, paints the redactions into those pixels and builds a brand-new PDF from the flattened images. The original content is simply not in the file.

What is the MRZ and why hide it?

The Machine Readable Zone is the two lines of <<< text at the bottom of your passport. It encodes your name, passport number, nationality, date of birth and expiry, with checksums. A clear photo of it is exactly what a forger needs.

How can I be sure nothing is uploaded?

Don't take our word for it. Click Verify in DevTools at the top of the page. It shows the connect-src 'none' policy your browser enforces and lets you run a live test that tries to connect out and gets blocked. You can also load the page, switch on airplane mode, and use it normally.

Can browser extensions see my documents?

They can. An extension you've allowed to "read and change data on websites" can see anything on screen, including a passport you open here, and no website can block that. SafeID's security policy stops the page from uploading your data, not extensions you've installed. SafeID watches for extensions changing the page and warns you when it spots one, but an extension that only reads leaves no trace. For passports and bank statements, open SafeID in a private or incognito window, where extensions are usually switched off, or use a browser profile with no extensions.

Does SafeID store anything?

Your documents are never stored anywhere but your own device. The app has no accounts, no cookies and no analytics or tracking code, and its security policy would block any. The only thing it saves is your light/dark theme choice, and closing the tab wipes your document from memory. Like any website, our host (Cloudflare) counts page visits and which country they come from, and we look at those totals to see where SafeID is used. That never includes your files or anything you type.