Boarding-Pass Privacy: Barcodes, Sharing and Disposal

A boarding pass is useful for a few hours, but some of the information on it can remain sensitive after you leave the aircraft. The sensible habit is not to keep every pass forever—it is to control who can see it and dispose of it thoughtfully.

That includes photographs. Covering the printed name while leaving the barcode visible may still expose travel information.

The barcode is information, not decoration

IATA’s bar-coded boarding-pass guide describes a machine-readable format for boarding-pass data. Depending on the airline and format, it can include details such as a passenger name, flight information and a booking reference.

The exact contents vary. A barcode should not be described as automatically containing every detail of your identity, payment card or entire travel history.

The practical point is simpler: information that looks unreadable to the eye may still be easy for software to interpret.

Before sharing a travel photograph

The easiest option is to leave the boarding pass and passport out of the image. A window view or a photograph of your bag can tell the travel story without including documents.

If you do share a document image, remove all personal details and the complete barcode or QR code with an opaque redaction, then check the exported copy. Cover booking references, frequent-flyer numbers and other identifiers as well as the name.

Do not assume that a light blur, a small sticker or a crop that leaves part of the code visible is enough.

Keep it only for a useful reason

You may need a pass temporarily for a connection, an expense claim or a missing-mile query. Check the relevant requirement and keep it securely for that purpose.

Once it is no longer needed, shred or thoroughly destroy a paper pass so that both printed identifiers and machine-readable codes are unreadable. Avoid leaving it in a seat pocket, hotel bin or public recycling basket intact.

For a digital pass, review where copies or screenshots are stored and who can access shared albums or backups.

If you have already posted one

Remove the image and check whether it was also shared elsewhere. Review the airline booking and account through the official app or website, particularly if a booking reference or account identifier was exposed.

If anything has changed or you are concerned about misuse, contact the airline through its published support channel. Do not follow a message claiming to “secure” the booking by asking for payment or login details.

You do not need to assume that exposure means an account has definitely been compromised. Respond to what was shared and what you observe.

Our airport Wi-Fi guide explains another part of protecting travel information. Carry-on packing includes a practical place for documents during the journey.

A boarding pass can be temporary without being carelessly public. A quick check before posting or discarding it is a small habit that travels well.

Encoded does not automatically mean encrypted

A boarding-pass barcode is an encoding of information, which is different from encryption. A machine-readable code represents data in a format software can interpret; it is not necessarily protected by a secret key. A code that looks meaningless to a person can therefore still contain readily readable travel details.

That does not justify the opposite exaggeration that every pass contains a home address, full payment information and immediate access to a bank account. The fields and the airline’s systems matter. The practical issue is that a name, booking reference or other identifier can be sensitive even when the document does not contain an entire personal profile.

For a scrapbook, decide which part of the pass holds the memory: perhaps the route, date or flight number. Keep those details in a separate note or a properly redacted copy instead of preserving unnecessary booking identifiers in an image shared with others. Check the exported file, since a redaction visible in an editing window is not the same as checking the final copy. There is no need to send the original pass to an unfamiliar barcode decoder to discover what it contains; that would introduce another copy of the document outside your control.