A clean photo of your passport or driver’s licence is the single most dangerous file on your phone, and landlords, rental desks, hiring platforms and marketplaces ask for one constantly. When their inbox or portal is breached, a clean scan is gold for a thief. BASTION prepares a copy that is bound to one purpose: it blacks out the high-risk data, stamps a heavy watermark tying it to the recipient and date, and flattens it with the metadata gone, all in this tab. Your document is never uploaded. Free, like every tool here.
A phone photo or scan of the front or back. JPEG, PNG, WebP or HEIC-exported image. Read straight from your device, nothing uploaded. Do one side at a time.
Straighten it if needed, drag black boxes over the barcode, the passport MRZ line and any long numbers, then fill in who it is for.
The 2D barcode on the back of a licence. That dense square or rectangle holds your full record in plain, unencrypted form, often more than the front of the card shows. A human reviewer never needs it. Black it out.
The passport MRZ. The two lines of monospaced text and chevrons at the bottom of the photo page encode your number, dates and a checksum that automated systems read in bulk. Cover it unless a specific process truly needs it.
Long numbers you were not asked for. Document, licence or social-insurance numbers. Most checks need your face, name, date of birth and expiry, and nothing else. Leave those, cover the rest.
A watermark makes a copy far less useful, not useless. A heavy, purpose-binding stamp across your document is a strong deterrent: a scan marked “provided to this landlord only, void for credit” is a red flag to any fraudster or creditor, and it is awkward to remove cleanly without visibly damaging the page. It is not unremovable, and we will not pretend it is. It removes the easy path.
The redactions are final. A blacked-out area is filled with solid black and the pixels under it are thrown away in the saved copy. That is real removal, not a layer someone can peel back.
It is flattened and the metadata is gone. The saved image is a single flat picture: no editable layers, and the original file’s hidden EXIF and GPS tags do not carry over, because it is re-encoded here from scratch.
Nothing leaves this tab. Your ID is decoded and edited on your device, and the armored copy is written back to your device. Open the privacy badge and watch: preparing a document adds nothing to what the page uploads.