Why Your Closed Passport Cannot Be Skimmed by Remote RFID Readers

You are standing in the security line at Charles de Gaulle, clutching a leather wallet lined with a metallic mesh designed to block radio waves. You bought it because the idea of a digital pickpocket vacuuming up your identity from across the terminal is terrifying.

But that metallic mesh is solving a problem that international border authorities engineered out of existence two decades ago. Your passport’s internal radio chip is cryptographically locked, and it physically cannot transmit your data until a scanner optically reads the printed text on the photo page.[1]

A closed passport is a dead passport. The system relies on a mechanism called Basic Access Control, which turns the physical ink inside your document into a mandatory digital key, ensuring that no one can read the chip without first opening the book.[1][2]

The Hidden Radio Inside

Since 2006, the United States and more than 150 other nations have issued biometric passports, identifiable by the small rectangular camera logo stamped in gold foil on the front cover. Inside the back cover sits a microscopic radio-frequency identification (RFID) chip and a copper antenna.[2]

That chip holds a digital replica of your photo page, including your name, date of birth, nationality, and a high-resolution biometric image of your face. It operates on the ISO/IEC 14443 standard, the same near-field communication technology that powers tap-to-pay credit cards and hotel room keys.[1][2]

"The inclusion of a wireless chip immediately sparked fears of remote skimming, where an attacker with a concealed reader could harvest identities in a crowded space," explains Bruce Schneier, a security technologist and lecturer at the Harvard Kennedy School.

Those fears spawned an entire industry of RFID-blocking travel accessories, from shielded money belts to specialized aluminum sleeves. Yet, the engineers who designed the global passport standard anticipated the drive-by skimming threat long before the first biometric document rolled off the printing presses.[4]

Why the Printed Text Matters

The defense mechanism lives at the very bottom of your passport’s photo page, in the two lines of dense, monospaced text filled with chevron characters. This is the Machine-Readable Zone, or MRZ, a format standardized by the International Civil Aviation Organization (ICAO) in Document 9303.[1]

When you hand your passport to a border agent, or place it face-down on an automated e-gate scanner, the machine takes a high-contrast photograph of those two lines. Optical character recognition software instantly translates the printed ink into a string of exactly 72 characters.[1][2]

The system extracts three specific pieces of information from that string: your passport number, your date of birth, and the document’s expiration date. It then runs those three data points, along with their corresponding mathematical check digits, through a cryptographic hashing algorithm.[1][4]

"The resulting hash forms a unique, symmetrical session key," notes a 2024 technical white paper from the Thales Group, a major manufacturer of biometric travel documents. "The chip will silently ignore any radio request that is not encrypted with this specific, optically derived key."[2]

This protocol, known as Basic Access Control (BAC), creates a physical prerequisite for a digital transaction. If an attacker cannot see the inside of your passport with their own eyes or a camera, they cannot guess the password required to wake up the radio chip.[1][2]

The Physics of Drive-By Theft

Even if a digital pickpocket managed to learn your passport number and expiration date, the physics of near-field communication make a covert attack nearly impossible. The copper antenna inside the passport cover is entirely passive, meaning it contains no battery.[3]

To power up, the chip must harvest electromagnetic energy broadcast by the scanner itself. Under the ISO/IEC 14443 standard, this inductive coupling requires the passport to be within 10 centimeters of the reader, and the connection drops the moment the document moves outside that narrow field.[2]

A pedestrian walking through an airport terminal at a standard pace of 1.4 meters per second remains inside a 10-centimeter read zone for less than 0.14 seconds. That physical window is too brief for a scanner to power the chip, negotiate the cryptographic handshake, and download the biometric payload.[3]

"The timing constraints of passive RFID systems are absolute," states a 2025 security bulletin from the Federal Office for Information Security (BSI) in Germany. "A successful read requires a sustained, stable electromagnetic field, which cannot be achieved while the target is in motion."

This means the classic skimming scenario—a thief bumping into your pocket on a crowded subway to steal your identity—is a mathematical and physical fiction. The chip simply powers down before the transaction can complete.

Upgrading the Digital Handshake

While Basic Access Control solved the skimming problem, cryptographers eventually realized that the entropy of the MRZ data was relatively low. Because birth dates and expiration dates follow predictable patterns, a determined attacker who intercepted the radio waves during a legitimate border check could theoretically crack the key later.[4]

To close this eavesdropping loophole, the ICAO introduced a stronger protocol called Password Authenticated Connection Establishment (PACE). First deployed by European nations in 2014 and adopted globally over the last decade, PACE replaces the static MRZ key with an asymmetric, randomized exchange.[1]

Under PACE, the optical scanner still reads the printed text to prove physical possession of the document. However, instead of using that text directly as the encryption key, the scanner and the chip use it to authenticate a brand-new, single-use cryptographic tunnel.

"PACE ensures that even if an attacker records the entire radio transmission between the passport and the legitimate e-gate, they cannot decrypt the biometric data," according to the National Institute of Standards and Technology (NIST) guidelines on ePassport security.

The new protocol makes the radio transmission mathematically useless to anyone listening in, while preserving the core physical safeguard. The book must still be open, and the text must still be read, before the chip will say a word.[1][4]

Rethinking Travel Security

Despite these overlapping layers of cryptographic armor, the market for RFID-blocking travel gear continues to grow, driven by a fundamental misunderstanding of how modern border security actually functions. Travelers spend millions of dollars annually on shielded wallets to protect a document that already protects itself.

The only time your passport is genuinely transmitting data is when it is lying open on a glass scanner, bathed in the electromagnetic field of a legitimate border control terminal. At that exact moment, an RFID-blocking sleeve is sitting empty in your pocket, providing zero protection.[3]

If you want to protect your identity while traveling, security experts suggest focusing on the mundane vulnerabilities rather than the cinematic ones. Guard your physical document against loss or theft, and be wary of handing it over as collateral to unregulated scooter rental shops or independent hotels.[4]

The ink on the photo page is far more valuable to a modern identity thief than the encrypted data on the radio chip. A clear smartphone photograph of your open passport provides all the information necessary to open fraudulent accounts or bypass basic identity verification checks.[3][4]

So, leave the metallic mesh wallet at home, or use it to organize your receipts. The engineers who built the global travel system already locked the digital door, and they printed the only key on the inside of the book.[3]