Is it safe to upload a passport to a PDF website?
Only if the site processes the file in your browser, or states exactly where it is stored and for how long. Most sites upload it to a server, which means a copy of your identity document sits on their disk. For a passport, prefer a tool that never transmits the file.
What "upload" actually means
Your file leaves your device and is written to a server. From that point it is a copy, and copies are governed by someone else's policy: how long they keep it, whether backups outlive a deletion, which staff can open it, and which country the server is in.
For a train ticket that is fine. For a passport, a driving licence or a bank statement, that copy is enough to attempt identity fraud on its own.
The four questions to ask any PDF site
- Where is the file processed — in my browser, or on your server?
- Is it stored, even briefly, and for how long?
- Is it encrypted at rest, and who holds the key?
- Who can access it, and in which country is it held?
If a site cannot answer these four in plain language, treat it as "uploads and keeps".
Where the risk actually sits
The largest exposure is not a hack. It is retention. A tool that keeps files for 24 hours has a 24-hour window in which a misconfiguration, an over-broad staff account or a backup leak exposes every document that passed through that day.
The second largest is the file itself. A passport scan often carries the full name, date of birth, passport number, place of birth and a photograph, plus any visible stamps. That is a complete identity kit in one page.
The option that sends nothing
Cropping, merging, rotating and signing can all be done inside the browser tab. The file is read from local storage into memory, edited there, and written back out as a download. No network request carries the document.
That is what SignSwift does and the reason it is built the way it is. It is also why the tool works with the wifi off, which you can use as a test.
If you already uploaded one
Delete the file on the site if there is a delete button, and check what the retention policy says — deleting is often only a flag until a scheduled purge runs. If the site had no policy at all, assume the copy persists.
Then watch the ordinary things: credit reference alerts, unexpected post, and any account recovery that relies on the passport details. You cannot un-send a file, but you can notice the consequences early.
Is a browser-only tool completely risk-free?
No. The file is still on your device, and a shared or infected computer is its own risk. But there is no copy on a remote server, which removes the most common way identity documents leak.
Does cropping a passport hide the number?
Cropping changes what is visible, not what is stored. Text under the cropped edge can remain in the file and may be recoverable. For a document you are publishing, do not rely on crop.
Is uploading covered by GDPR consent?
Uploading is a transfer of personal data to a processor. The site must have a lawful basis and a processing agreement. A checkbox does not make a careless retention policy acceptable.
This page is general information, not advice for your document. The tools do what they say on their own pages, and every limit is printed there.