Is it safe to upload Aadhaar or PAN to online tools?
Uploading your Aadhaar or PAN to the government portal or bank that asked for it is expected. Uploading it to a random online compressor or converter first, just to get it under 200 KB, puts a copy on a server you know nothing about. Use masked Aadhaar where you can, black out what the form doesn’t need, and do the resizing on your own device.
Where the real risk is
Think about the usual routine. A portal for an exam, a passport, a loan or a job asks for your Aadhaar, PAN card, a bank statement or Form 16, with a file size limit. The scan from your phone is too big, so you search “compress PDF online”, pick the first result and upload it. Then you upload the result to the portal.
The portal is where the document was meant to go. The compressor in between is the part to think about. Most online converters process files on their own servers, so for a while your ID sits on a computer run by a company you picked from a search result. Many promise to delete files after an hour or a day, but you can’t check that from outside. Our guide on uploading PDFs to online converters explains what happens to the file in more detail.
Which documents need the most care
- Aadhaar card or e-Aadhaar. Number, name, date of birth, address, photo and a QR code with your details.
- PAN card. PAN, name, date of birth, photo and signature, which together are enough to start a lot of financial paperwork.
- Bank statements. Account number, IFSC, balance and every transaction, which shows who you pay, where you shop and your salary.
- Form 16 and salary slips. PAN, employer, salary breakdown and tax deducted.
- Passport, driving licence and voter ID. Usually photo, signature and address on one page.
A leaked password can be changed. A leaked Aadhaar scan can’t be taken back, so the safest copy is the one that never left your device.
Use masked Aadhaar when you can
UIDAI lets you download a masked Aadhaar, an e-Aadhaar where the first eight digits of the number are replaced with X’s and only the last four are visible. It still shows your name, photo and address. On the UIDAI website, choose Download Masked Aadhaar, which opens the download page on myAadhaar. Enter your Aadhaar number, enrolment ID or VID, verify with the OTP sent to your registered mobile, and choose the masked version before downloading.
The PDF is password-protected. The password is the first four letters of your name in capitals followed by your year of birth.
Some places need the full number, for example for certain KYC checks, so masked Aadhaar won’t always be accepted. For identity or address proof, it often is. UIDAI also offers Paperless Offline e-KYC, a digitally signed file you share with a code you choose; UIDAI says the Aadhaar number is not revealed and “only a reference ID is shared.”
What to redact before you upload
Ask what the receiver actually needs, and black out the rest:
- Bank statement for address or account proof: keep the page with your name, address and account number. Black out the transactions and balance, or delete those pages with Organize pages.
- Bank statement for income proof: the transactions are the point, but you can still remove unrelated pages.
- Aadhaar copy where masked isn’t available: black out the first eight digits yourself. Ask first whether the receiver accepts that.
- Any ID scan: crop out the other things in the photo, like the table, other cards and the back of a cheque.
Use a real redaction tool for PDFs. A black rectangle drawn on top in some editors leaves the text underneath selectable. Redact PDF turns each page you mark into an image with the boxes burned in, so the text under them is gone. Our redaction guide shows the steps.
How to compress and resize documents without uploading
InTheTab’s tools run in your browser tab. The file is read from your device, processed on your own processor and saved back to your device. Nothing on InTheTab can receive files: it is a static site with no upload endpoint and no accounts.
- PDF too big for the portal: Compress PDF. Our guide on reducing a PDF for online forms has tips for hitting a limit.
- Photo of a card too big: Compress image picks the quality for a target such as 50 KB or 100 KB.
- Exam photo and signature: Exam photo resizer has presets for SSC, UPSC, IBPS, NEET and more, at the exact pixels and KB range.
- Photo taken on your phone: Remove EXIF strips the GPS location and phone details before you send it.
- Several scans into one file: JPG to PDF or Merge PDF.
- Password-protected statement a portal rejects: Unlock PDF, with the password you already have.
The honest limits: your device does the work, so a large scanned PDF on an older phone can take a while and needs enough free memory. Keep the tab open until it finishes. InTheTab uses Google Analytics to count visits and which tool was used. It never receives your files, file names or anything you type into a tool, and the privacy policy lists what it does record.
How to check a site isn’t uploading your Aadhaar
Any site can say it works in your browser. You can check it on a computer in about a minute: open the browser’s developer tools, watch the Network tab while you use the tool, and look for a request that carries your file. Our guide on checking whether a site uploads your files shows each step. Try it with a harmless test file first, not your real Aadhaar.
Questions
Is masked Aadhaar accepted everywhere?
Not always. Some services need the full Aadhaar number, for example for certain KYC checks. Use masked Aadhaar whenever the form only needs proof of identity or address, and ask the receiver if you are unsure.
What is the password for the e-Aadhaar PDF?
UIDAI sets it as the first four letters of your name in capitals followed by your year of birth. You can open the file with that password and use Unlock PDF if a portal rejects password-protected files.
Is it safe to upload documents to DigiLocker or a government portal?
Those are the places the document is meant to go. The extra risk comes from the steps before, when a document is uploaded to an unknown converter or compressor just to change its size or format.
Does covering text with a black box in an image editor redact a PDF?
In a PDF, not always. A box drawn on top can leave the text underneath selectable. Use a tool that deletes the text under the box, such as Redact PDF, which turns each marked page into an image with the boxes burned in.