It’s now possible to add your passport or state-issued ID as a digital ID on your phone through apps like Google Wallet or Samsung Wallet on Android, and Apple Wallet on iPhones. That simplifies carrying and showing the ID, especially at airports when passing through TSA security checkpoints. Of course, TSA still advises you to bring your physical ID, just in case, but don’t worry, TSA’s digital ID system does actually seem to work pretty well. Moreover, the agency believes it’s more secure than using physical documents.
TSA says that this should “pave the way for a more seamless travel experience” and that it modernizes “checkpoint screening procedures and technologies” to better serve the ecosystem. While TSA believes that mobile driver’s licenses are “more secure” than their physical counterparts, because of their potential to be “counterfeit or fraudulent,” there is another aspect to this entire situation.
Having your phone out, with your hands full, open to your digital wallet, could potentially leave you vulnerable. It’s not difficult to imagine that dropping your phone or forgetting it somewhere could lead to some bad outcomes. Or, while your phone is unlocked and you’re busy putting items in bins and following instructions, that could open up your device and data to unauthorized access. But it’s also hard to imagine someone pickpocketing or swiping devices in the middle of a TSA security lane with federal officers present. Stranger things have happened, but most likely, the TSA is correct in this case, and digital IDs are fairly secure.
How to better protect your phone, digital ID, and data
The most important measure, if not already enabled, is to set a security pin, password, pattern, or biometric access lock. In fact, set a password or lock before you add your state ID to your Google Wallet or mobile wallet. You should also configure that lock to automatically enable after a short period — like five minutes — of inactivity to ensure it will lock after you scan it at a checkpoint if you’re too busy to remember. You’ll likely be focused on the security process, adding or removing items from bins, checking your bags, following individual instructions like removing hats, apparel, or belts, and so on. It’s easy to forget small steps, like locking your phone, while you’re being effectively bombarded with distractions.
Moreover, make sure to only use official apps or wallets (Google and Samsung Wallet) with verified support and keep them up-to-date. Finally, avoid sharing your digital ID information with unauthorized parties. Even at TSA checkpoints, you’ll be asked to scan a QR code in your digital wallet rather than revealing sensitive information. Additionally, don’t connect to public or unsecured Wi-Fi networks with the devices you store sensitive information on or use for banking.
As an aside, some advocates like the Center for Online Safety and Liberty are pushing for more substantial digital ID verification laws to protect consumers from the mishandling of digital identification databases and information. At the very least, it’s worth reviewing and considering the risks before using these relatively new technologies.
