Strip Hidden EXIF From Scanned Paper IDs Before Emailing: Scanner Settings That Matter

When you scan a paper ID—like a driver’s license or passport—and email it, you might think you’re simply sending a picture. In reality, the file may carry hidden metadata (often called EXIF or document properties) that can reveal the scanner model, software versions, creation dates, and sometimes even the device owner name or location. This guide shows you the scanner settings that matter, how to remove hidden data before sending, and safer alternatives for sharing sensitive identification documents.

Why hidden metadata on scanned IDs is a problem

Hidden metadata can quietly increase your exposure in ways that aren’t obvious:

• Device and software fingerprints: Scanner model, firmware, and software versions may appear in file properties. Over time, this can help correlate documents to you or your workplace.
• Timestamps and workflow clues: Creation and modification dates can reveal when and how you handled a document, which may expose routines or timelines.
• Author fields and usernames: Some software embeds user or computer names that include your real name or email address.
• Embedded thumbnails and previews: Image containers can include small previews that remain even after edits, risking unredacted data leakage.
• Misuse and over-collection: Organizations that receive your file can ingest these metadata fields into their systems, increasing long-term exposure and potential breach impact.

Understand EXIF and other metadata in scans

Photos commonly include EXIF (exchangeable image file format) metadata such as camera model and GPS. Scanned images (TIFF, JPEG, PNG, HEIF) can also carry EXIF or XMP tags. PDFs rarely store EXIF, but they do include document info (Title, Author, Subject, Keywords), XMP metadata, and sometimes embedded thumbnails. Even office formats (DOCX, PPTX) store properties that can reveal identity and device details.

The key takeaway: both image files and PDFs can contain hidden data. Don’t assume “PDF is safe by default.”

The safest baseline: scan for a flat, simple file

Start by configuring your scanner or scanning app to minimize what gets embedded. Exact menus vary by device and software (Epson, Canon, Brother, HP, Fujitsu, Adobe, Preview, Windows Scan, mobile scanning apps), but the goals are the same.

Recommended scanner settings

• Format: Prefer PDF for multi-page IDs or TIFF/PNG for single-page images. Avoid JPEG if your workflow supports TIFF/PNG because JPEG adds compression artifacts and sometimes more metadata fields by default.
• Color mode: Use grayscale for most IDs. Only choose color if absolutely required. Color increases file size and may carry ICC profiles and extra data.
• Resolution (DPI): Use 300 dpi for legibility without oversharing micro-details. Avoid 600+ dpi unless asked; it captures unnecessary texture and increases risk if the file is misused.
• Compression: For PDFs, select lossless or high-quality settings and disable “optimize for web” features that might add thumbnails or extra layers.
• OCR (text recognition): Disable OCR when scanning IDs. OCR can create searchable layers that expose your name, ID number, and address to automated systems.
• Metadata options: If your scanner software offers “remove document info,” “clear metadata,” or “no creator/author,” enable it. Remove custom titles, authors, and keywords fields.
• PDF/A consideration: While PDF/A is archival-friendly, it can embed color profiles and XMP metadata. If you must use PDF/A, verify and clear metadata afterward.
• Duplex and auto-crop: Keep auto-crop; turn off features that add watermarks or annotations you don’t control.

Mobile scanning apps

If you must scan with a phone, choose an app that lets you:

• Export as PDF or PNG.
• Disable OCR and smart enhancements that add layers or watermarks.
• Remove location services permissions for the app so GPS data can’t embed.
• Clear document properties before saving or share via “Export without metadata” if offered.

How to check and remove metadata before emailing

Always verify the file you plan to send. Use built-in tools or trusted editors to inspect and strip metadata.

Check and remove metadata from images (JPEG, PNG, TIFF)

• Windows: Right-click the file → Properties → Details → “Remove Properties and Personal Information.” Choose “Create a copy with all possible properties removed.”
• macOS (Preview): Open the image → Tools → Show Inspector (i) → check the Info tabs. For location, choose Tools → Show Location Info if present. To remove, export via File → Export and uncheck “Include location information” if shown, or re-save in PNG/TIFF. For full control, use an image editor to strip metadata on export.
• Cross-platform tools: Many photo editors provide “Remove metadata” or “Strip EXIF” on export. Exporting to PNG often results in fewer fields than JPEG, but still verify.

Check and remove metadata from PDFs

• Windows (Edge/Reader): Basic viewers show limited info; for removal, re-print the PDF via “Microsoft Print to PDF,” then check Properties → Details on the new file. This often discards many fields but double-check afterward.
• macOS (Preview): Tools → Show Inspector (i) → More Info (circle i) → you’ll see Title, Author, Keywords. To remove, choose File → Export as PDF and leave those fields blank; verify afterward.
• PDF editors: Use “Remove document information,” “Sanitize,” or “Save as Optimized” options to strip XMP, thumbnails, and hidden content. Also flatten annotations to avoid embedded layers.

Flatten and sanitize

Flattening removes layers, annotations, and form fields that can carry extra data. Many PDF tools include a “Flatten” or “Sanitize” option. Use it before sending, especially if you edited or redacted the scan.

Redaction: do it right, or don’t do it at all

Covering text with a black rectangle or using a drawing tool is not safe—hidden layers and underlying text often remain. Use a proper redaction tool or permanently remove the content at the image level.

• Image method: Open the scan in a basic image editor, crop or paint over sensitive areas, and then export a new flattened image. Recheck metadata after export.
• PDF redaction tool: Use an application with a “Redact” function that deletes underlying content and creates a sanitized, flattened file.
• Verify after redaction: Try selecting or searching for the redacted text. If it appears in search, the redaction failed.

Safer emailing (and safer alternatives)

Even a clean file can be exposed in transit or in someone’s inbox. Use these steps to minimize risk when you must email a scanned ID—and consider better options when available.

Before you send

• Password-protect the file: Use a strong password and share it via a separate channel (text or phone). Avoid weak or reused passwords.
• Use a ZIP with encryption: If your tools support it, send the encrypted ZIP and the password separately.
• Prefer link-based secure portals: If the recipient offers a secure upload portal or verified request flow, use it instead of email attachments.
• Double-check the recipient: Confirm the exact email address. Autocomplete mistakes are common and costly.
• Minimal disclosure: Send only what’s requested. If they need proof of age or address, ask if partial redaction is acceptable.

When possible, avoid attachments altogether

• Use a verified document portal: Many banks, schools, and government agencies provide secure upload links or in-app capture. These often have stricter handling policies than email.
• Time-limited links: If you must cloud-share, use expiring links with no indexing and disable link previews if possible. Do not allow public sharing.
• In-person verification: If local, ask whether you can present the ID in person to avoid sending a copy.

Quick reference: minimal-risk scanning recipe

1. Set scanner to PDF (or PNG/TIFF for one page), grayscale, 300 dpi, OCR off, and no author/title.
2. Scan and inspect metadata (properties/info panel). Remove or clear fields.
3. If redaction is needed, use a proper redaction tool or flatten the image, then recheck.
4. Password-protect or encrypt the file or ZIP; share the password separately.
5. Confirm the recipient and use a secure portal when available.
6. Delete local copies you don’t need. Empty trash and check cloud sync folders.

What about scanner “security” features?

Some multifunction printers and business scanners offer options like “remove metadata,” “disable job log,” or “private print.” If you scan in an office or shared environment, ask your admin to:

• Disable automatic addition of usernames or device IDs to document properties.
• Clear device logs regularly and require PINs for stored jobs.
• Restrict scan-to-email address books that might retain personal info.
• Update firmware to reduce known information leaks or default identifiers.

After sending: monitor your identity footprint

Even with careful handling, copies of your ID can spread once shared: inbox archives, CRM systems, backups, and third-party processors all multiply risk. It’s smart to keep an eye on your financial and identity signals in case your documents surface where they shouldn’t. For ongoing visibility into credit-related changes and identity alerts, consider a dedicated monitoring service that helps you spot suspicious activity early. One option is outlined here: SmartCredit for privacy, credit monitoring, and identity protection.

Troubleshooting: common issues and fixes

• My PDF still shows Author/Title: Re-export via an editor with “Remove document information” or “Sanitize.” Confirm fields are blank in the Info panel.
• Search can still find redacted text: Redaction failed. Use a tool with a true redact function, or convert the page to a flattened image, then rebuild the PDF.
• EXIF remains in a JPEG: Re-save the image as PNG/TIFF via an editor that strips metadata on export, or use your OS’s “Remove Properties” feature first.
• The recipient demands color 600 dpi: Ask if 300 dpi grayscale is acceptable. If not, comply but sanitize metadata and consider password protection.
• My scanner auto-adds my name: Look for “Identity,” “Author,” or “User information” in the scanner app preferences and clear it. If the device embeds it at hardware level, switch software or post-process to remove.

Privacy-by-default habits

• Keep a clean template: Save scanner presets named “ID Minimal” with grayscale 300 dpi, OCR off, and blank metadata fields.
• Verify before sending: Make “open info panel” a mandatory step.
• Use least data needed: Send only the page or portion required; crop the rest.
• Purge leftovers: Delete drafts, thumbnails, and cloud-synced versions you don’t need.

Conclusion

Stripping hidden metadata from scanned IDs is simple once you know which settings matter: scan to a flat format, keep resolution and color modest, disable OCR, and clear document properties. Verify and sanitize before you send, prefer secure portals over attachments, and encrypt when email is unavoidable. With these habits, you reduce how much personal information rides along with your ID—and you lower the chance that a forgotten attachment or metadata field becomes tomorrow’s exposure.