Passport Chip
A passport chip is the contactless integrated circuit embedded in an ePassport, usually in the cover or the data page. It stores a signed copy of the holder’s biographic details and facial image, and it will not hand any of it over until the reader proves it is physically holding the document.
| Also called | Contactless IC, eMRTD chip, biometric passport chip |
| Governing standard | ICAO Doc 9303 |
| Radio interface | ISO/IEC 14443 at 13.56 MHz |
| Read range | ~4 cm |
| Power source | Drawn from the reader’s field — no battery |
| Always stores | DG1 (the MRZ data) and DG2 (facial image) |
| Access control | BAC or PACE, keyed from the printed MRZ |
| Integrity proof | Document Security Object signed by the issuing state |
What the chip actually holds
The contents are organized into numbered data groups. Two are mandatory on every ICAO-compliant chip, and the rest are optional or restricted.
| Data group | Contents | Access |
|---|---|---|
| DG1 | The same data encoded in the printed MRZ | Standard (BAC/PACE) |
| DG2 | Facial image of the holder | Standard (BAC/PACE) |
| DG3 | Fingerprints | Restricted — requires Extended Access Control |
| DG4 | Iris images | Restricted — requires Extended Access Control |
| DG15 | Public key used for Active Authentication | Standard |
| SOD | Hashes of every data group, signed by the issuing state | Standard |
The Document Security Object is the piece that matters most. It holds a cryptographic hash of each data group and a signature from the issuing country’s certificate authority. Change one byte anywhere on the chip and the signature stops verifying.
Why the passport chip matters for identity verification
Everything printed on a document can be reproduced given enough skill and budget. Holograms get copied, substrates get sourced, fonts get matched. The chip changes the problem because it does not rely on appearance at all.
Reading it produces something a visual inspection never can: a cryptographic assertion, traceable to a government, that this specific data was issued and has not been altered since. That is a categorically different kind of evidence than “the hologram looks right.”
It also unlocks a three-way cross-check. The machine-readable zone, the printed visual zone, and the chip should all agree. When a forger alters the printed page of a genuine document — still one of the most common attacks — the chip keeps telling the truth, and the disagreement is the signal. This cross-matching is a core function of identity document verification.
How the reader gets in
The chip is deliberately hard to talk to. Before any data moves, the reader derives a session key from the document number, date of birth, and expiry date printed in the MRZ, using BAC or its successor PACE. Without the printed page, there is no key, and without the key the chip stays silent.
That is why an MRZ reader is a prerequisite rather than an alternative. The optical step gates the cryptographic one.
What a passport chip can’t do
It says nothing about the person. A perfect chip read confirms the credential. Whether the human presenting it is the person it was issued to is answered by liveness detection and matching a live selfie against the DG2 image.
Not every document has one. Chips are near-universal in passports issued since the mid-2000s, common in national eID cards, and patchy in driver’s licenses. An MRTD is not automatically an eMRTD.
A genuine chip can sit in a compromised document. Passive authentication proves lawful issuance. It cannot know the passport was reported stolen last week — that needs external data.
Chips fail. Physical damage, delamination, and antenna breaks all produce unreadable chips on otherwise valid passports. A flow that hard-fails on a failed chip read will reject genuine travelers, which is why it should degrade to document analysis rather than stop.
Frequently asked questions
Where is the chip in a passport?
Usually laminated into the front or back cover, or embedded in a polycarbonate data page. There is no consistent position across issuing countries, which is why readers rely on the radio field rather than a fixed physical location.
Can a passport chip be cloned?
The stored data can be copied, but a copy fails a complete verification. Active Authentication and Chip Authentication require the chip to prove it holds a private key that never leaves the hardware, so duplicated contents on different silicon fail the challenge.
What happens if the chip is damaged?
The passport remains valid as a travel document, but automated gates that depend on chip reading will reject it and fall back to manual inspection. Damage is common enough that verification systems should treat a failed read as a signal to degrade gracefully, not as fraud.
Can anyone read my passport chip?
Not without the printed data page. The session key is derived from the document number, date of birth, and expiry date in the MRZ, so a reader needs those values before the chip will respond at all. Fingerprint and iris data need a further layer of authorization on top.
