It seems harmless. You’re excited, you’re traveling, you snap a pic of your boarding pass and throw it on Instagram or TikTok. But that little barcode holds way more than just your seat number.
One writer scanned a British Airways boarding pass someone had publicly posted and was able to pull up the person’s full name, phone number, email address, and frequent flyer membership number — plus the name and account number of another person on the same reservation. They were also granted access to change the details of the reservation.
Here’s why. The barcode on your boarding pass contains your confirmation code, also called a record locator. Most airlines let you log in and manage your booking using just that code plus your last name — both of which are visible on the pass itself. That means anyone with a basic barcode scanner app can get everything they need to access your flight.
Once they’re in, they can potentially change your seat, alter your booking details, or access personal details and frequent flyer information tied to your account. Some airlines even let someone claim unclaimed miles through a reservation code. Note: security practices vary by airline, and some have added extra verification steps — but it’s still not worth the risk.
So just don’t post it. If you want to share the travel vibe, crop out the barcode and any text showing your name or confirmation code. And when you’re done with your trip, don’t just toss your boarding pass in a public trash can either — same problem, physical version.