Aadhaar Safety: Masked Aadhaar, Biometric Lock and Sensible Sharing Rules
11 min read Aadhaar is used everywhere, so careless sharing can create risk. Learn what a masked Aadhaar is, how to lock your biometrics, and simple rules for who may receive a copy. September 13, 2026 05:47 By Disha Varia, Guj Times
Many of us have given a photocopy of our Aadhaar card to a hotel, a mobile shop, a gym or a school without thinking about it. Every copy that is lying in a drawer or a computer is a small risk. The good news is that UIDAI, the authority that issues Aadhaar, offers options that let you share less, and protect more. This guide explains them in simple words. Features and names can change, so confirm the steps on the official UIDAI website (uidai.gov.in) or the myAadhaar portal.
1. Use a masked Aadhaar when you can
A masked Aadhaar is a version of your card in which the first eight digits of the number are hidden and only the last four are visible. It is meant for situations where the other party does not need your full number. You can download it from the official myAadhaar portal after verifying with an OTP sent to your registered mobile number. Ask the organisation whether a masked copy is accepted, since some purposes do legally require the full number.
2. Know about the Virtual ID
A Virtual ID (VID) is a temporary 16-digit number linked to your Aadhaar. Where it is accepted, you can use it instead of sharing your actual Aadhaar number, and you can generate a new one when you want. It is another way to limit how often your real number travels.
3. Lock your biometrics
You can lock your fingerprint and iris data through the official portal or the official mAadhaar app. When locked, your biometrics cannot be used for authentication until you unlock them temporarily. It is useful if you do not use biometric authentication often. Remember to unlock before you need it, and lock again afterwards.
4. Keep your mobile number updated
The OTP for many Aadhaar services goes to your registered mobile number. If you changed numbers and never updated it, you may be locked out of services, and an old number that was reissued to someone else can create confusion. Visit an Aadhaar centre or follow the official process to update it.
5. Sharing rules that make sense
- Share a copy only with organisations that are required to ask for it, and ask why they need it.
- Write the purpose and date on a photocopy, for example "For SIM card purchase, 14 Oct 2026", so that it cannot be reused for something else.
- Prefer masked Aadhaar or digital verification via DigiLocker over a paper photocopy.
- Do not post your Aadhaar on social media or send it through chat groups.
- Do not share the OTP that you receive for Aadhaar with anyone.
6. Check where your Aadhaar has been used
The myAadhaar portal lets you see your authentication history, so you can check when and where your Aadhaar has been used for verification. If you see something you do not recognise, follow the portal's steps to report it.
7. Watch out for fake help
Scammers call pretending to help you "update" or "link" your Aadhaar, and ask for an OTP. Use only the official website or app, and type the address yourself. For more such tricks, see our guide on phishing messages.
Related checks
You can also check which SIM cards are registered against your ID with the steps in our Sanchar Saathi guide, and keep an eye on government apps you actually use.
Quick answers
Is a masked Aadhaar accepted everywhere? No. Some services legally need the full number, so ask before you decide.
Does locking biometrics affect my Aadhaar card? It only blocks biometric authentication. The Aadhaar number remains valid, and you can unlock when needed.
A simple rule for photocopies
Whenever you give a copy of your Aadhaar, write the purpose and date on it and, where accepted, give a masked copy. This makes it harder to use the same copy for something else. Never post a photo of your Aadhaar on social media.
When biometric lock helps
Biometric lock stops others from using your fingerprints or iris through Aadhaar authentication until you unlock it again. You can lock it when you do not need it and unlock it temporarily when needed. Use only the official site or app for this, and check the current steps there because menus change.
If you suspect misuse
Check your authentication history on the official portal and look for uses that you do not recognise. If you see one, contact the official helpline listed on the UIDAI website and keep notes. Do not trust people who phone you and offer to fix Aadhaar problems for money.
Masked Aadhaar and Virtual ID in plain words
A masked Aadhaar shows only the last four digits of your number and hides the first eight. You can download it from the official UIDAI website or app, and it is accepted by many organisations that only need to identify you. A Virtual ID is a temporary 16-digit number that you can generate and use in place of your Aadhaar number for some services. You can create a new one whenever you want, which makes misuse harder. Neither is required by every organisation, so ask what is accepted before you hand over a document.
Downloading your e-Aadhaar safely
Download it only from the official UIDAI site or app, using your own phone. The PDF is protected by a password, which is usually made up of parts of your name and year of birth, and the exact rule is shown on the download page. Do not download it in a cyber cafe if you can avoid it. If you must, delete the file and empty the recycle bin and the downloads folder before you leave, and do not allow the shop to keep a copy.
Biometric lock and authentication history
Locking your biometrics means that nobody can use your fingerprint or iris data for Aadhaar authentication until you unlock it. You can unlock it for a short time when you need it, for example for a bank KYC, and lock it again. You can also check your authentication history on the official portal to see where your Aadhaar was used, along with the date and time. If you see a use that you do not recognise, note it down and contact the official helpline listed on the UIDAI website.
Three real-life situations
A shop asks for a photocopy for a SIM or a loan. Ask which law or rule requires it, give only what the rule needs, write the purpose and date across the copy, and keep the receipt. Where possible, use a masked copy.
A caller says your Aadhaar is "blocked" or "linked to illegal activity". This is a pressure tactic. UIDAI does not call people to threaten them. Hang up, and do not share OTPs or install any app.
A website offers "Aadhaar corrections in minutes for a fee". Updates are done through the official portal or authorised centres. Do not share your OTP with agents who promise a shortcut.
Good habits that cost nothing
- Never post an image of your Aadhaar on social media or in public groups.
- Keep your mobile number linked and updated, because OTP-based services depend on it.
- Review your authentication history every few months.
- Teach elders to give copies only to known institutions.
Rules and menu names on the official portals can change, so follow the current instructions on the UIDAI website or app, and call the helpline 1947 if you are unsure.
User Comments (0)
Apps to explore
