Passports may soon become obsolete as facial recognition and smartphones take over

Bottom line: Travel documents are on the brink of a technological revolution as facial recognition systems become mainstream. But some countries are finding it tricky to strike a balance between convenience and privacy, as well as security and efficiency.

In the coming years, the traditional paper passport, a document that has been a cornerstone of international travel for over a century, may soon become obsolete. In its place, facial recognition technology and smartphones are poised to become the new standard for identity verification at airports worldwide.

This shift towards biometric identification is not a distant possibility but a rapidly approaching reality. Airports in numerous countries, including Finland, Canada, the Netherlands, the United Arab Emirates, the United Kingdom, Italy, the United States, and India, are already conducting trials of passport-free travel systems. Singapore, for example, allows its residents to enter and exit the country without physical passports, and is extending this convenience to departing foreign visitors.

The drive to streamline the travel experience is driving this trend. Athina Ioannou, a lecturer in business analytics at the University of Surrey, notes that the Covid-19 pandemic has accelerated the adoption of contactless travel technologies. “It’s probably going to become the mainstream way of traveling, as I understand, in the near future,” Ioannou told Wired.

At the heart of this technological shift is the concept of a Digital Travel Credential (DTC). Developed by the United Nations’ International Civil Aviation Organization (ICAO), the DTC system comprises two key components: a virtual element representing the information traditionally stored in passport chips, and a physical part stored on the traveler’s smartphone. These components are cryptographically linked to ensure authenticity and prevent forgery.

The implementation of DTC systems varies, with some approaches still requiring travelers to carry – but not necessarily present – their physical passports, while more advanced versions aim to eliminate the need for a physical passport entirely.

Early trials have shown promising results. In Finland, a small-scale DTC pilot conducted by border officials demonstrated that identity checks could be completed in just eight seconds, with technical processing taking only two seconds.

While the prospect of reduced airport queues is undoubtedly appealing, the transition to digital travel documents raises significant concerns. Privacy experts caution about the lack of transparency surrounding these technologies and the potential for data breaches and increased surveillance. The ICAO itself acknowledges risks such as “look-alike fraud,” criminal data collection, system outages, and the possibility of false rejections in facial recognition systems.

The development of verification systems by various companies worldwide adds another layer of complexity. “We don’t really know how secure these systems are,” said Udbhav Tiwari, director of global product policy at Mozilla. “The fact is that all of these companies develop these systems often do so in deeply proprietary manners.”

Adam Tsao, who leads digital identity efforts at the security company Entrust, told Wired that another concern is who will handle the data, including who can access it, for what reasons, and how much control they have over its use. Tsao advocates for a precise and controlled approach to data sharing in our increasingly digital world. He suggests that the ideal scenario would involve providing only the necessary information, for a limited time, to the appropriate parties and for specific purposes. However, Tsao acknowledges that achieving this level of precision in data management presents significant challenges.

Perhaps not surprisingly, the implementation of these systems has not been without controversy. In India, the Digi Yatra face-recognition boarding system has faced criticism over its introduction and enrollment processes. “The way that it’s happening in India is no longer voluntary, and it’s no longer something we can hold the government or anybody else accountable for,” said Disha Verma, from the Internet Freedom Foundation.

The Digi Yatra system has been operating in 24 airports around the country and may be opening up to foreign citizens in 2025. Meanwhile, the privacy and compliance issues the system has raised will only heighten as there are plans in India to roll out the identity technology to hotels and historical monuments.