Masked Aadhaar: Why You Should Share It (and How to Mask Without Uploading)

Think about how many copies of your Aadhaar card exist in the world right now. The hotel in Jaipur that photocopied it at check-in. The broker who took a photo of it for a rental deal that never happened. The courier company, the gym, the SIM card shop, the hostel warden. Each copy shows the same twelve digits — and unlike a password, you cannot change your Aadhaar number if one of those copies leaks.

That is exactly why UIDAI created the masked Aadhaar: a version of your card that hides the first eight digits and shows only the last four. It works as identity proof for most everyday situations, and it is what you should be handing over in nearly all of them. This guide explains what masked Aadhaar is, where it is and isn't accepted, why you should never upload your card to a random website to mask it — and how to do the whole thing in your browser, on your own device, with the free Mask Aadhaar Card tool on ToolSetu.

What "masked Aadhaar" actually means

A masked Aadhaar displays your number as XXXX XXXX 1234 — the first eight digits hidden, the last four visible. Your name, photo, address and the rest of the card stay as they are, so the document still identifies you. What it no longer does is hand the recipient your complete lifetime identifier.

UIDAI itself offers a masked version when you download your e-Aadhaar from the official portal — there is a checkbox for it — and has repeatedly advised residents to share the masked form wherever full Aadhaar is not specifically required. The masked card carries the same details and the same validity for ordinary identification; it simply keeps the full number out of circulation.

Where masked Aadhaar works — and where it won't

For most ID-proof situations, the masked version does the job:

Hotel and guest-house check-ins, and travel bookings that ask for ID.
Sharing ID with a landlord or broker for a rental — typically alongside a rent agreement.
Couriers, deliveries and pickups that want proof of identity.
Office and society visitor registers, gyms, clubs and co-working spaces.
Attaching identity proof to applications where the rules just say "ID proof" — for instance an RTI application.

Where you will still need the full, unmasked number: anything where Aadhaar is being verified or seeded rather than merely sighted. Opening a bank account with Aadhaar e-KYC, getting a new SIM through Aadhaar verification, linking Aadhaar to PAN, government subsidy and scheme enrolments — these run your number through the UIDAI system, and a masked copy cannot be authenticated. The rule of thumb is simple: if a clerk just needs to see who you are, masked is enough; if a system needs to verify the number, they will ask for the real thing through official channels.

The irony of "mask Aadhaar online" services

Search for masking tools and you will find dozens of sites and apps with the same pitch: upload your Aadhaar, we will hide the number for you. Read that again. To protect your most sensitive identity document, you are asked to transmit a clear, unmasked copy of it to a server you know nothing about — who runs it, where it is, how long they keep your file, or who else can see it. Even services that promise deletion are asking you to take that promise on faith, with the one document you can never reissue.

The ToolSetu masking tool takes the opposite approach: the card never leaves your device. The photo opens inside your own browser, the masking happens on a canvas element on the page, and the masked copy is saved straight back to your phone or computer. No upload, no server, no account. If you want to check that claim rather than trust it, load the page, switch on flight mode, and carry on — the tool keeps working with the internet off, because there is nothing it needs to send.

Why this masking can't be peeled off

There is a second, quieter problem with many masking methods: redaction that isn't really redaction. If you hide a number by drawing a black rectangle in a PDF annotation tool, or by placing a shape over it in a document editor, the digits are often still there underneath — the file simply has a black box layered on top, and anyone who opens it in the right editor can drag the box aside. Document-redaction failures of exactly this kind have embarrassed companies and courts alike.

The ToolSetu tool avoids the whole category of mistake by working in pixels, not layers. Your card photo is drawn onto a canvas, the black boxes are painted into the image itself, and what you download is a freshly exported picture in which the covered pixels simply no longer exist. There is no layer to remove and nothing underneath to recover. The masked file is safe to forward precisely because it contains less information, not hidden information.

How to mask your card, step by step

Get a clear image of your card. A straight-on phone photo or screenshot works. If what you have is the e-Aadhaar PDF, convert the page to an image first with the free PDF to JPG tool — that one also runs entirely in your browser — then continue here.
Drop the image into the masking tool. A black box appears automatically near where the number usually sits on the front of the card.
Position the box over the first eight digits. Drag it with a finger or mouse; drag the round corner handle to resize. Cover the first two groups of four completely and leave the last four digits visible.
Add a second box for the QR code if you wish. The large QR on the card encodes your demographic details, so many people prefer to hide it too when the recipient has no business scanning it. The "Add black box" button gives you as many boxes as you need — the address on the back of a card is another common candidate.
Download. Choose JPG or PNG and save. The file is named masked-… so you never confuse it with the original. If a portal has an upload size limit, run the masked copy through the image compressor — also fully in-browser.

Keep the masked copy in your phone's gallery or a notes app. The next time a hotel or broker asks for Aadhaar, you hand over the masked version without thinking about it — that is the habit worth building.

Good habits around Aadhaar sharing

Write the purpose on physical copies. When you must hand over a printout, write "For hotel check-in on [date] only" across it before signing. It makes reuse harder.
Prefer masked by default. Offer the masked copy first; let the rare organisation that genuinely needs the full number ask for it and explain why.
Use a Virtual ID when systems support it. UIDAI's VID is a temporary 16-digit stand-in for your Aadhaar number that you can regenerate at will — useful for authentications where you'd rather not quote the real number.
Check your authentication history occasionally. The UIDAI portal shows when and where your Aadhaar was authenticated. Unrecognised entries are worth following up.
Lock your biometrics on the UIDAI site or mAadhaar app if you don't use fingerprint authentication day to day; unlock takes a moment when you actually need it.

Questions people ask about masking

Is a masked Aadhaar legally valid as ID? For ordinary identification — sighting, not verification — yes, and UIDAI encourages exactly this. Processes that must authenticate your number against the Aadhaar database will require the full number through their own secure flow.
Why hide the first eight digits and not the last four? Convention, and a sensible one: the visible last four let an organisation match your card against records you've shared before, while the hidden eight stop anyone from reconstructing the full number.
Can the blacked-out digits be recovered from the downloaded file? No. The export is a new image with the black rectangles baked into the pixels — there is no layer beneath them. This is different from cover-up annotations in PDF editors, which can often be removed.
Does the tool work on a phone? Yes — the boxes are draggable by touch, and the whole flow is designed for the situation where the card photo is already on your phone.
What about the back of the card? The back carries your full address and a second QR. If the recipient only needs the front, share only the front; if both sides are needed, mask the number wherever it appears and consider boxing the QR too.

Conclusion

You cannot control every photocopy of your Aadhaar that already exists, but you decide what every future copy looks like. Make the masked version your default: it identifies you just as well, it reveals eight digits less, and producing one takes under a minute with the Mask Aadhaar Card tool — on your device, with nothing uploaded, and nothing underneath the black box to find.