Work badges and ID lanyards in selfies

Updated 4 November 2026 · By the FirstHour team

What a badge can show

Badges differ from one workplace to the next. Depending on yours, a badge or lanyard card may show:

• your full name and your photo
• your employer's name and logo
• your job title or department
• a staff number
• a barcode, QR code or chip card

In a selfie, these sit close to the camera, so they can be easy to read.

Why it matters

The US cybersecurity agency CISA explains that in a social engineering attack, someone uses human interaction to get or compromise information about an organization. It says the attacker may claim to be a new employee, repair person or researcher, and may even offer credentials to support that identity. On a second page, CISA says that the more information malicious people have about you, the easier it is for them to take advantage of you, and it advises you to limit the amount of personal information you post.

CISA's pages don't mention badges. So we can't tell you how often a badge photo is misused. This is our advice: your name, employer and title together are what someone would need to sound believable, so share them on purpose, not by accident.

Check before you post

1. Ask your employer. Your workplace may have its own rules about badges, photos in the office and posting about work. They may be stricter than anything here. Follow it, and ask your manager or security team if you aren't sure.
2. Turn the badge around or tuck it in before you take the picture. That is the simplest fix.
3. Zoom in. Check the name, photo, staff number, and any barcode or QR code. A code can be read by a scanner even when you can't read it by eye, so treat it like text.
4. Cover what you don't need to show. Use solid boxes, not blur. Here's why a box is safer. Make each box bigger than what's under it.
5. Check the other people. A coworker's badge in the corner is their detail, not yours. Crop it out or cover it, or ask first.
6. Save a new copy and zoom in again. Look at every part of it, including the edges.
7. Remove hidden details. A photo can carry its location. Here's how to remove it.

Look at the background

The badge is rarely the only thing in the shot. Look for:

• Screens. Monitors, laptops and phones can show emails, names, customer details or an open system.
• Whiteboards and wall charts. Plans, names, numbers and passwords written on a board.
• Desks. Sticky notes, printed papers, folders and name plates.
• Doors and keypads. Room names, floor numbers and access panels.
• Windows. A street view or sign can show where the building is.

If you can't cover something, take the picture somewhere plainer, such as outside or against a blank wall. The same habit of looking at the whole picture applies to chat screenshots, and your camera roll in general.

How FirstHour helps

In Share, you choose a picture, check the boxes, and send a copy with the boxes burned in. The copy has no location or camera details, and your original isn't changed. Before sending, FirstHour reads the copy again and warns you if it can still read a name or number.

FirstHour suggests boxes for things like IDs, passports, card numbers, codes and account numbers. It is built to recognize identity documents, not work badges, so we can't promise it will suggest a box over your badge or its barcode. Plan to add your own: drag across the picture to add a box, then move or resize it. Cover all text adds boxes over the text it reads, and as far as we can tell it does not add boxes over barcodes or QR codes, so cover those yourself. Here are the steps.

It doesn't find faces, so it won't box your photo on a badge or a coworker's face. It doesn't know your employer's rules, and it can't remove a picture once you've posted it. Look over the whole picture yourself.

Questions

Sources

• Avoiding Social Engineering and Phishing Attacks, US Cybersecurity and Infrastructure Security Agency (CISA), read 4 November 2026
• Staying Safe on Social Networking Sites, CISA, read 4 November 2026