Aadhaar Privacy & Security Architecture
UIDAI secures identity records using 2048-bit encryption, strict zero-profiling, and binary Yes/No authentication under the Aadhaar Act, 2016.
Key Protections That Guard Your Identity
1. How UIDAI Protects Your Identity Data
UIDAI is built around strict data privacy safeguards so your identity cannot be tracked, profiled, or leaked to third parties:
Zero Profiling Policy
UIDAI is legally barred from capturing sensitive personal data such as religion, caste, tribe, ethnicity, language, medical records, or income status. Profiling of individuals is technically impossible.
Certified End-to-End Encryption
Enrolment and update packets are captured exclusively using certified hardware and encrypted immediately at the terminal with 2048-bit encryption, preventing data interception in transit.
No Database Convergence
The Aadhaar database is standalone and never linked to external government or private databases. It exists solely to verify identity at the point of service with your consent.
2. Citizen Defense Tools: Adding Your Own Security Layer
UIDAI equips every resident with self-service tools accessible anytime on the myAadhaar portal and official mAadhaar app:
- Biometric Lock: Instantly lock your fingerprints and iris so no one can misuse AePS (Aadhaar Enabled Payment System) to debit your bank account.
- Masked Aadhaar: Download an official e-Aadhaar PDF that hides the first 8 digits (
XXXX-XXXX-1234), fully legal for hotels and travel. - 16-Digit Virtual ID (VID): A temporary, revocable 16-digit number that can be used everywhere instead of your real Aadhaar number.
- 6-Month Authentication History: View the exact timestamp and modality (OTP, biometric, demographic) of every authentication done with your Aadhaar.
3. Biometric Lock vs. Aadhaar Number Lock
Many residents confuse Biometric Lock with full Aadhaar Number Lock. Here is how they differ:
| Security Feature | Biometric Lock / Unlock | Aadhaar Number Lock / Unlock |
|---|---|---|
| What It Disables | Locks all fingerprint and iris scan verifications. | Locks all authentication modes (Biometrics, Demographics, AND OTP). |
| OTP Still Works? | YES. OTP based logins and online services continue functioning. | NO. Aadhaar cannot be used for any OTP transaction until unlocked. |
| How to Unlock | Instantly unlocked via OTP on myAadhaar or mAadhaar app. | Can ONLY be unlocked using your 16-digit Virtual ID (VID). |
| Best Used For | Everyday protection against fingerprint skimming at POS machines. | Long-term maximum lockdown when you are not using Aadhaar services. |
4. Scams, Phishing & Fraud Defense
Protect yourself against emerging digital identity scams with these fundamental rules:
- Your OTP Is Confidential: Never share an Aadhaar OTP over phone calls or SMS. UIDAI, banks, and police officials will NEVER call you demanding an OTP.
- Beware of Remote "Aadhaar Update" Links: Fraudsters send WhatsApp messages or SMS claiming your Aadhaar is suspended and asking you to click an APK file or link. Mobile updates can only be done via official mAadhaar or an authorized centre.
- Cross-Mark Photocopies: When sharing paper copies of Aadhaar, write across the document in ink: "Used only for [purpose] on [date]" to prevent reuse.
- Report Unauthorized Transactions Immediately: Call UIDAI helpline 1947 or the National Cyber Crime Reporting Portal at 1930 (cybercrime.gov.in).
Masked Aadhaar is Legally Valid Everywhere
Hotels, airlines, and employers must accept Masked Aadhaar (showing only last 4 digits). You are never legally required to share unmasked copies for routine ID checks.
Lock Your Biometrics to Prevent Fraud
The single most effective defense against unauthorized AePS cash withdrawals. Lock your fingerprints in 30 seconds and temporarily unlock only when needed.