# how to send my SS# securely **URL:** \ **Category:** Factual Questions\ **Created:** [November 5, 2013, 12:53am UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108 "2013-11-05T00:53:38Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![Animastryfe](https://avatars.discourse-cdn.com/v4/letter/a/8797f3/32.png) [@Animastryfe](https://boards.straightdope.com/u/Animastryfe)\ **Post date:** [November 6, 2013, 6:10pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/21 "2013-11-06T18:10:03Z")
> [@Doug\_K](#): > > The only thing I have with my SSN on it is my SS card which I do carry with me as I was specifically instructed to do when I first got it way back in 19 mumble mumble. Carrying your SS card does not constitute using it for identification. My social security card states “DO NOT CARRY THIS CARD WITH YOU”. However, I am not a US citizen, so my social security card may be different. ---
**Author:** ![chappachula](https://avatars.discourse-cdn.com/v4/letter/c/d2c977/32.png) [@chappachula](https://boards.straightdope.com/u/chappachula)\ **Post date:** [November 6, 2013, 6:41pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/22 "2013-11-06T18:41:14Z")
> [@](#): > > She will probably use a sticky note > [@Rachellelogram](#): > > This goes against every regulation out there for the handling of secure information. . Shred bins, you know? I don’t know about prisons, but here’s [what happened in the US Army](http://www.theguardian.com/world/2011/may/27/bradley-manning-wikileaks-mentally-fragile):, “the security was so lax that many of the 300 soldiers on the base had access to the computer room and passwords to access the intelligence computers were stuck on “sticky notes” on the laptop screens.” ---
**Author:** ![Ethilrist](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ethilrist/32/4604_2.png) [@Ethilrist](https://boards.straightdope.com/u/Ethilrist)\ **Post date:** [November 6, 2013, 9:07pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/23 "2013-11-06T21:07:01Z")
> [@Animastryfe](#): > > My social security card states “DO NOT CARRY THIS CARD WITH YOU”. However, I am not a US citizen, so my social security card may be different. Mine doesn’t. Then again, it was issued in 1976, and they may have changed the verbiage since then. ---
**Author:** ![Dickerman](https://avatars.discourse-cdn.com/v4/letter/d/8baadc/32.png) [@Dickerman](https://boards.straightdope.com/u/Dickerman)\ **Post date:** [November 6, 2013, 9:18pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/24 "2013-11-06T21:18:24Z")
> [@sailor](#): > > Quite the contrary. A PGP encrypted email is pretty much unbreakable while PDF and Word passwords have been broken. You can search for “password recovery tools”. If you set a document open password (as opposed to just one to restrict certain actions), it can be very difficult to crack, assuming a decent password strength. Acrobat/Reader 7+ support 128-bit AES and versions 9+ support 256-bit AES. ---
**Author:** ![Doug\_K](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Doug\_K](https://boards.straightdope.com/u/Doug_K)\ **Post date:** [November 6, 2013, 9:20pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/25 "2013-11-06T21:20:57Z")
> [@Animastryfe](#): > > My social security card states “DO NOT CARRY THIS CARD WITH YOU”. However, I am not a US citizen, so my social security card may be different. > [@Ethilrist](#): > > Mine doesn’t. Then again, it was issued in 1976, and they may have changed the verbiage since then. Mine doesn’t either. I also got mine around 1976. At the time you didn’t get one until you needed it, usually right before getting your first job. It doesn’t say on the card, but the letter with instructions that came with it specifically said to carry it always. And believe me, if I didn’t I probably would have lost it 35 years ago. ---
**Author:** ![Rachellelogram](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rachellelogram/32/8689_2.png) [@Rachellelogram](https://boards.straightdope.com/u/Rachellelogram)\ **Post date:** [November 6, 2013, 9:44pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/26 "2013-11-06T21:44:25Z")
> [@chappachula](#): > > I don’t know about prisons, but here’s [what happened in the US Army](http://www.theguardian.com/world/2011/may/27/bradley-manning-wikileaks-mentally-fragile):, > “the security was so lax that many of the 300 soldiers on the base had access to the computer room and passwords to access the intelligence computers were stuck on “sticky notes” on the laptop screens.” Writing down proprietary internal system information is not the same thing as carelessly discarding one’s customers personally-identifying information. In the first case, the only people who can access the information are ones with physical access to the facility. In the second case, it can be accessed by anyone with the time and determination to rifle a dumpster. Neither is a good security practice, but the latter demonstrates far more flagrant disregard for security protocols. ---
**Author:** ![drachillix](https://avatars.discourse-cdn.com/v4/letter/d/48db29/32.png) [@drachillix](https://boards.straightdope.com/u/drachillix)\ **Post date:** [November 6, 2013, 10:09pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/27 "2013-11-06T22:09:17Z")
Just write it out like five seven two, dash, two five, dash, nine zero zero six. Something skimming digitally for a SSN should blow right over that. Or mix it up a bit five 7 two, dash, two five, dash, 9 zero zero six. ---
**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\ **Post date:** [November 6, 2013, 10:54pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/28 "2013-11-06T22:54:48Z")
Presumably, writing it out is meant to foil computers… But computers have been smart enough to sniff that out for at least thirty or forty years. You don’t actually gain any security at all by doing that. ---
**Author:** ![chappachula](https://avatars.discourse-cdn.com/v4/letter/c/d2c977/32.png) [@chappachula](https://boards.straightdope.com/u/chappachula)\ **Post date:** [November 7, 2013, 6:33am UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/29 "2013-11-07T06:33:02Z")
> [@Chronos](#): > > Presumably, writing it out is meant to foil computers… But computers have been smart enough to sniff that out for at least thirty or forty years. You don’t actually gain any security at all by doing that. So how about writing it out as words, but mixed with other words that are not numbers? I assume that computers sniff for 9 digit numbers. So if I write " hello, Bob. the first part of my number is one-two-three and you’ll need to write that down before the next part, which is 45 and then add the ending, which is 6789" That provides your complete number as 123-45-6789, but would a hacked computer recognize it? But then, it won’t help the OP much, because the clerk at the prison probably won’t be willing to recognize it either 🙂 I’d be much more worried about the sticky note in the trash can, anyway. ---
**Author:** ![Snickers](https://avatars.discourse-cdn.com/v4/letter/s/5daacb/32.png) [@Snickers](https://boards.straightdope.com/u/Snickers)\ **Post date:** [November 7, 2013, 4:01pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/30 "2013-11-07T16:01:30Z")
> [@Ethilrist](#): > > Unless, of course, they use your SSN to do a quiet background check on you before you show up, in which case they’re likely to be interested in a completely different visit than you might have in mind once you show up and attempt to use your fraudulent SSN. Not that I’m paranoid or anything. This is almost exactly correct. I say “almost” because they don’t do it quietly; they’re very up-front about it. My experience is with the Federal prison system: in this system, inmates are allowed a list of approved visitors. The number of visitors allowed on this list varies from prison to prison. To get on the approved list, visitors must fill out a form providing name, address, SSN, and likely some other information that I can’t remember. The prison authorities use this info to run background checks on the visitor to approve or deny them. If you’re not on the approved list, you don’t get to visit that inmate. When I filled out the form, my husband and I were approved in short order. Funnily enough (well, funny to us), my mother- and father-in-law took longer and (I think) had to provide additional information to get approved. And they’ve been up to visit the guy, while SpouseO and I haven’t yet! ETA: All that obviously applies only if you’re going to a prison with the intent of visiting an inmate. If you’re going there for other reasons (contracting perhaps, or maybe a job interview or what have you), other procedures would apply. ---
**Author:** ![Ximenean](https://avatars.discourse-cdn.com/v4/letter/x/aca169/32.png) [@Ximenean](https://boards.straightdope.com/u/Ximenean)\ **Post date:** [November 7, 2013, 4:42pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/31 "2013-11-07T16:42:15Z")
> [@sailor](#): > > Quite the contrary. A PGP encrypted email is pretty much unbreakable while PDF and Word passwords have been broken. You can search for “password recovery tools”. I understand that the docx, xlsx etc. formats introduced in Office 2007 use much more secure encryption. Those tools you can get only work with the older doc, xls etc. ---
**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\ **Post date:** [November 7, 2013, 5:06pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/32 "2013-11-07T17:06:05Z")
For all those people suggesting encrypted PDFs, DOCs, etc… How do you propose to share the key securely? Hmm? ---
**Author:** ![gazpacho](https://avatars.discourse-cdn.com/v4/letter/g/6f9a4e/32.png) [@gazpacho](https://boards.straightdope.com/u/gazpacho)\ **Post date:** [November 7, 2013, 5:28pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/33 "2013-11-07T17:28:42Z")
> [@beowulff](#): > > For all those people suggesting encrypted PDFs, DOCs, etc… > How do you propose to share the key securely? > Hmm? Apparently you call the recipient up and tell them the password. ---
**Author:** ![Doug\_K](https://avatars.discourse-cdn.com/v4/letter/d/b5ac83/32.png) [@Doug\_K](https://boards.straightdope.com/u/Doug_K)\ **Post date:** [November 7, 2013, 5:55pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/34 "2013-11-07T17:55:20Z")
> [@beowulff](#): > > For all those people suggesting encrypted PDFs, DOCs, etc… > How do you propose to share the key securely? > Hmm? > [@gazpacho](#): > > Apparently you call the recipient up and tell them the password. They send you their [public key](http://en.wikipedia.org/wiki/Public-key_cryptography). You encrypt with their public key. They decrypt with their private key. ---
**Author:** ![gazpacho](https://avatars.discourse-cdn.com/v4/letter/g/6f9a4e/32.png) [@gazpacho](https://boards.straightdope.com/u/gazpacho)\ **Post date:** [November 7, 2013, 6:21pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/35 "2013-11-07T18:21:51Z")
> [@Doug\_K](#): > > They send you their [public key](http://en.wikipedia.org/wiki/Public-key_cryptography). You encrypt with their public key. They decrypt with their private key. The point I think beowulff is making is that putting a password in the document then sending that document to someone does not involve public key encryption and has the password distribution issues that public key cryptography was invented to solve. ---
**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\ **Post date:** [November 7, 2013, 6:29pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/36 "2013-11-07T18:29:41Z")
> [@gazpacho](#): > > The point I think beowulff is making is that putting a password in the document then sending that document to someone does not involve public key encryption and has the password distribution issues that public key cryptography was invented to solve. Perzactly. This thread started by some asking how to send an SS# securely. People suggested encrypting the SS# in a document, but nobody then explained how to send the key securely… Public Key encryption handles this very nicely, but I can absolutely guarantee that nobody a a prison has ever heard of the tools necessary to do this, and is never, not ever, going to jump through the hoops necessary to generate their key pair. ---
**Author:** ![Ximenean](https://avatars.discourse-cdn.com/v4/letter/x/aca169/32.png) [@Ximenean](https://boards.straightdope.com/u/Ximenean)\ **Post date:** [November 7, 2013, 8:03pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/37 "2013-11-07T20:03:43Z")
OK, how about [Diffie-Hellmann](http://en.wikipedia.org/wiki/Diffie_hellman#Description)? According to Wikipedia, you can do it by sending cans of paint to each other. Not really. It’s just an illustration of the idea, and a rather nice one. ---
**Author:** ![AaronX](https://avatars.discourse-cdn.com/v4/letter/a/7bcc69/32.png) [@AaronX](https://boards.straightdope.com/u/AaronX)\ **Post date:** [November 8, 2013, 1:06am UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/38 "2013-11-08T01:06:18Z")
> [@Chronos](#): > > Presumably, writing it out is meant to foil computers… But computers have been smart enough to sniff that out for at least thirty or forty years. You don’t actually gain any security at all by doing that. Yet they can’t recognize pen 1s v1@gr@. ---
**Author:** ![gonzoron](https://avatars.discourse-cdn.com/v4/letter/g/a6a055/32.png) [@gonzoron](https://boards.straightdope.com/u/gonzoron)\ **Post date:** [November 8, 2013, 10:21pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/39 "2013-11-08T22:21:17Z")
> [@cornopean](#): > > I have to send my SS# to a prison Have you tried framing your SSN for a crime it didn’t commit? ---
**Author:** ![DataX](https://avatars.discourse-cdn.com/v4/letter/d/e99b99/32.png) [@DataX](https://boards.straightdope.com/u/DataX)\ **Post date:** [November 8, 2013, 11:40pm UTC](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108/40 "2013-11-08T23:40:59Z")
It always cracks me up on these security threads… 1. As others have pointed out - no one at a prison is going to download and learn pgp. 2. Most hackers have better ways of stealing identities than looking through emails 3. Your SSN is on tons of documents stored unsecured around the world 4. Personally - I would just send it. Is there a risk - yes. You could send it as an image or use the text manipulation. This would get rid of 99.9% of anyone scanning for XXX-XX-XXXX. Yes they could write something to do OCR on an image - and something to recode four as 4. I can assure you this doesnt happen very often. 5. if I was real worried - I would call, but you still have the risk that it would end up on their system anyway. If they are going to store it electronically - in theory a hacker could get it. A hacker could also in theory sniff out the packets being sent. Most breaches (known anyway) - are done by breaking into systems and stealing data - not sniffing packets. The only people you hear regularly doing packet sniffing is NSA et al. [Previous page](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108.md?page=1) [Next page](https://boards.straightdope.com/t/how-to-send-my-ss-securely/673108.md?page=3)