You booked the trip. You’re at the gate with a coffee, that vacation buzz kicking in, and you pull out your phone to snap a picture of your boarding pass. Caption something like “Wheels up!” and post it. Feels harmless. It’s a piece of paper. Who cares, right?
Here’s the thing. That one photo is the single riskiest image you will share on your entire trip. Not the beach shot. Not the fancy dinner. The boarding pass. And once you understand what’s hiding on it, you’ll never post one again. Let’s get into why, plus a handful of other pre-vacation posts that quietly put you at risk.
The boarding pass photo is the one to skip
A boarding pass looks boring. Your name, a flight number, a seat, and that little barcode in the corner. But that barcode is the problem. It stores way more than what you can read with your eyes. We’re talking your full name, your frequent flyer number, your booking reference (airlines call it the PNR), and sometimes enough to poke around in your account.
One security researcher showed how a person grabbed a screenshot of a friend’s boarding pass off Facebook, ran the barcode through a free online reader, and pulled up the friend’s name, flyer number, and record locator. With that, they could get into the whole account, not just that one flight but future trips too. They could have changed seats, canceled flights, or reset the account PIN. All from a photo somebody posted to be fun.
Blurring the numbers does not save you
This is where people get tripped up. They think, “Fine, I’ll smudge out my name and the confirmation code before I post it.” Nice try, but the sensitive stuff lives in the barcode or QR code, and you didn’t blur that. Anybody can upload the picture to a free barcode reader and decode everything you thought you hid.
A UK law firm documented a case where a family had their seats and meals changed after sharing a selfie with the boarding pass visible. And one cybersecurity CEO put it perfectly: people assume a little bit of info isn’t enough to hurt them, but attackers don’t think that way. They stack small pieces together until they have a full picture of you. So no, cropping and blurring aren’t real protection. The safe move is to just not post it. Same goes for luggage tags, by the way. Those have your name and address on them.
This is not a rare, made-up threat
If you think this is paranoid tech talk, look at what happened with Frontier Airlines. A security disclosure in 2026 showed that someone with a copy of a passenger’s QR code could pull stored credit card numbers, a home address, TSA PreCheck number, and passport number from the account. This wasn’t a movie plot. It was a real hole in a real airline’s system, reported and left open for months.
One more habit to break while we’re here: don’t toss printed boarding passes in the hotel trash can. People have literally fished them out of garbage. Rip them up, or better yet, run them through a shredder when you get home. A cheap paper shredder at Walmart runs about $30 and pays for itself the first time it saves you a headache.
Real-time check-ins tell burglars your house is empty
The boarding pass is the worst single photo, but posting your location while you’re away is the most common mistake. Think about what a live check-in actually says. “I am 900 miles from my front door, and I’ll be gone for a week.” You basically hung a sign on your house.
A police detective compared posting your travel plans to handing your house keys to a thief. He’s not wrong. The FBI says a burglary happens in the U.S. roughly every 14 seconds, the average one costs the victim more than $2,200, and two-thirds happen when nobody’s home. One woman described how her friends check in at the airport, then the next airport, then their first restaurant, and she said you could almost track them step by step. That’s exactly what you don’t want.
Turn off geotags on your phone
Even when you’re not tagging a spot on purpose, your phone might be doing it for you. When you snap a picture, the file often records the exact GPS coordinates, the time, and sometimes your device info. That hidden data is called metadata, and someone who knows how to read it can pin your location down to the street.
Good news, you can shut this off in about a minute. On an iPhone, go to Settings, then Privacy & Security, then Location Services, then Camera, and set it to Never. On Android, open the Camera app settings and turn off location tags or “save location.” Here’s a catch worth knowing: apps handle this differently. Instagram strips most of that data off public posts, but it can add location back through those tag suggestions it loves to push. And texting apps like iMessage, WhatsApp, and Signal usually send your original photo with the GPS coordinates still baked in. So even a private text to a group chat can leak where you are.
Stop showing off the expensive stuff
Vacation is when people love to flex a little. New watch, designer shopping bags, a pile of nice jewelry laid out on the hotel bed. The problem is that thieves scroll social media looking for exactly this. It marks you as an easy target, both on the trip and back at your house.
Home security folks describe this as “passive surveillance.” Someone doesn’t have to follow you around. They just watch your feed and note the high-value items, your home layout, and your schedule. If you want to post pictures, aim the camera at the scenery, the food, the old buildings, the view out the plane window. Nobody breaks into a house over a photo of a taco.
Check the background before you hit share
You can skip the boarding pass and turn off geotags and still give yourself away with what’s behind you. A hotel logo on a keycard, a street sign, a landmark out the window, even a room number on a door. All of it helps someone figure out where you are.
The wildest example I’ve read about involved a family photo taken at an airfield. There was nothing obvious in the caption, but the reflection in a person’s sunglasses revealed the location and how they were traveling. You don’t need to be that paranoid, but take two seconds to scan the edges of your photo before posting. The details that give you away are usually hiding in plain sight.
A private account is not a force field
“But my account is private, so I’m fine.” I hear this a lot. Going private helps, and you should do it, but it’s not bulletproof. Any one of your followers can screenshot your post and pass it along. Your security is only as strong as your least trustworthy follower.
There’s also the retweet and share problem. Even if your own profile is locked down, a friend who reshares your vacation post just exposed it to their whole network, including people you’ve never met. A good habit is to go through your follower list once in a while and cut anyone you don’t actually know. If a stranger is watching your empty-house updates, that private label didn’t do much.
The simple fix: post it all when you get home
Here’s the part people don’t want to hear, and it’s the easiest advice of all. Wait. Take every photo you want on the trip, then post the highlight reel once you’re back home and standing in your own kitchen. Your friends will still love the pictures. They honestly won’t care that they’re a few days late.
A survey by an insurance company found that nearly a third of active social media users may put themselves at risk of a break-in by posting before or during a trip. Waiting removes almost all of that. No countdown posts about your departure date either. “Beach in 3 days!” tells a watcher exactly when your place goes empty.
Your quick pre-trip checklist
Run through this before you leave and you’ve handled the big stuff. First, no boarding pass photos, not even blurred ones. Second, turn off camera location tagging on your phone. Third, save the vacation posts for when you’re home. Fourth, don’t announce your travel dates ahead of time.
Then handle the house. Ask a neighbor to grab your mail and packages so they don’t pile up on the porch. A stack of boxes screams “empty house” just as loud as any post. Put a couple of lamps on cheap outlet timers (about $10 at Home Depot) so it looks like someone’s moving around at night. Don’t change your voicemail to say you’re away. Lock every door, window, and the garage entry. It’s not glamorous, but it’s the boring stuff that keeps your trip a good memory instead of a bad story. The vacation photos can wait. Your peace of mind can’t.
