Masked NRIC is Not Private

Learn why masking all but the last 4 digits of an NRIC doesn't truly protect your privacy

Please enter 3 numbers followed by a letter

Possible Full NRIC Values

Based on your inputs, here are the possible complete NRIC values:

Copied!

Why This Matters

Many organizations mask NRICs by showing only the last 4 digits (e.g., S****123A), believing this protects your privacy. However, this approach is fundamentally flawed:

  • Predictable Format: Singapore NRICs follow a known pattern with a checksum algorithm
  • Limited Possibilities: With just the last 4 digits, there are only a few valid combinations
  • Additional Context: When combined with other information (like birth year), determining the full NRIC becomes trivial

This demonstration shows why organizations should avoid using masked NRICs as identifiers and consider more secure alternatives.