A resume is meant to explain your qualifications, but it can also become a compact identity file. A copy may contain your name, personal email, phone number, home address, profile links, employment history, and education in one place. That does not mean every resume is unsafe. It means the copy you send should match the audience receiving it.
Use a different privacy standard for each destination
| Destination | Usually keep | Remove or reconsider |
|---|---|---|
| Verified employer | Name, professional email, phone, city/state, relevant profile | Full address, sensitive identifiers, unrelated personal details |
| Open web or public portfolio | Skills, experience, education; possibly a dedicated contact channel | Home address, personal phone/email, identity numbers, unnecessary links |
| Anonymous feedback | Role descriptions, achievements, skills, generalized location | Name, contact details, profile URLs, addresses, references, identifying metadata |
Information that should never appear
Social Security and government ID numbers
The Federal Trade Commission advises job seekers not to put Social Security or banking information on an application or resume. Requests for this information before an interview are also a warning sign. Background-check and payroll processes happen later and should include clear notice, authorization, and a verified employer.
Bank, card, or payment information
A resume does not require an account number, routing number, card number, payment-app login, cryptocurrency address, or payroll form. A request to add these details to a resume is not a normal hiring step.
Date of birth
Your age is not a qualification field. A full birth date is a valuable identity attribute and does not belong in a resume header, personal-details section, or filename.
Information to minimize
Home address
A full street address usually adds little hiring value. City and state—or a broader metro area—can communicate location without publishing where you live. If a verified employer eventually needs an address for formal records, provide it through the employer’s secure process rather than the resume itself.
Email and phone number
For a direct application, use a dedicated professional email address and a phone number you are comfortable giving to a verified employer. If the copy will be indexed by search engines, posted to a forum, or shared in a large group, remove those details or use a controlled contact form.
Profile links and usernames
LinkedIn, GitHub, and portfolio links can strengthen a private application. In an anonymous review, they can immediately reveal your identity. Remove the visible URL and check whether link metadata remains in the document.
References and other people's details
Do not publish a reference’s phone number or email in a broadly shared resume. Provide references separately after the employer and opportunity have been verified and after the reference has agreed.
Scan a resume with ResumeShield →Choose a sharing mode, review explainable findings, and create a redacted TXT copy in your browser.Before you share: a five-step check
- Confirm who will receive the resume and whether the employer is genuine.
- Create a copy specifically for that destination instead of reusing one master file everywhere.
- Remove sensitive identifiers and reduce location details.
- Check headers, footers, hyperlinks, comments, filenames, and document properties for hidden identifying details.
- Open the final copy yourself and confirm that every redaction is permanent and the document still makes sense.
What an automated scanner can and cannot do
Pattern matching can recognize familiar formats such as email addresses, phone numbers, labeled dates of birth, and many street addresses. It may miss uncommon formatting, unlabeled identifiers, images, text embedded in a PDF, or personal information that only a human would understand. ResumeShield therefore treats its result as a first review, not a safety certification.
What if you already shared too much?
Ask the recipient to delete the copy and send a corrected version. If you exposed an account number, contact the financial institution. If you exposed a Social Security number or government ID, use the recovery steps at IdentityTheft.gov and consider the appropriate fraud alerts or credit freezes. Preserve suspicious messages and report attempted job fraud to the FTC.
Sources
- FTC: Employer Background Checks and Your Rights
- FTC: Job scammers are looking to hire you
- NIST: Personally Identifiable Information
- IdentityTheft.gov: Information Exposed
Sources accessed August 17, 2026. OfferSentry summarizes them in original language.