Are NFC Name Cards Secure? What the Chip Stores and What It Doesn't
By NFC Name Cards Editorial Team | Published | Guides
An NFC name card stores a web link, not your personal data. This guide explains what the chip holds, who can read it, how write-locking works and how to control what your profile shows.
NFC name cards are low-risk because the chip stores a web link, not your personal details. Anyone who taps the card sees the same profile they would see by typing that address. Your name, number and email live on the profile, which you control: you decide what it shows, and you can edit or remove details at any time.
This guide explains what the chip holds, who can read it, what write-locking does and how to keep your profile under your control. For the basics of how the technology works, see our pillar guide to NFC name cards.
What the chip stores
The chip in an NFC name card is a small passive tag with a limited amount of memory. On a name card it holds a short record, normally a single URL. When a phone reads the card, it receives that URL and opens it in the browser.
The chip does not store:
- your contact details, unless someone deliberately writes them onto the chip;
- any payment or bank information;
- passwords, files or anything from your phone;
- a record of who tapped it.
The chip on our cards links to your online profile. Your details sit on that profile, not on the card.
What happens when someone taps your card
- Their phone powers the chip for a fraction of a second.
- The chip sends back its link.
- Their phone opens the link in the browser.
- Your profile loads, showing whatever you have chosen to publish.
It is the same as handing someone a card with a web address printed on it. The person tapping sees your public profile and nothing more. Tapping your card gives them no access to your phone.
Can someone read the card without me knowing?
NFC only works over a few centimetres, so the phone has to be almost touching the card. Reading it from a distance is not practical in everyday situations.
Even if someone did read it, they would only get the link to a profile you have already chosen to make public. The printed QR code on the card holds the same link and can be scanned by anyone who can see the card, which is exactly what it is for.
Can someone change what my card does?
NFC tags can be rewritten unless they are locked. Most NFC tags used for name cards, such as the NTAG21x family, support a permanent write-lock. Once locked, the stored link cannot be changed by anyone, including the owner.
There is a trade-off:
- Unlocked: you, or anyone with an NFC writing app and the card in hand, could rewrite the link. That is useful if you ever want the card to point somewhere else, and our support team can explain how.
- Locked: nobody can change the link, but neither can you.
In practice, rewriting needs the card physically held against a phone running a writing app, so the risk is mostly from a lost or borrowed card. If this matters to you, ask us before ordering whether your card will be supplied locked or unlocked, or how to lock it yourself.
Because the chip points to a profile you edit online, you rarely need to rewrite the chip at all. Changing your details happens on the profile.
Keeping your profile private and up to date
The profile is where privacy really matters, because that is where your details live. Good practice:
- Publish only what you want strangers to see. A work email and phone number are usually enough. Leave out your home address and personal numbers.
- Use the visibility controls. Profile plans that include them let you choose which sections are shown and in what order.
- Use password protection where it suits. Some profile plans include password protection, useful for sections such as documents you only want certain people to open. The plans and their features are listed on the product page.
- Update when things change. If you leave a job or change your number, edit the profile. Every card you have handed out then shows the new details.
- If you lose a card, you can change or remove details on the profile straight away, so the lost card no longer shows them.
NFC name cards and contactless payments
People sometimes worry that an NFC card could interfere with bank cards or phones used for payment. The card is a passive tag that only sends a link. It cannot take a payment, read a bank card or access a phone's wallet. If a card wallet holds several NFC items, a payment terminal may simply struggle to pick one, which is a nuisance rather than a security risk.
A simple checklist
- Know what your card links to, and open it yourself to check.
- Review your profile and remove anything you would not print on a paper card.
- Decide whether you want the chip locked, and ask before ordering if unsure.
- Keep the card with your other cards rather than leaving it lying around.
- If you lose a card, update your profile.
Frequently asked questions
Is my personal data stored on the chip?
No. The chip on our cards stores a link to your profile. Your details are on the profile, which you can change or remove at any time.
Can someone hack my phone by tapping my card?
No. The card is a passive tag that only sends a web link. It cannot access your phone or theirs.
Can someone copy my NFC name card?
Someone could copy the link, but that is the same link printed in your QR code and shared every time you hand out the card. It only leads to your public profile.
What if I lose my card?
Edit or hide details on your profile straight away. The lost card will then only show what you leave on the profile.
Next steps
The NFC Name Cards homepage explains how the card, chip and profile fit together. See the profile plans and card options on the NFC name card product page. If you prefer a card with no hardware at all, the digital name card uses the same profile. For phone compatibility, read which phones can read an NFC name card.