REAL ID compliance is a claim the issuing state prints on the front of a card and writes into the barcode on the back. A scanner can read that claim in a second. It cannot confirm the state made it. Everything useful about verifying a REAL ID follows from that one distinction.
Last checked against 6 CFR part 37, the TSA REAL ID pages, 90 FR 3472 and the 2025 AAMVA DL/ID Card Design Standard in September 2026.
The REAL ID Act of 2005 enacted a 9/11 Commission recommendation that the federal government set minimum standards for how states issue driver’s licences and ID cards. Its implementing regulation, 6 CFR part 37, then bars federal agencies from accepting a non-compliant card for what the rule calls an official purpose. Section 37.3 defines that term exactly: accessing federal facilities, boarding federally-regulated commercial aircraft, and entering nuclear power plants.
Card-based enforcement began May 7, 2025. Since then a state licence that is not REAL ID compliant is not accepted as identification at a TSA airport checkpoint, and TSA reports that every state, the District of Columbia and all five territories now issue compliant cards.
TSA’s own About REAL ID page ends with this: “The Act’s prohibitions do not affect other uses of driver’s licenses or identification cards unrelated to official purposes as defined in the Act.”
That is the whole answer for a bar, a liquor store, a dispensary or a vape shop. REAL ID is not an age-verification standard and it does not govern your door. A customer presenting a perfectly valid non-compliant licence has presented a valid licence; whether you may accept it for an alcohol or tobacco sale is a question of your state’s law, not of REAL ID. Treating “no star” as “fake” is a training error, and a common one.
On January 14, 2025, TSA published a final rule — Phased Approach for Card-Based Enforcement, 90 FR 3472 — effective the same day. It does not move the May 7, 2025 deadline. What it does is let a federal agency roll enforcement out in stages if the agency determines that is appropriate, provided it coordinates the plan with DHS, publishes the plan on its own web page, and reaches full enforcement no later than May 5, 2027. After that date, agencies may not accept non-compliant marked cards or unmarked legacy cards for official purposes at all.
TSA publishes the list of agencies that have coordinated a phased plan. As of this page’s last check it names the Commodity Futures Trading Commission, the Department of Commerce, the Nuclear Regulatory Commission and the Tennessee Valley Authority. Airport checkpoints are not on that list — TSA screening has been at full enforcement since May 2025. Separately, since February 1, 2026, a traveller who arrives at a checkpoint without an acceptable ID has the option of paying a $45 fee for TSA ConfirmID rather than simply being turned away.
Two places: the front of the card, and one character in the barcode on the back.
6 CFR 37.17(n) requires a compliant card to bear “a DHS-approved security marking … reflecting the card’s level of compliance.” In practice that is the star in the upper portion of the card. DHS recommends the familiar gold star, but its FAQ confirms states may submit alternative markings — differences in colour, lettering or format — for DHS review and approval, which is why the marking is not identical everywhere. Enhanced Driver’s Licences from Michigan, Minnesota, New York, Vermont and Washington are an accepted alternative and mostly carry no star at all; they show a US flag and the word “Enhanced” instead.
The PDF417 barcode on the back follows the AAMVA DL/ID Card Design Standard. In the 2025 edition, element DDA, “Compliance Type”, is defined as a “DHS required field that indicates compliance: ‘F’ = compliant; and ‘N’ = non-compliant.” It is a single alphabetic character.
The detail that matters at a door: DDA sits in Table D.4, the standard’s table of optional 2D data elements, annotated in the standard’s worked example as “Required for DHS compliant licenses.” It is not among the minimum PDF417 elements federal rule 6 CFR 37.19 lists. So a card can be perfectly genuine and simply not carry the field — and many are. In the January 2025 rulemaking, DHS put roughly 14 million legacy licences without any markings, issued before their state’s compliance determination, still in circulation on its January 2024 data. On the other side, 6 CFR 37.71(a)(1) requires a deliberately non-compliant card to state, both on its face and in the machine readable zone, that it is not acceptable for official purposes. The rule does not name the field; in an AAMVA barcode, a DDA of “N” is how a card carries that statement.
This is the part vendors tend to skip, and it is the reason Check ID’s wording is what it is.
The barcode is unencrypted and, in practice, unsigned. The AAMVA standard is explicit: “All mandatory and optional data must be unencrypted.” A digital seal — the issuing authority cryptographically signing the machine-readable data — appears in the standard only as an optional security feature, item 4.16 in its table of personalized-data protections, while the PDF417 barcode itself is mandatory.
Therefore a forged card can encode “F”. Writing an “F” into a PDF417 symbol is trivial for anyone printing counterfeit cards, and nothing in the barcode proves a DMV produced it. Reading DDA tells you what is written on the document. It does not tell you the document is real.
No app is TSA-approved. Check ID is not affiliated with, endorsed by or approved by the Transportation Security Administration, DHS or any government agency, and using it is not a certification of compliance with any law.
Mobile driver’s licences. A digital ID in a phone wallet counts for federal official purposes only where the accepting agency takes it. TSA states that Federal agencies may accept an mDL for official purposes only if the issuing state has received a waiver under 6 CFR 37.7, or the agency has adopted an alternative acceptance policy. On the waiver route, 6 CFR 37.8 tells the agency exactly what to do: confirm the state is on TSA’s approved list, read the credential with an mDL reader per ISO/IEC 18013-5:2021, and verify that the data element “DHS_compliance” is marked “F” — the same one character, in a cryptographically protected container this time. TSA publishes the waiver list and still “strongly encourages all mDL holders to carry a physical acceptable form of ID when traveling.”
Passports. A passport is not a REAL ID — it is an accepted alternative to one, on TSA’s list alongside DHS trusted traveler cards, military IDs, permanent resident cards and tribal photo IDs. It is also the strongest document any of these tools can actually authenticate, because the chip is signed by the issuing government.
“Federally-regulated commercial aircraft” reaches further than scheduled airlines. NBAA reports that since May 7, 2025, passengers on commercial flights including Part 135 charter flights conducted under the Twelve Five Standard Security Program (TFSSP) must hold identification meeting REAL ID requirements, and that REAL ID requirements do not apply to Part 91 flights. NBAA also notes that TSA ConfirmID, the $45 fallback, is not currently available for passengers on TFSSP or DASSP flights.
The operational consequence is the interesting one. NBAA’s guidance to charter operators is to update policies and training so that “individuals responsible for verifying ID prior to boarding know how to identify a Real ID-compliant document.” That check, and the record of it, belongs to the operator.
Check ID reports the REAL ID indicator in three states, exactly as the document encodes it. It never says “REAL ID verified,” because that is not a thing a barcode can support.
The barcode encodes the indicator and it says compliant — as encoded on the document.
The barcode encodes the indicator and it says not compliant — as encoded on the document.
The field is missing. Older cards omit it. This is not non-compliance — the star on the front is the check.
Check ID reads the PDF417 barcode on US and Canadian licences and state IDs, reads an NFC passport or chip national ID and verifies the issuing government’s signature against the ICAO certificate list, and accepts an Apple Wallet mobile driver’s licence through Apple’s own ID Verifier — iPhone only; on iPad it reads the physical barcode instead.
Today Check ID reports a REAL ID state only from a physical card’s barcode. It does not report REAL ID status from an Apple Wallet mobile ID, and we would rather say so than imply a result we do not have.
Name, date of birth, address, photo and document number are never stored. A scan record keeps the check: that one happened, when, its outcome, who ran it, and non-identifying attributes — issuing jurisdiction, document type, and the REAL ID state as encoded.
Team accounts export a signed, timestamped CSV or PDF for a date range, carrying a hosted verification code so a third party can confirm the report is genuine without trusting a screenshot. Reports and exports stay readable if a subscription lapses.
Check ID validates what a document encodes and flags what does not add up — an impossible date, a licence-number format that does not match the issuing state. It cannot tell you a physical card is counterfeit, and it is not a certification of legal compliance.
On a shared iPad at a door or a boarding desk, each check is attributed to the staff member who ran it, so “who verified this passenger” has an answer months later.
Only for “official purposes,” which 6 CFR 37.3 defines as accessing federal facilities, boarding federally-regulated commercial aircraft, and entering nuclear power plants. TSA adds that the Act’s prohibitions do not affect other uses of licences unrelated to those purposes — so a bar, dispensary or liquor store is not covered, and a non-compliant licence is not automatically an unacceptable ID under your state’s age-verification law.
No. It reads the indicator the issuer wrote into the barcode — AAMVA element DDA, “F” compliant, “N” non-compliant. The AAMVA standard requires that data to be unencrypted and treats a digital seal as optional, so nothing proves the DMV produced it. A forgery can encode “F.” Check ID therefore reports the value as encoded on the document, never as “REAL ID verified.”
Because DDA is in the AAMVA standard’s optional element table and older cards omit it. DHS counted roughly 14 million unmarked legacy licences still circulating on its January 2024 data. Absence is not non-compliance; the star on the front is the visual check in that case.
Card-based enforcement began May 7, 2025. A TSA final rule of January 14, 2025 (90 FR 3472) lets agencies phase in, with a hard stop at full enforcement no later than May 5, 2027. TSA lists CFTC, Commerce, the NRC and TVA as having coordinated phased plans; airport checkpoints are at full enforcement.
An mDL counts only where the accepting agency takes it. TSA says a Federal agency may accept one only if the issuing state holds a waiver under 6 CFR 37.7 or the agency has adopted an alternative acceptance policy; on the waiver route, 6 CFR 37.8 requires reading it to ISO/IEC 18013-5 and confirming “DHS_compliance” is “F.” TSA still advises carrying a physical ID too. A passport is a separate accepted alternative to a REAL ID card.
NBAA reports that it applies to Part 135 charter conducted under the Twelve Five Standard Security Program, and does not apply to Part 91 flights. TSA ConfirmID is not currently available on TFSSP or DASSP flights. On charter, the ID check before boarding is done by the operator’s own staff.
Every claim above is traceable to one of these primary sources.
Check ID reports REAL ID in three states exactly as the document encodes them, on iPhone and iPad. Personal Pro is a one-time $19.99 upgrade with 7-day history. Check ID for Teams — shared devices, staff attribution and signed exports, $39.99 per venue per month or $349 a year with 25 devices and 50 members included — is coming soon; join the waitlist.