Biometric Passports and CBI: What New Citizens Receive

After months of due diligence, source-of-funds documentation, and sovereign-level processing, a CBI applicant receives a small booklet in the mail or at a biometric enrollment appointment. That booklet is the product. Everything else in the process leads to it.

Bitcoiners pay attention to physical artifacts that represent sovereignty. You verified your hardware wallet's firmware before you trusted it with a seed. You ran your own node before you trusted any third-party feed. The same instinct applies to the passport: what is actually in the document, what validity horizon does it carry, what security features does the issuing state stand behind, and what does your home country see when you present it at a border.

Here is what each of the five CBI programs 21 CBI advises on delivers, specification by specification.

The Icao Baseline

Every modern CBI passport conforms to ICAO Doc 9303, the International Civil Aviation Organization standard for machine-readable travel documents. ICAO compliance is the minimum bar for global acceptance; a passport that is not ICAO-compliant is a travel document in name only.

An ICAO-compliant biometric passport (also called an e-passport) contains three layers:

01 / The physical booklet. Paper visa pages, a data page with your photo, signature, identifying information, and a Machine Readable Zone (MRZ). The MRZ is the two-line string of characters at the bottom of the data page that border agents scan when they run your passport through a reader.

02 / The embedded chip. A contactless RFID chip, usually under the cover page, that stores a digital copy of the data page plus biometric data. In most modern passports this includes a high-resolution face image. Some states also store fingerprint templates. The chip is read-only, signed cryptographically by the issuing state's Country Signing Certificate Authority (CSCA), and verified globally through the ICAO Public Key Directory (PKD).

03 / The digital security stack. Basic Access Control (BAC) and its modern replacement, Password Authenticated Connection Establishment (PACE). Active Authentication or Chip Authentication to prove the chip itself is genuine. Passive Authentication to prove the data has not been altered since the state signed it. These are cryptographic protocols that border control systems run behind the scenes when they tap your passport against a reader.

All five programs on the 21 CBI list issue ICAO-compliant e-passports. What differs is the validity period, the specific biometric data embedded in the chip, the e-gate footprint the passport unlocks, and the operational process of getting the physical document in hand.

Vanuatu

The Vanuatu passport is a green booklet issued by the Vanuatu Passport Office under the Citizenship Office of Vanuatu. Validity is ten years. The embedded chip stores a high-resolution facial image; fingerprint enrollment is not documented as part of the standard DSP issuance process. Renewal at the ten-year mark is routine and can be handled through Vanuatu consulates globally.

Physical delivery after approval typically runs through a Vanuatu consulate or an accredited courier. There is no in-country presence requirement for enrollment. You present once to a designated officer for signature and photo verification; the chip is programmed and the booklet issued. No fingerprinting, no in-person ceremony on the islands.

E-gate compatibility is limited to Commonwealth-connected automated lanes and the growing global e-gate infrastructure that reads ICAO PKD-signed chips. Schengen e-gates do not apply; Vanuatu lost Schengen visa-free access in December 2024.

São Tomé & Príncipe

The São Tomé & Príncipe passport is a current-series biometric document issued under Decreto-Lei n.º 07/2025. The program launched in 2025, which means every passport issued under the CBI is current-generation biometric from day one; there is no legacy non-chip version in circulation. Validity is seven years.

The chip stores a facial image. The STP e-passport is ICAO PKD-registered, which means e-gates at major airports globally that read PKD-signed chips accept it. The diplomatic footprint of STP is smaller than Malta's or Türkiye's, so recognition across consulate networks is thinner, but the document itself meets the global biometric bar.

Physical issuance runs through the Citizenship Investment Unit in Dubai. Most applicants receive the document via courier or collect it during a Dubai or Lisbon trip. No in-country visit to São Tomé is required.

Türkiye

The Türkiye e-passport carries the full EU-aligned biometric specification. Validity is ten years for adults. The embedded chip stores a facial image and two fingerprint templates (left and right index fingers), captured at a mandatory biometric enrollment appointment in Türkiye.

The fingerprint data on Turkish passports matters for two reasons. First, it makes the document compatible with the widest range of automated border control systems globally; the richer biometric verification shows up in faster and smoother border processing even outside Schengen. Second, it makes the passport structurally harder to spoof or clone, which reinforces the document's international acceptance.

The passport booklet itself is a deep red, EU-standard format. Turkish citizens qualifying under the CBI typically collect the physical document through the Turkish General Directorate of Population and Citizenship Affairs after the biometric enrollment.

El Salvador

The El Salvador Freedom Passport is a current-generation biometric document administered by The Bitcoin Office under the Adopting El Salvador initiative. Validity is six years, renewable at any Salvadoran embassy or consulate worldwide.

The chip stores a facial image. Fingerprint capture is part of the biometric enrollment appointment, which takes place either in El Salvador or at a designated Salvadoran consulate for coordinated applicants. The passport is ICAO PKD-registered and readable globally through standard e-gate infrastructure.

The practical footprint of the Salvadoran passport has expanded meaningfully since 2021 thanks to the country's diplomatic repositioning. Visa-free access covers 131 destinations including the entire Schengen Area, the United Kingdom, Japan, South Korea, Singapore, and Hong Kong. The passport presents at border control as a mid-tier document with an unusually strong Schengen and East Asia footprint given the state's size.

MALTA

The Malta e-passport is a full EU biometric passport issued under the Maltese Passports Act and EU Regulation 2252/2004. Validity is ten years for adults, five years for minors under 16. The embedded chip stores a facial image and two fingerprint templates, fully compliant with the EU's unified biometric passport specification.

Malta's passport sits at the top tier of global documents by visa-free footprint: 184 destinations, full Schengen e-gate compatibility, access to all 27 EU member states' automated lanes, and the ability to enter the UK, US, Canada, and Australia without pre-arranged visas. Border processing at Schengen entry points is effectively frictionless; the passport presents as a native EU document because it is one.

Enrollment requires a biometric appointment in Malta during the residency phase of the CBM application. The passport is issued through Identità (formerly Identity Malta) upon grant of citizenship. The booklet itself is a deep red EU-standard format and is indistinguishable from a Maltese passport issued to someone born on the island.

What Else Arrives With The Passport

A CBI passport rarely arrives alone. Depending on the program, you also receive:

Citizenship certificate. A sovereign document confirming your citizenship status. In most programs this is issued separately from the passport and is the document you reference for later renewals, banking account openings, and legal filings.

National identity card. Malta issues one as part of the standard citizenship package. El Salvador and Türkiye issue them for residents. Vanuatu and STP do not, by default.

Registration with the civil register. Your name enters the civil register of the issuing state. Birth, marriage, and death records can later be updated through that register.

Taxpayer identification. Most programs register you automatically with the state tax authority, even if you are not a tax resident. This is administrative, not a trigger of tax liability. Your tax residence is still determined by where you actually live and where you have economic substance.

Schengen E-gate Compatibility As The Practical Differentiator

For most holders, the feature that matters in day-to-day use is not the chip's technical spec sheet. It is whether the passport clears Schengen e-gates at Paris Charles de Gaulle, Amsterdam Schiphol, Frankfurt, or Zurich without a manual border interview.

Malta clears them natively; you are an EU citizen. El Salvador is visa-free to Schengen and the Salvadoran chip reads through PKD; under the EU Entry/Exit System (EES), which began its phased rollout on October 12, 2025 and reached full operation on April 10, 2026, Salvadoran biometric passports increasingly clear automated non-EU lanes after first-trip biometric enrollment, though coverage is still uneven by member state. Türkiye is visa-required for Schengen so Turkish holders go through manned desks at Schengen entry, but the passport clears many non-Schengen e-gates across the Middle East, the Balkans, and Southeast Asia. Vanuatu lost Schengen visa-free access in December 2024. STP is visa-required for Schengen.

For a Bitcoiner whose life runs through EU hubs, Schengen e-gate access is the feature. For a Bitcoiner whose travel is weighted to Asia-Pacific, Commonwealth, or Latin America, it matters less. The right passport is the one whose technical footprint matches your actual corridor.

The Decision Framework

If EU-native recognition and automated Schengen lanes matter most: Malta.

If Schengen visa-free access without EU citizenship matters most: El Salvador.

If US market access through the E-2 treaty visa pathway is the goal: Türkiye.

If fast issuance and Commonwealth regional recognition matter most: Vanuatu.

If Non-CRS banking posture and the lowest program cost matter most: São Tomé & Príncipe.

The Principle

A passport is not just paper. It is a cryptographically signed sovereign document with specific technical properties that determine how it moves through the world. The CSCA signature, the PKD registration, the biometric template count, the validity horizon, and the e-gate compatibility set are the real specifications. The visa-free destination count is the headline; the chip is the substance.

Bitcoiners already treat their hardware wallets, nodes, and signing ceremonies as engineering decisions. Apply the same discipline to the passport. Choose the document whose specifications match how you actually travel, bank, and operate. Low time preference does not mean no action. It means making the right move at the right time.

Ready to pick the passport that fits your footprint? Book a confidential advisory session. Encrypted, no obligation, no payment required to start the conversation.

Adam Juchniewicz, CEO, 21 CBI US Air Force veteran. Former DHS immigration policy expert. LL.M., University of Malta. Licensed agent of The Bitcoin Office of El Salvador.