Travel Document Security: What Makes a Passport 'Strong' Beyond Visa-Free Access

Bitcoiners verify before they trust. We do not take a wallet's audit report at face value. We do not custody on hardware until we have run a fault-injection test or seen someone we trust run one.

Then we read the Henley Passport Index, see "Vanuatu: 88 visa-free destinations," and treat the number like a price oracle.

Visa-free count is the headline. It is not the score. A passport's structural strength is a multi-dimensional vector, and the count is one axis. The other axes determine how the passport behaves in a real border encounter, in a bank account-opening flow, in a denaturalization scenario, in a wealth-transfer to your children, and in the kind of sanction-list adjacency that kills a tier-three jurisdiction's utility overnight.

Here is the framework we use when we score a passport beyond visa-free access. Five dimensions. The numbers behind them. And what they imply for a Bitcoiner choosing the second-citizenship side of the stack.

The Count Is A Headline, Not A Score

Henley & Partners publishes the most-cited passport ranking. Arton Capital publishes another. Both index visa-free and visa-on-arrival access, which is one structural property. Neither indexes biometric integrity, document security, the quality of the visa-free regime (a 30-day Schengen entry is not a 90-day Schengen entry), the treatment a holder gets at secondary inspection, or the political risk of unilateral revocation by the issuing state.

A "172-destination" passport that is on a travel-ban watchlist for half its visa-free entries, or that loses Schengen access in a December diplomatic note, is not a 172-destination passport in any operational sense. It is a 90-destination passport with a press release.

The visa-free count is not the score. It is a signal of the score's most visible component. For a Bitcoiner committing $90,000 to $999,001 to a sovereign asset, the other components matter most when no one is talking about them.

Dimension 01 / Document Integrity

The International Civil Aviation Organization (ICAO) Document 9303 is the global standard for machine-readable travel documents. Every passport that crosses borders without manual intervention complies with some level of 9303. Compliance is not binary. It is a tier system.

The top tier runs polycarbonate data pages with laser-engraved personalization, embedded RFID chips with Active Authentication and Chip Authentication protocols, and biometric data signed by a Country Signing Certificate Authority (CSCA) whose public key is in the ICAO Public Key Directory (PKD). EU member states issue this. Modern Vanuatu, Maltese, Turkish, and Salvadoran passports issue this. Forging it is, in operational terms, hard.

The middle tier runs paper or laminated data pages, contactless chips with Passive Authentication only, and certificates that are correctly signed but not in the PKD. The forgery floor is meaningfully lower.

The bottom tier runs paper pages, no chip, and visual security features that are easier to clone than to verify. Some Caribbean CBI passports have historically lived here, which is part of what put their visa-free Schengen agreements under EU scrutiny.

For a Bitcoiner buying a second passport, document integrity is the difference between a sovereign asset that holds its travel reach for the next decade and one whose reach gets renegotiated every time the issuing state's PKD certificate raises a flag. Henley does not score this. We do.

Dimension 02 / Border Posture

A passport is a posture, and the posture lives at the border desk.

Two passports with identical visa-free counts can produce wildly different border experiences. One sails through primary inspection. The other gets pulled to secondary, asked to explain three trips of the last six months, and held while a database query runs. Neither holder is doing anything wrong. They have just chosen sovereign assets with different border postures.

The variables that determine posture include whether the issuing state runs Advance Passenger Information and Passenger Name Record exchange agreements with the destination (faster primary, fewer questions), whether the issuing state appears on FATF gray or black lists (slower secondary), whether the issuing state's CBI has triggered mass-issuance scrutiny (Caribbean CBI holders saw this through 2024 and 2025 in Schengen), and whether the holder's prior travel pattern matches a profile the destination's system flags.

Vanuatu carries a notable wrinkle here. Its visa-free arrangement with Schengen was suspended in 2022 and formally revoked in December 2024 after EU concerns about its CBI due diligence. That revocation was not about the passport's count. It was about the issuing state's posture.

São Tomé & Príncipe carries a different posture: smaller program, Lusophone footprint, low CBI controversy, and primary-inspection treatment closer to a small Lusophone state than a CBI-coded jurisdiction. The visa-free count is lower; the posture is, in our experience, calmer.

Dimension 03 / Revocability And Political Risk

A passport you can lose unilaterally is a passport with a fuse on it. Different jurisdictions burn at different speeds.

El Salvador's Decreto 531, signed March 31, 2026, codified Article 279's denaturalization triggers: two consecutive years of residence in the country of origin, or five consecutive years of absence from El Salvador without an Article 280 permit. The triggers are reasonable, but they exist, and the holder needs to plan around them.

Vanuatu's denaturalization framework permits revocation for serious crime, treason, or material misrepresentation in the original application. The bar is high in practice.

Türkiye's framework permits revocation of acquired citizenship within five years for material misrepresentation or links to terrorism; the standard is comparatively strict.

Malta's Citizenship by Merit framework retains discretionary revocation tied to material misrepresentation or grave breach of allegiance, in line with the Maltese Citizenship Act and EU treaty constraints on revocation that would render the holder stateless.

The pattern: every CBI passport carries some revocation surface. The question is whether that surface is bounded by clear statutory triggers (Vanuatu, El Salvador) or by discretionary review (Malta). Bounded triggers are easier to plan around. Verifying the revocability surface is part of due diligence on the second-citizenship side of the stack.

Dimension 04 / Banking And Compliance Footprint

A passport that is operationally rejected by the global banking system at account opening is a passport with limited utility, regardless of its visa-free count.

This is where the Common Reporting Standard (CRS) and Financial Action Task Force (FATF) listings re-enter the conversation. A second passport from a CRS-participating jurisdiction (Vanuatu, Türkiye, Malta) presents a familiar profile to a compliance officer at a tier-one bank. The reporting framework is known, the disclosure regime is documented, the politically-exposed-person screening runs cleanly. A second passport from a Non-CRS jurisdiction (São Tomé, El Salvador) is not categorically rejected, but the file requires more documentation and more time.

Sanctions adjacency matters more than CRS. A passport from a jurisdiction with regular FATF mutual-evaluation findings (no current 21 CBI program is on the FATF gray list as of May 2026) is operationally different from one whose issuing state appears on a watchlist.

For US persons specifically, FATCA continues to apply to the holder regardless of which other passports they hold, until the Certificate of Loss of Nationality is filed and accepted. A second passport changes the holder's set of sovereign options. It does not, on its own, change the holder's FATCA status. That is an Exitly file, not a 21 CBI file.

Dimension 05 / Hereditary Architecture

The strongest passports reach beyond a single generation. Hereditary citizenship; the right of children born to a passport holder to acquire that passport; converts a single sovereign decision into a generational asset.

Vanuatu, São Tomé & Príncipe, Türkiye, El Salvador, and Malta all extend citizenship to children born to citizen parents, by descent, with varying registration requirements. Argentina extends jus soli to children born on Argentine territory and jus sanguinis to children of Argentine citizens. The Bitcoin-native architecture (self-custody, multi-sig, low time preference) is the same architecture that makes hereditary citizenship a structural feature, not an afterthought.

A passport without a clean hereditary path is, for a parent, a single-generation asset. A passport with one is the citizenship analog of a Bitcoin position you do not plan to spend in your lifetime: you hold it, you transfer the keys, the next holder inherits the optionality.

For Bitcoiners with children or planning for them, hereditary architecture is the dimension that converts a $90,000 to $999,001 decision into a multi-generational structural position. Henley does not score it. The advisor running your file should.

The Five-axis Score

The Henley count is a useful headline number. It is also one axis of a five-axis vector. Document integrity, border posture, revocability surface, banking footprint, and hereditary architecture are the others. The strongest passports score above-median on all five. The weaker ones score above-median on visa-free count alone.

When 21 CBI scopes a file, we score on all five. We tell clients when a passport that ranks higher on visa-free reach loses on document integrity, or wins on border posture, or carries a revocability fuse that does not fit their travel pattern. The number that matters at the end of the conversation is the number that fits the holder's situation, not the number on the back of the Henley brochure.

Programs available today may not exist next year. Every CBI threshold increase in history has been upward. Low time preference does not mean no action. It means making the right move at the right time.

If you want to walk through how the five axes score for your specific situation, book a confidential advisory session. Encrypted, no obligation, no payment required to start the conversation.

Adam Juchniewicz, CEO, 21 CBI US Air Force veteran. Bitcoiner since 2020. Licensed agent of The Bitcoin Office of El Salvador.