or just not ask for it at all.

The three times I've needed to provide a scan of my passport were: to enroll in a university course, to buy from an e-commerce site, and to become an app developer. None of those orgs really needed a scan of my passport, which can't be revoked like a cracked password, and will now sit unencrypted somewhere until the end of time or until they are hacked and subsequently shamed into handling their customers data more like radioactive waste.

The only times I had to provide a scan of my passport was to cross a border:

    - get a VISA to be allowed to cross the border
    - send to the airline for my flight that will cross the border
    - show the real passport at the border