How to Replace a Lost or Stolen CAC Card

A Common Access Card (CAC) is used for military identification, installation access, secure networks, email, and many personnel systems. Losing one creates both an administrative problem and a potential security risk, so reporting it quickly matters more than waiting to search for it.

The replacement process can vary by installation, duty status, and branch. Active-duty soldiers, National Guard members, Army Reserve personnel, contractors, and eligible family members may use different offices or provide different documents. Local instructions from the personnel office or RAPIDS site should take priority.

A lost card should be treated as unusable until the issuing authority confirms otherwise. If the card was stolen, a police report may also be appropriate, particularly when it was taken with other identification, equipment, or personal information.

Report The Missing Card Immediately

Notify your chain of command, unit security manager, S-1, or local personnel office as soon as you notice the CAC is missing. The responsible office can explain how to suspend or revoke the card and whether your organization requires a formal memorandum or loss report.

If the card may have been stolen, contact the appropriate military police or civilian law enforcement agency. Keep the report number and a copy of any documentation. Some ID card facilities may request evidence of the theft before issuing a replacement, while others may handle the matter through local administrative procedures.

Avoid posting photographs of the CAC, its identification number, or details from the embedded certificates. Those details can expose sensitive information and are not needed for general assistance.

Secure Your Accounts And Access

Reporting the physical card is only part of the response. A CAC can support access to email, VPN services, intranet portals, personnel systems, and controlled facilities. Tell your service desk or network administrator that the card is lost so they can provide temporary access instructions and address certificate-related problems.

You may need to use another approved authentication method while waiting for a replacement. Do not borrow someone else’s CAC, share a PIN, or accept unofficial workarounds. A supervisor, help desk, or information assurance office can identify a compliant temporary option.

A replacement card normally receives new certificates and a new PIN setup. Old certificates may remain associated with applications until systems refresh, so follow local instructions for reconnecting Outlook, browsers, VPN clients, smart-card middleware, and other CAC-enabled software.

Arrange A Replacement Appointment

Use the official ID card scheduling process available to your installation, often through the ID Card Office Online system or a local RAPIDS appointment page. Search for a site that supports your status and confirm the facility’s services before booking. Some locations handle only active-duty cards, while others also serve retirees, dependents, reservists, or contractors.

Before attending, contact the site if the card was stolen, damaged, expired, or lost with other identification. The office may provide specific instructions for a police report, counseling statement, commander’s memo, or sponsor verification. Requirements can differ even among facilities in the same region.

Bring the documents requested by the issuing office. Common requirements may include two forms of identification, proof of military affiliation or employment, orders or status documentation, and a sponsor when required. A current government-issued photo ID is especially useful, but the exact combination depends on the applicant and local policy.

What To Expect At The ID Card Office

At the appointment, personnel verify your identity and eligibility in DEERS or the applicable personnel database. They may capture or confirm a photograph, fingerprints, and other identity information before producing the replacement CAC.

You will generally create or select a six- to eight-digit PIN, depending on current system requirements and local instructions. Before leaving, inspect the card for accurate spelling, rank, organization, expiration date, and photograph. Report errors immediately rather than trying to correct them later through a different office.

The issuing staff may also explain whether your old card has been revoked and how to activate the new one. Keep the new CAC secure, remove it from readers before transporting your computer, and store it separately from the PIN.

Situation	First Contact	Documents Or Actions That May Be Needed	Access Considerations
Lost CAC	Chain of command, S-1, or ID card office	Loss report or local statement; identity documents	Request temporary network and facility-access guidance
Stolen CAC	Military or civilian law enforcement and unit leadership	Police report number, loss documentation, identity documents	Ask security staff to revoke the card promptly
Damaged CAC	ID card office or service desk	Damaged card, identity verification, possible replacement fee rules	Test certificates and readers after replacement
Expired CAC	ID card office or RAPIDS site	Current status documents and required identification	Schedule renewal before access ends
Contractor CAC	Contract sponsor, security office, or issuing facility	Sponsorship confirmation and government ID	Coordinate with the contract security representative

Restore Digital And Installation Access

A new card may work for identification before every digital service recognizes it. Insert the CAC into an approved reader and test the systems you use for email, VPN, training, personnel actions, and secure websites. If a certificate prompt appears, select the current certificate rather than an expired or revoked one.

Installation entry may also require time for access-control databases to update. If the replacement card does not open a gate or support building access, contact the visitor control center, access-control office, or security desk. Carry another acceptable form of identification while the issue is being resolved.

A lost CAC does not automatically erase personnel records, evaluations, or documents stored in systems such as iPERMS. However, the inability to authenticate can delay submissions and approvals. Personnel who are handling evaluation actions can review an NCOER submission guide separately while their credential issue is being corrected.

Prevent Delays During Replacement

Make a short record of when and where the card was last seen, who was notified, and any report or appointment numbers. This information helps your chain of command and the issuing facility understand the situation without repeated explanations.

Check whether your local office requires an appointment, walk-in visit, sponsor presence, or a commander-approved statement. Bring all requested paperwork and arrive early enough to complete identity verification. A missing document can turn a same-day replacement into a second trip.

For broader administrative guidance, soldiers can review Army personnel resources, while remembering that an informational website cannot replace instructions from the official ID card facility, security office, or chain of command.

Practical Steps Before The Appointment

• Report the loss or theft to your chain of command and the responsible security or personnel office.
• File a law enforcement report when the circumstances involve theft or other criminal activity.
• Schedule with an ID card facility that serves your military status and location.
• Bring required identification, status documents, and any local loss or theft paperwork.
• Test the replacement CAC and notify the help desk about certificate or access problems.

Prompt reporting reduces the chance that a missing credential remains active or is misused. Follow the instructions given by your unit and issuing office, then keep the replacement card and PIN under separate, secure control. For additional administrative topics, the EES Army website provides general reference material, while official military channels remain the authority for CAC replacement decisions.