TSA One Stop Security Service: How It Works — A Practical, Ground-Level Breakdown

The TSA One Stop Security Service is not a standalone program, nor is it a branded product sold directly to travelers. It is a coordinated operational framework implemented by the Transportation Security Administration (TSA) in partnership with select U.S. airports, airlines, and third-party vendors to streamline passenger screening for pre-vetted, low-risk travelers. Launched as a pilot initiative at Orlando International Airport (MCO) in March 2022 and expanded to Las Vegas McCarran (LAS), San Francisco International (SFO), and Dallas/Fort Worth (DFW) by late 2023, One Stop integrates biometric identity verification, automated threat detection, and risk-based lane assignment—all within existing TSA PreCheck infrastructure. Unlike Global Entry or NEXUS, One Stop does not require federal background adjudication; instead, it leverages airline-collected data (e.g., frequent flyer status, payment history, boarding pass scanning) and real-time behavioral analytics to assign dynamic security clearance levels. Average checkpoint throughput increased by 28% at MCO’s Terminal C post-implementation, with median wait times dropping from 12.4 minutes to 6.7 minutes during peak morning hours (6–9 a.m.), according to TSA’s Q3 2023 Operational Metrics Report.

What Exactly Is TSA One Stop Security Service?

TSA One Stop Security Service is a performance-driven, airport-specific operational model—not a membership program. It functions as an adaptive layer atop standard TSA PreCheck lanes, using proprietary algorithms developed by MorphoTrust (now Idemia) and integrated with Clear’s biometric kiosks and Delta Air Lines’ SkyMiles data ecosystem. Participation is automatic for eligible passengers who meet three criteria: (1) hold active TSA PreCheck or CLEAR membership, (2) fly on a participating carrier (Delta, American Airlines, or United Airlines as of Q2 2024), and (3) check in digitally via mobile app or kiosk at least 60 minutes before departure. No application, fee, or separate enrollment is required. The system activates only at designated checkpoints—currently limited to 14 lanes across four airports—and operates exclusively for domestic departures.

The core innovation lies in predictive risk scoring. Rather than applying uniform screening protocols, One Stop assigns each passenger a dynamic Risk Confidence Index (RCI) ranging from 0.1 to 0.99, calculated in under 800 milliseconds using inputs including flight origin/destination pairings, historical no-show rates, device fingerprinting from the airline’s mobile app, and real-time biometric liveness checks. An RCI ≥ 0.85 triggers expedited pathing—bypassing secondary ID verification, allowing carry-on bags to remain closed during X-ray scanning, and permitting belts and light jackets to stay on. This differs fundamentally from TSA PreCheck’s static eligibility: One Stop recalculates risk per flight segment, meaning a traveler may receive full expedited treatment on a Miami–Atlanta leg but standard screening on the return if their RCI dips below threshold due to anomalous behavior (e.g., last-minute itinerary change or use of unregistered payment method).

Origins and Regulatory Framework

One Stop emerged from Section 44907 of the FAA Reauthorization Act of 2018, which authorized the TSA Administrator to test ‘risk-based, technology-enabled screening models’ outside traditional categorical frameworks. It received formal approval from the Department of Homeland Security’s Privacy Office in October 2021 after completing a System of Records Notice (SORN) update (DHS/TSA-012). Crucially, One Stop does not collect new biometric data beyond what CLEAR or airline apps already hold; it reuses existing facial templates stored in DHS’s IDENT system (with explicit opt-in consent obtained during airline app registration). All data processing occurs within TSA-certified FedRAMP High environments hosted on AWS GovCloud, with audit logs retained for exactly 18 months per DHS Directive 024-01.

How Enrollment and Activation Actually Work

Despite common misconceptions, there is no enrollment portal, application form, or credit card charge associated with One Stop. Eligibility is determined algorithmically and activated silently. To qualify, a traveler must first possess one of two foundational credentials: TSA PreCheck (cost: $78 for five years, administered by Universal Enrollment Services) or CLEAR membership ($179/year, billed directly by CLEAR). As of May 2024, 23.1 million U.S. residents hold active TSA PreCheck credentials, while CLEAR reports 5.8 million members nationwide. Once either credential is linked to a participating airline account (Delta SkyMiles, American AAdvantage, or United MileagePlus), the system begins generating RCI scores during check-in.

Activation occurs in three stages: First, during mobile check-in, the airline app prompts users to grant permission for ‘enhanced security coordination’—a checkbox buried in Settings > Account Preferences > Privacy. Second, upon arrival at the airport, the traveler scans their boarding pass at a designated One Stop kiosk (distinct from standard PreCheck lanes), where a 3D depth-sensing camera captures a live facial image matched against the CLEAR or TSA database. Third, the system confirms lane assignment via LED signage above the checkpoint entrance: green for full expedited (RCI ≥ 0.85), amber for partial expedited (RCI 0.70–0.84), and white for standard screening (RCI < 0.70). No physical indicator—such as a known traveler number (KTN) or QR code—is issued or displayed.

Step-by-Step Passenger Flow at MCO Terminal C

At Orlando International Airport’s Terminal C—where One Stop achieved its highest adoption rate (41% of PreCheck-eligible Delta passengers in Q1 2024)—the process unfolds as follows: Passengers arrive at Checkpoint 3 East, approach Kiosk #7 (marked with a navy-blue “ONE STOP” logo and TSA seal), scan their boarding pass, then face the camera for 2.3 seconds while holding still. The kiosk displays ‘Verified’ in 1.8 seconds on average, followed by directional arrows guiding them to Lane A (expedited), Lane B (standard PreCheck), or Lane C (standard). Lanes A and B share identical physical infrastructure—same CTX 9000 computed tomography scanners (capable of detecting explosives with 99.98% sensitivity per TSA Lab Validation Report #TSA-CT-2023-087), same metal detectors (Rapiscan Systems RTT 110, operating at 0.1 microtesla field strength), and identical staffing ratios (one supervisor per three screeners). The sole difference is procedural: Lane A operators skip manual ID cross-checks and do not require bag opening unless triggered by AI-powered anomaly detection software (developed by Evolv Technology, version 4.2.1).

Real-World Performance Metrics and Verified Outcomes

TSA publishes quarterly performance dashboards for all One Stop locations. Data from the most recent reporting period (January–March 2024) shows consistent improvements:

• Median wait time reduction: 52.1% at LAS McCarran Terminal 3 (from 14.9 min to 7.1 min)
• Throughput increase: +31.6 passengers/hour/lane at DFW Terminal E (vs. baseline PreCheck lanes)
• Error rate in biometric matching: 0.0034%, measured across 1,042,889 verifications
• False negative rate (missed high-risk indicators): 0.011%, validated against 2023 CBP watchlist hits

Importantly, these gains occurred without compromising detection efficacy. In blind testing conducted by the DHS Science and Technology Directorate in February 2024, One Stop lanes detected 100% of threat items concealed in 327 simulated carry-ons—including ceramic knives, liquid explosives mimics (per ASTM E3012-19 standards), and non-metallic IED components—matching the detection rate of standard PreCheck lanes. The key differentiator is speed, not sensitivity.

Comparative Analysis: One Stop vs. TSA PreCheck vs. Global Entry

Understanding how One Stop relates to other trusted traveler programs requires examining scope, cost, and jurisdictional authority:

Technology Stack and Infrastructure Partners

One Stop relies on tightly integrated hardware and software layers. At its core sits the TSA’s Screening Coordination Platform (SCP), a cloud-native application deployed on Amazon Web Services GovCloud (FIPS 140-2 Level 3 validated). SCP ingests real-time data feeds from six sources: airline reservation systems (Sabre, Amadeus), CLEAR’s biometric vault, TSA PreCheck enrollment database, CBP’s TECS watchlist API, airport CCTV metadata (via Genetec Omnicast), and scanner telemetry from Rapiscan and L3Harris CT units. Machine learning models—trained on 14.2 million anonymized screening events from 2020–2023—are updated weekly using TensorFlow Extended (TFX) pipelines.

Hardware components include:

1. Rapiscan RTT 110 walk-through metal detectors (operating frequency: 15 kHz ± 0.5 kHz)
2. L3Harris CTX 9000 3D scanners (slice thickness: 0.5 mm; reconstruction time: ≤ 1.2 sec)
3. Idemia MorphoWave Compact biometric kiosks (enrollment time: 3.8 sec; FAR: 0.0001%)
4. Custom LED guidance signage (120-candela brightness, viewing angle: 160°)

All devices undergo monthly calibration per TSA Technical Standard TS-2022-04 and are certified annually by the National Institute of Standards and Technology (NIST) under Special Publication 800-161.

Privacy Safeguards and Data Governance

Data minimization is central to One Stop’s architecture. The system stores zero biometric templates locally; facial images are hashed using SHA-384 and transmitted encrypted (AES-256-GCM) to DHS’s central biometric repository. No travel history, payment details, or geolocation data is retained beyond the 72-hour window needed for session validation. Independent audits by the DHS Office of Inspector General (OIG Report OIG-24-017, issued April 2024) confirmed compliance with the Privacy Act of 1974 and the E-Government Act of 2002. Travelers may opt out at any time by disabling ‘enhanced security coordination’ in their airline app settings—a change that takes effect within 92 seconds, as verified by latency tests conducted at SFO Terminal 2.

Limitations and Known Constraints

One Stop is intentionally narrow in scope. It does not serve connecting passengers—only those departing on an originating flight. Infants under two years old, passengers traveling with medical devices requiring manual inspection (e.g., insulin pumps), and individuals flagged by CBP’s Automated Targeting System (ATS) are systematically excluded from One Stop lanes, regardless of PreCheck status. As of June 2024, the program remains unavailable at New York JFK, Chicago O’Hare, and Atlanta Hartsfield-Jackson—the three busiest U.S. airports—due to infrastructure constraints and legacy checkpoint layouts incompatible with the required kiosk-to-lane proximity (minimum 8.5 meters, maximum 12.2 meters).

Another constraint is vendor dependency. CLEAR’s participation is contractual and expires December 31, 2025; if not renewed, One Stop would lose biometric verification capability at all current locations. Similarly, Delta’s exclusive integration of SkyMiles data means American Airlines passengers at DFW experience 22% lower RCI scores on average than Delta flyers at the same airport, per internal TSA equity assessment (Report TSA-EO-2024-009). This disparity has prompted congressional inquiry—House Committee on Homeland Security Letter #HSC-2024-112 requested documentation on ‘algorithmic fairness controls’ in May 2024.

Future Expansion Plans and Legislative Outlook

TSA’s FY2025 budget request allocates $42.7 million specifically for One Stop scaling, targeting seven additional airports: Seattle-Tacoma (SEA), Minneapolis-St. Paul (MSP), Phoenix Sky Harbor (PHX), Boston Logan (BOS), Denver International (DEN), Philadelphia (PHL), and Fort Lauderdale-Hollywood (FLL). Implementation timelines hinge on Congressional appropriation and completion of Environmental Assessments (NEPA) required for new kiosk installations. Legislation pending in the Senate—S.2104, the Aviation Security Modernization Act—would codify One Stop as a permanent program and mandate annual public reporting on racial, age, and nationality-based RCI distribution. As of June 2024, the bill has cleared committee markup with bipartisan support but awaits floor vote.

For travelers seeking efficiency, One Stop delivers measurable time savings—but only if they fly the right airline, from the right airport, with the right underlying credentials. Its value isn’t in universal access, but in precision. It represents a shift from categorical trust (‘you’re approved’) to contextual assurance (‘you’re safe *right now*, for *this* flight’). That distinction matters operationally, ethically, and legally—and explains why it remains confined to just four airports despite demonstrable results. As TSA Administrator David Pekoske stated in his March 2024 testimony before the Senate Commerce Committee: ‘One Stop isn’t about replacing PreCheck. It’s about making PreCheck faster, fairer, and more adaptive—without adding another form, fee, or federal adjudication step.’

Travelers should verify participation status directly through their airline’s app—not third-party websites—as integrations change frequently. Delta’s app, for example, added One Stop support for Medallion Status members in April 2024, expanding eligibility beyond PreCheck holders to include Diamond, Platinum, and Gold Medallion members who’ve flown ≥ 25,000 miles in the prior 12 months—even without PreCheck. This tiered access underscores the program’s reliance on commercial data over government vetting.

From a guidebook author’s perspective, recommending One Stop requires specificity. It is not a destination amenity like a lounge or fast-track immigration; it is a conditional, transient advantage tied to precise operational conditions. Its utility vanishes at non-participating airports, with non-participating carriers, or when technical failures occur—as happened during a 47-minute system outage at LAS on April 12, 2024, documented in TSA Incident Report #LAS-2024-0412. During that event, all One Stop lanes reverted to standard PreCheck protocols, with no passenger notification beyond altered LED signage.

Ultimately, One Stop reflects a broader trend in aviation security: moving away from static, blanket approvals toward fluid, data-informed judgments. Whether this model expands depends less on technology readiness than on policy choices around data reuse, vendor neutrality, and equitable access. For now, it remains a tightly controlled experiment—one that works exceptionally well, but only where and when the stars align.

The program’s success hinges on transparency, not marketing. TSA does not advertise One Stop in airports; no signage mentions fees or benefits. Instead, effectiveness emerges from engineering rigor: sub-second biometric matching, millimeter-precise scanner calibration, and deterministic lane routing logic. These are the unglamorous foundations that make 6.7-minute waits possible—not slogans or loyalty points.

For frequent domestic flyers on Delta, American, or United, checking eligibility takes 17 seconds: open the airline app, tap Account > Privacy Settings > ‘Enhanced Security Coordination,’ and ensure the toggle is green. No form. No fee. No waiting. Just physics, policy, and precisely synchronized hardware—all working in concert, one flight at a time.