The diplomatic bag explained in the simplest terms is a sealed container that carries official correspondence and documents between a government and its missions abroad, and under international law it cannot be opened or detained by the receiving state. This protection is codified in Article 27 of the 1961 Vienna Convention on Diplomatic Relations, which states that the bag shall not be opened or detained and may contain only documents or articles intended for official use . The bag is not a briefcase or a suitcase in the ordinary sense; it is a legal instrument whose inviolability rests on a functional bargain: states tolerate the sealed pouch because they need the same guarantee for their own communications.
The modern bag is mostly mundane. Brazil's foreign ministry notes that it is often little more than an ordinary package with visible external marks, and that electronic communication has reduced the volume of material that genuinely requires this channel . Yet the legal regime remains absolute in principle, and that absoluteness is the source of both its durability and its abuse. Understanding the bag requires understanding why a state would still need an inviolable physical channel in an age of encrypted email, and what happens when the privilege is exploited.
The Legal Architecture
What Article 27 Says
The Vienna Convention's treatment of the bag is brief but consequential. The sealed container must bear visible external marks of its character, meaning labels, seals, or locks that identify it as diplomatic material . The receiving state must facilitate its safe and rapid dispatch and must not delay it with formal or technical requirements . The diplomatic courier accompanying the bag has personal inviolability and must carry an official document showing status and the number of packages . These provisions are not merely technical; they create a chain of legal protections that begins at the sending ministry and ends at the mission's door.
The crucial distinction is between the bag's inviolability and the content restriction. The bag cannot be opened, but it also may contain only diplomatic documents or articles intended for official use . This is a functional definition, not a physical one. A cipher machine, a signed treaty, or a set of credentials qualifies; a diplomat's personal shopping does not. The sending state's regulations define what counts as official use, which means the regime depends heavily on self-restraint . The legal scholar Eileen Denza, in her commentary on the convention, notes that states attach prime importance to the bag's security precisely because wireless and telephone communications are vulnerable .
The Consular Difference
The diplomatic bag has a cousin with weaker protection. Under Article 35 of the 1963 Vienna Convention on Consular Relations, a consular bag enjoys inviolability, but with an important exception: if the receiving state has serious suspicion about its contents, it may request that the bag be opened in the presence of an authorized representative of the sending state. If the request is refused, the bag must be returned to its place of origin . This compromise reflects the judgment that consular communications are generally less sensitive than diplomatic ones, and it is a deliberate asymmetry rather than an oversight.
The distinction matters in practice. A state that wants to send a cipher machine or a classified legal opinion will use the diplomatic channel; a state sending routine consular paperwork may use the consular bag and accept the risk of a challenge. The 1980s effort by the International Law Commission to draft a unified convention covering both diplomatic and consular bags ultimately failed because Western governments argued that the existing regime already balanced the interests of sending and receiving states correctly, and that standardizing the weaker consular protections upward would invite abuse . The deadlock was never resolved, and the 1961 text remains the operative framework.
This legal architecture is old, but it is not archaic. It reflects a durable insight: diplomacy requires a channel that is immune to the receiving state's curiosity, because the alternative is that no state can communicate securely with its own diplomats. The bag is the physical embodiment of that principle, and its survival into the digital age is a testament to how difficult it is to replicate inviolability in software.
The Courier's Role
Who Carries the Bag
The diplomatic courier is the human link in the chain. Under the convention, a courier must be provided with an official document indicating status and the number of packages constituting the bag, and the courier enjoys personal inviolability . This means the courier cannot be arrested or detained, and the bag in the courier's custody cannot be opened or held. The courier is not a diplomat in the full sense; the immunity is functional and temporary, tied to the delivery of the bag rather than to the conduct of diplomacy more broadly.
Ad hoc couriers can be appointed for a single trip, and they receive similar protections until the bag is delivered . When the bag is entrusted to the captain of a commercial aircraft, the captain is not considered a diplomatic courier, but the bag retains its status and the receiving state must allow a member of the mission to collect it from the captain directly and freely . This unaccompanied mode is common for economic reasons, particularly for developing countries that cannot afford dedicated courier services on every route . It also creates a longer chain of custody and a greater need for physical security measures like wax seals, padlocks, and visible official markings .
The Identification Problem
How does a customs officer know that a package is a diplomatic bag and not an ordinary parcel with a forged label? The convention requires visible external marks, and in practice these are labels showing origin and destination along with official seals or locks . The courier's document provides corroboration. But the system relies on the honesty of the sending state and the vigilance of the receiving state's front-line officials, who must make split-second judgments without opening the package. This is a surprisingly thin evidentiary basis for an absolute privilege, and it is one reason the bag has been a recurring site of smuggling scandals.
The International Law Commission's later drafts proposed more detailed identification requirements, including special colors and tags for unaccompanied bags, but these were never adopted . The result is a regime that depends on mutual restraint rather than robust verification. When restraint breaks down, the receiving state faces a difficult choice: it can protest, it can expel diplomats, or it can attempt to scan the bag with technical devices, a practice whose legality remains contested . The convention prohibits opening and detention, but it does not explicitly address non-invasive scanning, and the silence has been read differently by different states.
The courier system, in other words, is not a solved problem. It is a compromise that works most of the time because most states most of the time have no incentive to cheat. The interesting cases are the exceptions.
Why the Bag Still Exists
The Encryption Paradox
If encrypted email exists, why send a physical pouch? The answer is that encryption solves confidentiality but not authenticity and not the problem of the endpoint. A foreign ministry can encrypt a message to its embassy, but the embassy's network can be penetrated, as Germany discovered when its foreign ministry was breached in 2016 and 2017 . A sealed bag delivered by a courier who never lets it out of sight provides a guarantee that no software can match: the receiving state's security services cannot read what they cannot open, and the sending state can verify that the contents arrived exactly as dispatched. The bag is a hardware security module made of canvas and wax.
Brazil's foreign ministry notes that the bag is now used mostly for original signed documents, such as treaties and letters of credence, rather than for routine correspondence . This is a narrowing of function but not an elimination. The documents that require a physical original are precisely the ones where the evidentiary chain matters most, and the bag provides a chain that is legible to lawyers and courts in a way that a digital signature infrastructure is not. The bag persists because the legal system still recognizes paper and seal in ways it does not yet fully recognize cryptographic verification.
The Abuse Record
The bag's inviolability creates an obvious temptation. If a state can send anything as long as it is labeled official, the definition of official becomes the only constraint, and that definition is supplied by the sending state itself. The ILC's records note that the bag's content restriction exists precisely to prevent misuse, but enforcement is weak because the receiving state cannot inspect the contents without violating the very principle it is trying to uphold . The result is a regime that runs on trust and punishes betrayal after the fact rather than preventing it in advance.
The ILC's failed attempt to draft a comprehensive convention on couriers and bags in the 1980s was, in part, a response to concerns about abuse. The draft articles proposed maximum size and weight limits to prevent the bag from becoming a commercial shipping channel, but the provisions were left vague because states could not agree on enforcement . The episode is instructive: the international community recognized the problem but could not solve it without undermining the inviolability that makes the bag useful in the first place. The status quo, with all its imperfections, was preferable to a weakened regime.
The digital age has not made the abuse problem worse in kind, but it has changed the stakes. A bag that carries a cipher machine or a signed treaty is a high-value target for intelligence services, and the physical channel is vulnerable to theft, coercion, and technical surveillance that does not require opening the seal. The convention's prohibition on acquiring knowledge of contents by technical devices without opening the bag was added to address this concern, but it is difficult to enforce . The bag remains inviolable in law; in practice, its security depends on the courier's tradecraft and the receiving state's discipline.
What the bag explained across its long history is a basic feature of international order: some channels must be protected from the very states that host them, or diplomacy becomes impossible. The bag is not efficient, and it is not secure in any absolute sense. It is a legal fiction backed by reciprocal interest, and it works because the alternative is worse.
Diplomatic Bag vs Digital Channel
The Comparison That Matters
The most useful comparison is not between the bag and an ordinary suitcase but between the bag and a secure digital channel. A diplomatic bag is inviolable by treaty; an encrypted email is inviolable by mathematics. The treaty protection is backed by reciprocity and the threat of retaliation; the mathematical protection is backed by computational difficulty. The bag can be stolen; the email can be intercepted and stored for future decryption. The bag's contents are limited by a legal definition of official use; the email's contents are limited by nothing but the sender's judgment. Neither is clearly superior, and the choice between them depends on what is being sent and what threat the sender fears most.
For documents that require a physical original and a verifiable chain of custody, the bag wins. For routine instructions that need to arrive in minutes rather than days, the digital channel wins. The foreign ministries that manage this trade-off well do not choose one over the other; they maintain both channels and use the bag for what it uniquely provides. The bag is not a relic, but it is a specialized tool, and the ministries that treat it as the default for all sensitive communication are paying a cost in speed that they do not need to pay.
What the Bag Cannot Do
The bag cannot protect against a determined receiving state that is willing to violate the convention. If a government decides that the intelligence value of a bag's contents exceeds the diplomatic cost of opening it, the convention offers no physical enforcement mechanism. The remedy is political: expulsion, reciprocal treatment, and reputational damage. This is a weak deterrent against a state that values the intelligence more than the relationship, and it is why the bag is most secure between states that have strong ongoing relationships and least secure between adversaries.
The bag also cannot adapt quickly. The convention's text was drafted for a world of paper and wax seals, and its categories do not map neatly onto digital storage devices, encrypted hard drives, or the other physical media that a modern ministry might want to send. A laptop containing classified files is arguably an article intended for official use, but the convention's drafters did not contemplate it, and the practice of sending such devices by bag is a pragmatic extension rather than a clearly authorized one. The bag explained in its legal text is a paper-era instrument; the bag in practice is being stretched to cover a world it was not designed for.
These limits do not make the bag obsolete. They make it a case study in how legal institutions persist by being reinterpreted. The bag will survive as long as states need a channel that is inviolable by agreement rather than by technology, and that will be as long as states distrust each other's technology more than they distrust each other's seals.