Age verification is not a requirement for every user, but still bad

Discord relies on algorithmic data analysis and third-party vendors to verify age, but clarified that not everyone will encounter explicit age verification.

The latest update from Discord’s security team seems to be a big step back from its earlier promise, though not much has actually changed. The controversial move will have every account set to juvenile by default, and while some will be required to verify their age using a face scan or ID, not everyone will.

This “clarification” was issued following mass rejection of moderation changes underway on the social platform. Discord says it has been using the system in the UK and Australia since late 2025 and is now rolling it out globally to meet regulatory requirements for online services.

Obviously, the need to perform an age verification check via face scan or ID upload only occurs if the user tries to do something that is only available for an adult account and is not yet age verified. Users can be passively age-verified while using Discord using information the app already has, but it won’t be possible for every user.

Discord seems confident that very few users will need to use its new facial scanning or ID verification system — most should be able to either communicate as a teen account or be passively verified. The company also confirmed that the third-party age verification services used were not involved in the 2025 data breach.

Even when the new services are used, Discord claims that facial scanning is done on the device and the data never leaves it before the age range is reached. Uploading the user ID collects the birth dates and then discards the image as well.

Discord claims that user accounts will remain anonymous and their identity will never be linked to your account. Of course, it will have to be vetted the old-fashioned way — in the legal system.

There are also other ways to determine age

This means that there’s a pretty good chance that Discord can identify exactly who you’re using, and many other aspects beyond face scanning and ID verification. Every time you use the app, device identifiers, IP addresses, and more are shared, plus you created an account with an email that likely came from a source like Google or Apple.

At the end of the day, companies like Discord already know everything they want about you, and a government subpoena will make them give it up without a fight. Unless you go above and beyond to protect your privacy with identity hiding services, scanning your face or handing over your ID won’t reveal anything that isn’t already known.

Which may be the point of Discord’s “clarification”. If you’ve gone to great lengths to hide who you are, and they can’t verify your age through other means, you’ll have to trust that violating your privacy to gain access to older parts of the service is respected.

Regulators pressure companies to handle sensitive information and violate user privacy in the name of age verification and child protection. It will soon be quite difficult to access the internet without going through some sort of identity check.

Apple can make it better for users

However, all hope for privacy is not lost. If there’s one company that could help bridge the gap between privacy-conscious users and data-hungry regulators, it’s Apple and its System API.

Apple can help limit the potential for privacy breaches

Perhaps growing global pressure will force Apple’s hand, or the company will see an opportunity to bring some privacy measures to a vulnerable area. We’ve seen this before with things like app tracking transparency – sometimes features are released for the net benefit of the user.

I’d rather trust Apple to handle this data privately than have every developer rely on random third-party vendors to process my identity. The problem is that Apple could also be held responsible for these age checks as the vendors wash their hands of responsibility and pass on the responsibility.

It’s a tough place to be, but as Discord and other social apps have shown, we need better options. If these age verification requirements are imposed on us, we need privacy guarantees that only Apple can provide.

Leave a Comment