Age Verification Just Won

Added: 2026-05-13

[00:00:00]Something happened to the internet in the last 12 months and most people missed it completely. Not because it was hidden, not because it happened in secret. It happened in courtrooms and parliaments and government offices on every single continent and it was announced in plain language with press releases and legal filings and public debates.

[00:00:16]But the average person scrolling through their feed never connected the dots, never saw what was being assembled around them, never realized that piece by piece, vote by vote, ruling by ruling, the internet they grew up with, open, anonymous, borderless, was being replaced with something entirely different. And now, in 2026, the transformation is complete enough that we need to stop and say it plainly. Age verification just won. And what that means for your privacy, your freedom, and your future online is something every single person watching this needs to understand right now.

[00:00:48]Let us start with the United States because the legal earthquake that happened there in June 2025 changed everything and barely made headlines outside of legal and tech circles. The case was called Free Speech Coalition versus Paxton. Texas had passed a law, House Bill 1181, requiring any website whose content was more than 1/3 sexually explicit material to verify that every single visitor was over 18 before granting access.

[00:01:13]Not just minors, every visitor. Adults who have never done anything wrong in their lives, were legally entitled to access legal content, were now being required to prove their age using government-issued identification just to enter a website.

[00:01:25]>> [music] >> Civil liberties organizations challenged the law all the way to the United States Supreme Court arguing that requiring adults to identify themselves in order to access constitutionally protected speech was a fundamental violation of First Amendment rights. The Supreme Court disagreed. In June 2025, the court upheld Texas's law under intermediate scrutiny ruling that the state's interest in protecting minors from explicit content was sufficient to justify the burden placed on adults.

[00:01:51]The American Civil Liberties Union called it a direct blow to decades of settled precedent protecting adults right to access lawful content online without being forced to identify themselves.

[00:02:01]And they were right because this ruling did not just affect one website or one state. It sent a signal to every state legislature in the country. Age verification is constitutional. Go ahead. [music] Pass your laws.

[00:02:13]The Supreme Court just gave you the green light. And pass them they did.

[00:02:17]By the time the ruling came down, roughly half of all US split states had already enacted or were actively advancing some form of mandatory age verification law for online content or social media. Nine states saw their laws take effect in 2025 alone.

[00:02:31]Nebraska enacted its Parental Rights and Social Media Act in May 2025 >> [music] >> requiring social media companies to verify the age of all users and obtain parental consent for anyone under 18 with fines of up to $2,500 per violation. Ohio passed the Ohio Innocence Act in June 2025 requiring websites to verify user ages to prevent minors from viewing harmful content with enforcement beginning in September 2025.

[00:02:56]Virginia amended its Consumer Data Protection Act to limit users under 16 to 1 hour per day on any single social media application without parental consent. And that law went into effect on January 1st, 2026. California enacted AB 1043 requiring age entry when setting up new devices taking effect January 2027.

[00:03:16]Tennessee, Missouri, New York and more had already passed their own versions in prior sessions.

[00:03:21]During a single legislative session in 2025, nearly 30 bills were introduced across 18 states attempting to impose similar restrictions. And more are coming in 2026 with proposals ranging from California's sweeping AB 1709 which would force every user regardless of age to verify their identity before accessing social platforms all the way to Alabama's proposed bill targeting any online service that uses algorithms to deliver content to users under 16.

[00:03:47]The numbers are staggering. 25 states have now enacted some form of age verification law covering platforms ranging from adult content sites to online gaming services to social media apps. The patchwork is enormous, the requirements wildly inconsistent from state to state, and the compliance burden on companies operating nationally is immense. Some states require government ID, others accept credit card verification, others mandate biometric checks, and the legal definitions of what counts as a covered platform differ enough that legal teams are scrambling to keep up.

[00:04:16]But underneath all of that inconsistency, the direction is unmistakable. This is not a trend anymore. This is not a debate that might tip either way depending on the next election cycle. It is a transformation already underway, legally ratified at the highest judicial level in the country, and accelerating with every new legislative session that convenes.

[00:04:34]Now step outside the United States because what is happening globally makes America's rollout look gradual by comparison. The United Kingdom's Online Safety Act, years in the making, endlessly debated, repeatedly delayed, had its child safety provisions come fully into force in July 2025.

[00:04:50]The law required platforms to deploy age verification measures to block minors from harmful material online. Ofcom, the UK's communications regulator, published its final protection of children codes of practice, laying out the acceptable methods.

[00:05:03]>> [music] >> Government-issued photo ID checks, biometric facial scans, credit card validation, and approved third-party age assurance services.

[00:05:10]>> [music] >> Platforms like Reddit began age-gating entire communities, not just adult content, but communities focused on mental health support, news from conflict zones, and other sensitive but entirely legitimate topics.

[00:05:22]The public reaction was fierce and immediate. A petition demanding repeal collected more than 420,000 signatures and forced a formal parliamentary debate. But the law held, and on the very first day of full enforcement, VPN usage in the United Kingdom surged by more than 1,400%.

[00:05:40]People were not protesting with signs in the streets. They were voting with their internet connections, scrambling to find a way to access the open web that had existed just the day before.

[00:05:48]Australia moved even faster and further.

[00:05:50]In December 2025, the Australian government enforced a law requiring major social media platforms, Facebook, Instagram, TikTok, X, YouTube, Snapchat, Reddit, Threads, Twitch, and Kick to block anyone under 16 from having an account. Not limiting their access, not restricting certain content, blocking them entirely from the platforms. Then in March 2026, age verification for adult content came into force, requiring users to verify their age via facial recognition, government ID scans, or credit card checks before accessing explicit material. Major adult content platforms, including Pornhub's parent company Aylo, chose to block all Australian IP addresses entirely rather than collect the sensitive identity data the law required.

[00:06:32]In the days following the March rollout, three VPN applications appeared among the top 15 most downloaded free apps on the Australian App Store in a single day.

[00:06:41]Nord VPN reported surging downloads across both iOS and Android. Proton VPN jumped from 19th to seventh on Google Play almost overnight.

[00:06:50]Electronic Frontiers Australia, the country's longest-running digital rights organization, warned that the government's age verification system was riddled with workarounds and that the government's likely response to those workarounds would be to restrict or ban VPN access altogether. The chair of Electronic Frontiers Australia stated publicly that there is a reasonably strong possibility that VPNs may be banned or restricted, which would, in his words, create extraordinary privacy, security, and online safety risks for the entire population. That is not a hypothetical scenario being discussed in the abstract. In January 2026, the UK House of Lords proposed requiring VPN providers to introduce age assurance for all of their users, meaning VPNs themselves would need to verify who was using them before allowing connections.

[00:07:35]The UK government launched a landmark three-month consultation running through May 2026, explicitly asking for public and expert input on whether VPNs should be age restricted entirely. Wisconsin introduced legislation that would have banned VPN use to bypass age verification laws before public backlash forced lawmakers to remove the VPN ban provision from the bill, though the age verification requirements themselves remained intact. Utah became the first US state to directly target VPN users in its age verification framework, drawing sharp public criticism from NordVPN, which called it a liability trap, and from digital rights advocates across the country who called it a spectacularly bad idea. The pattern emerging is unmistakable. First, they built the age verification walls. Then they noticed people going around the walls with VPNs.

[00:08:22]Now they're beginning to come for the tools that people use to go around the walls, and once those tools are restricted, there is nothing left standing between your identity and every platform you visit.

[00:08:32]Brazil joined the global movement in March 2026 when its ECA digital law came into effect, requiring parental or guardian consent for minors age 12 to 18 to download online applications. France has been requiring age verification on adult sites since June 2025 and is planning to restrict under 15s from social media by September 2026.

[00:08:54]Germany's ruling parties are actively in favor of banning minors from social media with a legislative decision expected by mid-2026.

[00:09:01]Spain is developing a national digital identity tool specifically designed to power age verification across online platforms. Turkey passed a law in April 2026 banning children under 15 from social media. Norway has a draft bill proposing to ban under 15s from social media, expected to pass later [music] in 2026. New Zealand is considering legislation mirroring Australia's under 16 social media ban. Canada is advancing bill S209. The European Union's Digital Services Act already requires very large platforms to implement age verification where risks to minors exist, and the EU rushed a digital ID based age verification application into early deployment, a scaled-down version of the planned EU digital identity wallet, citing urgent need. The EU wallet itself is set for full availability in 2026, creating a pan-European infrastructure where a single digital identity credential can be used to verify age across the entire continent, with the very real potential for mission creep into other forms of identity verification once the infrastructure exists.

[00:10:01]And here is where the story shifts from policy to privacy, and where the conversation gets very uncomfortable very quickly. Because the question you should be asking right now, the question that most political debates around age verification deliberately sidestep, is not whether governments want to protect children.

[00:10:17]Every politician who has ever voted for one of these laws has said, "Child protection is the reason." Nobody in a democratic legislature is going to openly argue for children's exposure to harmful content. That is not what this is really about.

[00:10:28]>> [music] >> The real question, the one that matters to every adult using the internet in 2026, is what happens to the data. What happens to the government ID you uploaded to prove your age? What happens to the biometric facial scan that a platform captured? [music] What happens to the credit card details submitted to a third-party verification service?

[00:10:45]>> [music] >> What happens to the permanent record that now exists linking your verified legal identity to your browsing history on that platform? Because that data does not simply disappear the moment your age is confirmed. It goes somewhere. It sits in a database somewhere. It passes through the systems of third-party vendors who are not governments, who are not regulated like governments, and who face exactly the same cybersecurity vulnerabilities as every other company that has ever suffered a breach. This is not theoretical. In October 2025, a breach of a third-party vendor used by Discord exposed approximately 70,000 government ID photos. Real passports, real driver's licenses, real faces tied to real people who uploaded those documents because a platform told them they needed to verify their age. Those documents are now in the hands of whoever carried out that breach, and neither Discord nor the verification vendor can retrieve them. EFF activist Molly Buckley put it plainly and [music] correctly.

[00:11:38]The answer is not to ask people to pass even more of their most sensitive, most valuable data over to big tech companies whom we say we do not trust in the first place.

[00:11:47]In February 2026, verification service Sumsub disclosed a separate security incident. Persona, another major verification platform, came under scrutiny for its security practices around the same period. The identity verification industry has become one of the most concentrated honeypots of sensitive personal data on the internet, and it is being targeted by bad actors accordingly, with consequences that fall entirely on the ordinary users who had no real choice but to submit their documents.

[00:12:14]Beyond the breach risk sits the surveillance risk, which is deeper and more permanent. Before mandatory age verification, when you visited a website, that site knew your IP address, perhaps your browser type, perhaps a cookie if you had been there before.

[00:12:27]It did not know your legal name. It did not know your government ID number. It did not have your face on file. Age verification changes every single one of those things at once. Once you have verified your identity on a platform, your browsing activity on that platform can be permanently tied to your real-world legal identity in a way that was architecturally impossible before.

[00:12:46]And legal experts who work in this field every day have been honest about what happens to that data when law enforcement or government agencies come asking. Heidi Howard Tandy, a partner at Berger Singerman specializing in internet law, said it directly. [music] There is language in these platforms' terms of use policies that says, "If information is requested by law enforcement, they will hand it over.

[00:13:05]They cannot guarantee they will always be the only entity holding your information." Your baseline identity data, once submitted, is no longer under your control. That is not a warning from a privacy activist. That is a practicing attorney describing how these systems actually work in the real world. The Electronic Frontier Foundation has been fighting this wave of legislation across legislatures, regulatory hearings, and courtrooms throughout 2025 and into 2026.

[00:13:30]Their position is not that children's safety is unimportant. It is that age verification mandates do not actually achieve the stated goal while simultaneously causing enormous, well-documented collateral damage to everyone else. Because what the evidence actually shows is that age verification does not stop determined minors from accessing restricted content. [music] It does not eliminate exposure. It does not solve the underlying problem. It creates a speed bump and a low one at that. A teenager motivated to bypass an age gate has multiple straightforward routes available. Parents' account, an older sibling's credentials, a VPN, a friend in a country where the restriction does not apply, or simply finding an alternative site that has not yet implemented the block. Surveys consistently show that more than half of internet users who encounter an age verification prompt attempt to bypass it. Nearly 41% of all internet users globally report having been asked to verify their age online, and the majority of them tried to find a way around the requirement rather than comply.

[00:14:26]The verification wall stops the casual encounter, but rarely the determined one.

[00:14:30]And it never stops the most at risk, most motivated young users, the ones these laws are supposedly most urgently designed to protect. Meanwhile, every adult who values their privacy and their anonymity is forced to make a choice they should never have been asked to make. Submit your government identity to a private company or lose access to legal content on the open internet.

[00:14:48]In February 2026, Discord announced it was rolling out mandatory age verification globally, requiring users to submit video selfies or government-issued identification to confirm their age before accessing age-restricted content and communities.

[00:15:02]The announcement caused immediate and widespread alarm across the platform's enormous user base.

[00:15:07]Discord subsequently delayed the global rollout to the second half of 2026 following the public reaction, but the plan has not been withdrawn. Discord joins a growing and accelerating list of platforms that have concluded, whether under direct legal pressure or in anticipation of it, that they cannot continue operating in major markets without implementing identity verification for their users. The era of creating an account with just a username, an email address, and a password, the model that built the social internet as we know it, is ending. The internet that allowed you to be anonymous, that let you ask embarrassing questions without them following you, explore difficult topics without a record, join niche communities under a name you chose rather than your legal identity, and express opinions without your employer or your government knowing it was [music] you, that internet is being systematically dismantled, one platform at a time, one law at a time, one Supreme Court ruling at a time.

[00:15:56]The next frontier is already being mapped out in real time. Multiple US good states are already considering legislation that would extend age verification requirements to AI chatbots and conversational AI services.

[00:16:07]Australia's e-safety commissioner has proposed six new codes explicitly expanding age verification oversight to AI services, following documented reports of minors engaging in prolonged unmonitored interactions with AI companions for hours daily. The EU digital identity wallet, once fully deployed across all member states in 2026, creates the technical infrastructure to extend identity verification far beyond age checks to any context where a government determines that users should prove who they are before being permitted to access a service.

[00:16:36]>> [music] >> Proton CEO Andy Yen stated publicly that the global age verification push will mean the death of anonymity online, not an exaggeration for effect, but precise description of the destination this trend line points toward if it continues at its current pace without meaningful legal or political resistance.

[00:16:52]So, where does this leave you in 2026, navigating an internet fundamentally different from the one that existed two years ago?

[00:16:59]It leaves you with a responsibility to understand what has happened, not to panic, but to pay clear-eyed attention and make informed, deliberate choices.

[00:17:06]Use a reputable, independently audited VPN from a provider with a verified no-logs policy, and understand that the free VPN apps that surged to the top of app stores the moment age verification laws took effect are frequently funded by selling the data of the very users they claim to protect. You cannot solve a data privacy problem by handing your traffic to another company with worse privacy practices than the platform you were trying to avoid. Know which platforms now require identity verification and make conscious decisions about whether you are comfortable with the data practices of the third-party vendors those platforms route your documents through.

[00:17:42]Read or find reliable summaries of the terms of service you are agreeing to when you verify your age so you understand what you are actually consenting to and who has the legal right to access your information afterward. Support the organizations like the EFF and the ACLU that are actively fighting these laws in courtrooms right now and winning some of them because several age verification mandates have already been blocked on First Amendment grounds. And that legal fight is ongoing, consequential, and needs public awareness to sustain the pressure required to keep it going.

[00:18:11]Understand this above everything else.

[00:18:13]The goal of protecting children from genuinely harmful online content is legitimate and nobody serious disputes that. But the mechanism being deployed to achieve it, requiring every adult with an internet connection to hand their government identity to a private corporation in order to access legal speech, is not proportionate to the problem, has not been proven effective at actually protecting children, and carries costs that governments are systematically unwilling to be honest about in their public messaging.

[00:18:38]Your privacy is one of those costs. Your anonymity is one of those costs. The chilling effect on speech that occurs when people know that accessing certain content permanently identifies them to the platform, to the verification vendor, and potentially to law enforcement is a cost. The surveillance infrastructure being constructed under the banner of child safety, piece by piece, jurisdiction by jurisdiction, is a cost. The centralized databases of government ID documents being assembled and managed by private verification companies, companies that can be breached, sold, or subpoenaed are a cost.

[00:19:09]>> [music] >> And every single one of those costs is being paid by you right now whether you are aware of it or not, whether you consented to it or not, and whether anyone in power is prepared to admit it or not.

[00:19:19]Age verification, just one. The walls are up, laws are passed, the Supreme Court has ruled, platforms are complying, and infrastructure, once built, does not get dismantled easily.

[00:19:29]It gets expanded.

[00:19:30]What happens next depends entirely on how many people wake up to what winning actually cost.

[00:19:35]Because the internet that follows will be shaped by those who paid attention when it could have gone differently.