The European Commission has officially announced that its long-awaited age verification system for the internet is ready for deployment. Ursula von der Leyen, President of the European Commission, revealed during a press conference that the European Age Verification Solution (EAVS) will be made publicly available in the coming weeks. The system, which has been in testing for months, is designed to be a secure, anonymous, and cross-platform tool that allows users to prove their age when accessing age-restricted online services without revealing their identity.
The announcement marks a significant milestone in the EU's ongoing efforts to protect minors online, particularly in the context of the Digital Services Act (DSA), which imposes stricter obligations on platforms to safeguard children. Von der Leyen emphasized that the app is "completely anonymous," using a passport or national ID card to verify age. Once verified, the system generates a token that can be shared with websites or apps to confirm the user is over a certain age, without transmitting any personal information.
How the Age Verification App Works
The EAVS is built on open-source principles, meaning its code is publicly available for scrutiny and can be audited by privacy advocates and security experts. Users will download the app onto their smartphone or computer, then scan their government-issued ID document. The app uses advanced cryptography to extract only the age-related information—such as date of birth—and immediately discards the raw data from the ID. A cryptographic proof of age is then generated, which can be presented to third-party services.
This process ensures that the service provider never sees the user's actual ID or any other personal details, only a verifiable assertion that the user is above a certain threshold (e.g., 18 or 21). The system is designed to work across different platforms and browsers, making it a universal solution that could replace the numerous fragmented age-gating systems currently used by websites.
Von der Leyen stated that the accuracy of the verification meets the stringent requirements of EU child-protection regulations. The app has undergone extensive testing with volunteer groups and privacy organizations to ensure it cannot be exploited to deanonymize users. The Commission plans to release the source code and detailed technical documentation to encourage adoption by both public and private sector services.
Context: The Growing Pressure for Age Verification
The EU's move comes amid a global push for stronger age verification online. In the United States, several states have passed laws requiring age verification for access to adult content, social media, or other services, often with controversial results. Platforms like Pornhub have blocked access entirely in some states rather than implement verification systems that could compromise user privacy.
In Europe, the Digital Services Act, which came into full effect in February 2024, requires very large online platforms to conduct risk assessments and implement measures to protect minors. The DSA explicitly mentions the need for age verification tools that are proportionate and privacy-preserving. The EAVS is intended to be a reference implementation that member states and private companies can adopt, reducing fragmentation across the bloc.
Other European countries have experimented with their own systems. France, for example, has been testing a decentralized age verification solution using third-party providers. Germany has explored digital identity wallets that include age attributes. The EU's solution aims to unify these efforts under a single standard that respects the General Data Protection Regulation (GDPR).
Privacy and Anonymity: The Key Challenges
One of the biggest criticisms of age verification technologies is the risk of creating a surveillance infrastructure. Critics argue that even if the verification itself is anonymous, the aggregation of usage data could be used to build profiles of citizens. The EU Commission has attempted to address these concerns from the outset by making the app open-source and ensuring that no central database stores verification logs.
According to the technical specifications published alongside the announcement, the EAVS uses zero-knowledge proofs—a cryptographic method that allows one party to prove to another that a statement is true without revealing any information beyond the validity of the statement itself. In practice, this means the app can prove a user is over 18 without actually revealing their exact date of birth or any other identifier.
Despite these protections, privacy advocates remain cautious. They point out that the app still requires users to show a government ID to the app itself, which could be a point of vulnerability if the app's security is compromised. The Commission has promised regular security audits and a bug bounty program to minimize risks.
Impact on Social Media, Gaming, and Adult Content
The availability of a reliable, EU-endorsed age verification solution is expected to have far-reaching implications for various online sectors. Social media platforms like TikTok, Instagram, and Snapchat currently rely on self-declaration of age or AI-based age estimation. These methods are notoriously inaccurate, with many children under 13 bypassing restrictions. The EAVS could provide a more robust mechanism, though it also raises questions about accessibility for users without valid ID documents, such as refugees or homeless youth.
Online gaming platforms, many of which host age-restricted content such as gambling or violent games, are also likely adopters. The video game industry has struggled with age verification for decades, often relying on payment card verification, which excludes younger users who don't have credit cards. An anonymous, app-based system could streamline the process while maintaining privacy.
Adult content websites are another obvious use case. Several EU member states, including France, Germany, and the UK (though no longer in the EU), have passed laws requiring adult sites to implement age verification. The EAVS could become the de facto standard for compliance across the EU, potentially forcing large platforms like Pornhub and OnlyFans to integrate it if they want to continue serving European users.
Adoption and Next Steps
Von der Leyen said the app will be available for download from the European Commission's website and major app stores. The Commission is also working with member states to ensure that national ID cards and passports are compatible with the scanning technology. Some countries already have digital identity systems—such as Estonia's e-Residency or Belgium's eID—that could be integrated directly.
The timeline for mandatory adoption is still unclear. The DSA does not explicitly mandate a specific age verification tool; it requires platforms to assess risks and take appropriate measures. However, the existence of a free, privacy-preserving, EU-certified solution may make it harder for platforms to argue that Commercially available alternatives are too invasive or expensive.
In the coming months, the Commission will launch a campaign to educate citizens about the app and its benefits. They will also work with browser vendors to integrate support for the age tokens, potentially through Web standards like WebAuthn. The ultimate goal is to create a seamless experience where users can prove their age once and reuse that proof across many services without repeatedly scanning their ID.
The announcement has been welcomed by child safety organizations, though some have called for further safeguards against misuse. Industry groups representing social media and tech companies have expressed cautious optimism, noting that the technical implementation will be critical to widespread adoption. If the app proves to be secure and user-friendly, it could set a global precedent for privacy-respecting age verification—a problem that regulators around the world have been grappling with for years.
Source: The Verge News