Age checks coming to your OS

Three US states require operating systems to collect user ages. By 2027, you might scan your face or upload ID to prove you're an adult before using your computer.

California's law affects everyone

Tech companies rarely build separate systems for different states. California's age verification will likely roll out for billions of users worldwide, not just Californians.

What California's law requires

Starting in 2027, California's Digital Age Assurance Act requires Windows, macOS, Android, and ChromeOS to ask for ages during setup and share age ranges with apps.

Linux gets an exemption

California amended its law to exempt Linux and other open-source operating systems. The requirement still applies to macOS, Windows, phones, and tablets.

Four age brackets for apps

Your OS will share one of four age ranges with apps: under 13, 13-16, 16-18, or over 18. Apps must then comply with laws requiring different treatment of minors.

Three states lead the push

California's law takes effect January 2027, Colorado's in July 2028, and Illinois' in January 2028. Illinois' law applies to Linux, unlike the other two.

How verification might actually work

California's law only requires you to declare your age. But the EFF expects companies will demand credit cards, facial scans, or government IDs to avoid legal liability.

“While the law on paper doesn't require strict age verification, I think in practice compliance will look a lot more like age verification.”

Microsoft's verification system

Microsoft's age verification system will cover both unverified and verified ages. The verified option requires a facial scan or government document.

Federal law could expand nationwide

The proposed Parents Decide Act would require OS-level age checks in all states. Adults would have to provide their date of birth to set up any device.

Congress studying device-level checks

The Kids Online Safety Act would require the Secretary of Commerce to study the most feasible methods to verify age at the device or operating system level.

How apps will get your age

Apps will request your age range from the OS using an API. Google, Apple, and Microsoft are already implementing compliant APIs for their platforms.

Moving verification from sites to OS

PornHub has urged Apple, Google, and Microsoft to implement OS-level age verification. This would shift the burden from websites to operating systems.

Web browsers preparing for age checks

Google's Chromium and Apple's Safari support the Digital Credentials API to share government ID information with websites for age verification.

Open-source community fights back

GrapheneOS announced it will remain usable without requiring personal information or accounts. If devices can't be sold in a region due to regulations, so be it.

EFF pleased with exemption

The EFF says California lawmakers clearly responded to concerns from the open-source community. But it still opposes the concept of age-gating.

Two types of laws emerging

Some laws just ask for your age during setup. Others, like New York's proposed bill, could require proof via credit card, facial scan, or government ID.

The open internet at risk

The EFF warns that lawmakers with good intentions are writing broad laws that endanger anonymous, private, and secure access to information.

“The open internet as we know it allows people to access information anonymously, privately, and securely. It's in danger by lawmakers who have good intentions but are writing broad laws.”

Pushback is still possible

Aaron Mackey from the EFF says these laws aren't inevitable. He hopes people recognize the opportunity to push back against age verification requirements.