An EU age-verification app launches this week. Ursula von der Leyen called it a free, easy tool to shield children online.
What the app does
The European Commission has released an open-source application designed to prove a user's age without handing over personal data. Users can verify themselves with an electronic ID system or by scanning a passport or national identity card. The app only reports whether someone is old enough — it doesn't keep names, birth dates or ID numbers, the Commission says.
On a smartphone the app will send the age-proof directly to a service. On a desktop or laptop, a visitor scans a QR code presented by the site they want to access. Platforms never get the original document or the underlying identity file. They receive just a cryptographic confirmation that the person meets the age limit for a given category of content.
The Commission built the tool to run on phones, tablets and PCs and to work across the whole EU. It's available in source code form, so companies can reuse the technical solution provided they meet the Commission's privacy standards and put in place the same approach across member states.
Why Brussels pushed for a common system
European Commission president Ursula von der Leyen said a harmonised approach was needed so children's protection online matches protections offline.
Brussels says a single technical approach will stop firms dodging obligations and make it simpler for people to prove their age on different sites.
She told reporters the app removes excuses for platforms that have resisted building secure age checks. "Europe offers a free and easy-to-use solution that can protect our children from harmful and illegal content," von der Leyen said.
The move ties into the Digital Services Act, which took effect in 2024 and places duties on very large platforms — defined by the EU as those with more than 45 million monthly users inside the bloc — to address systemic risks including child safety. Those platforms already face requirements to reduce exposure of minors to damaging material; the new app is intended as a shared technical way to meet parts of that obligation.
How it works in practice
People download the app, accept terms and conditions, and set up a PIN or biometric lock for quick reuse. To prove age they either connect via an electronic identification system where available or present a passport or ID card for biometric verification. The verification event produces a yes/no assertion about age, not a file of personal data.
When a user later wants to access age-restricted content, the site asks for proof. Desktop users point their phone camera at a QR code shown on the site. Mobile users get the confirmation pushed from their device to the service. Either way, the original document isn't shared with the platform.
The Commission admits the system won't block every workaround — for example, an adult could still lend a phone to a child. If an adult lends a device to a minor then the system won't help. But the point of a common standard, officials say, is to raise the technical baseline and make large-scale evasion harder to sustain.
Adoption and the role of member states
Rolling the app out across the EU will need national choices. Member states can integrate the app into national digital wallets or build independent apps that use the same technical protocol. That means countries with existing electronic ID systems may connect theirs, while others may prefer to run the Commission's reference implementation directly.
Integration will vary. Some states have well-established eID frameworks that make linkage straightforward. Others will face work to connect databases, adjust legal frameworks and brief citizens. The Commission's approach is deliberately flexible so nations can follow local rules while still relying on a single European technical method.
Privacy, security and sceptics
Privacy advocates have long been wary of systems that link online behaviour to identity documents. The Commission is pitching the app as a privacy-preserving alternative: only an age flag leaves the user's device. Being open source makes the code auditable, supporters say, so flaws or privacy risks should be easier to spot and correct.
Still, questions remain about implementation and oversight. Being open source won't replace real security work: phones can be hacked, and any extra kiosks or third-party plugs could create more weak spots for attackers. And the success of the technical fix hinges on legal duties for platforms to demand proof in the first place.
That legal angle is crucial because the app alone doesn't force services to check ages. The Digital Services Act sets obligations for the largest platforms to tackle systemic risks; the Commission hopes member states and regulators will push companies to adopt the new tool where appropriate. Enforcement and penalties under the DSA create the carrot-and-stick context for uptake, but the pace of enforcement will shape real-world use.
Private sector reuse and open-source benefits
By publishing the app as open source the Commission wants to lower the barrier for firms and start-ups to include robust age checks. Private firms can adapt the code to their interfaces and still comply, provided they put in place the same technical solution throughout the EU and respect privacy rules.
Because the code is public, outside researchers and security teams can inspect it and flag problems. That helps build trust among privacy-conscious users and watchdogs. It also allows local developers to fix bugs or extend the software for languages and accessibility needs that a one-size-fits-all commercial product might overlook.
Practical limits and next steps
Technical readiness is only one piece. For widespread adoption, platforms must recognise the app as an acceptable form of age verification. Regulators must clarify how the app fits into legal obligations. And member states must decide how to plug it into national systems, if at all.
Observers will watch whether very large platforms change signup and content-access flows to accept the app's confirmations. They'll also watch how quickly national authorities either endorse the Commission's reference app or build their own compatible versions.
Finally, the Commission acknowledges the tool isn't an impenetrable barrier. It's a shared plumbing — a way to make age checks more consistent across borders. Lawmakers, regulators and firms will have to pair the technology with policy and enforcement if the goal is to bring real gains in child safety online.
Related Articles
"Europe offers a free and easy-to-use solution that can protect our children from harmful and illegal content," said Ursula von der Leyen, President of the European Commission.
This article was created with AI assistance.
