How Does Age Verification Work Online?

How do apps know you are over 18? Explore age verification, selfie estimates, ID checks and privacy, with Mika vs Guru and official sources.

By Mika vs Guru · Sources checked 15 September 2026

Mika’s question is simple: “How does an app know I’m really 18?” Guru might say it just knows. The useful follow-up is: what information did the app use, and what did that information actually establish?

Watch: How do apps know you’re really 18?

Watch the episode on YouTube ↗. This companion guide explains the main approaches and the questions worth asking about them.

Asking your age and checking it are different.

A birthday form is a self-declaration: it records what you say. Age assurance is the broader task of establishing how old a user is, or whether they meet an age threshold. Verification uses evidence; estimation produces an estimate. Services can combine approaches.

In its UK guidance for highly effective checks at age 18, Ofcom includes methods such as photo-ID matching, facial age estimation and digital identity services. It does not consider self-declaration alone highly effective. The choice and implementation matter; the list is not a guarantee that every product works well. Read Ofcom’s explanation.

Three approaches you might encounter

1. Checking identity evidence

An age check can use a formal document, such as a passport, as evidence. Some systems match a person to their photo ID. Before providing a document, read which organisation receives it and what happens to the copy. The ICO describes document-based and other approaches.

2. Estimating age from a face image

Software can analyse a photograph and estimate age. That is an estimate, not a reading of a birth certificate. NIST’s 2024 evaluation found that performance varied with factors including image quality, age and demographic group. Its results concern the algorithms and images tested, not every system available today. Read the NIST evaluation summary.

3. Receiving an age result from another service

A site can ask a separate provider to confirm an age attribute and receive a yes/no answer. The ICO describes this as a way to reduce the personal information the site itself collects. It does not tell you how much information the provider needed to perform its check; read both explanations.

Does proving “over 18” mean sharing your whole identity?

It does not have to. The European Commission’s age-verification solution is designed to let a person prove they are over 18 without disclosing other personal details to the website. That is a particular design, not a promise about every app that asks your age. See the EU approach.

For a useful comparison, separate two questions: what does the age-check provider see, and what does the website receive? “Age confirmed” and “a copy of my document” are very different answers.

Five questions to ask before an age check

Use these prompts to read a service’s help page and privacy notice:

1. What is being checked? An exact birth date, an age range, or whether I am above a threshold?
2. Who performs the check? The app itself or a named provider?
3. What information does each organisation receive? Distinguish the evidence used from the result passed back.
4. How long is information kept? Look for a clear explanation of retention and other uses.
5. What if the result is wrong? Find the service’s support, review or alternative-check process.

These are practical reading prompts. The ICO’s UK guidance calls for collecting only the information needed for age assurance and controlling how it is used. The methods available and applicable rules depend on the service and country.

Try a little investigation.

Need a starting point? Use our five-question claim-checking guide or practise asking a more specific question. A clear “I haven’t established that yet” is more useful than borrowing Guru’s confidence.

Sources and further reading

• Ofcom: age assurance methods and effectiveness · UK regulatory context.
• ICO: age-appropriate application · Methods, third-party results and data collection.
• NIST: 2024 age-estimation evaluation · What its tested algorithms could and could not establish.
• European Commission: the EU approach to age verification · An example of proving an age threshold while limiting disclosure.

Keep the curiosity going.

Explore more surprising questions with Mika and Guru.