How do I prove I'm over 18?
By FlirtAlly · October 4, 2026
How do I prove I'm over 18?
Key Facts
- The US Supreme Court ruled 6-3 that adults have no First Amendment right to avoid age verification, according to New America.
- Roughly 15 million adult US citizens lack a driver's license, and 2.6 million lack any government-issued photo ID, EFF reports.
- 43% of transgender Americans lack identity documents correctly reflecting their name or gender, according to EFF data.
- A 2022 CNIL analysis of six age assurance solutions found none satisfied reliability, coverage, and privacy simultaneously, per New America.
- 71% of Canadians have little or no trust that Big Tech will protect their personal information, Canada's privacy regulator found.
- Deepfake and synthetic fraud surged 3000% in the past year, according to Liminal's market report.
- Apple and Google announced zero-knowledge age-signal support in early 2025, with the EU targeting a ZKP protocol by 2026, New America reports.
Why Proving Your Age Online Is Getting Harder — and Riskier
A few years ago, proving you were over 18 online meant clicking a checkbox. Today, it increasingly means handing a stranger a photo of your driver's license — and hoping they handle it responsibly.
The mandates are spreading fast. The US Supreme Court's 6-3 ruling in Free Speech Coalition v. Paxton upheld Texas H.B. 1181, holding that "adults have no First Amendment right to avoid age verification," and nearly every US state now has an age verification law or pending bill. As of late 2025, half of US states and the UK require uploading an ID or face scan to view adult content, and a handful of jurisdictions extend the requirement to social media accounts, according to EFF reporting.
The problem is how those checks typically work. Unlike showing an ID in person — where you flash it and walk away — online verification often routes your documents through two or three different third-party partners, creating permanent digital records you "cannot unshare," as the EFF explains. Those verification companies, the same analysis notes, can be — and already have been — hacked.
And the alternatives aren't much better yet. A 2022 analysis by France's data protection authority examined six common age assurance solutions and found that none satisfied reliability, coverage, and privacy simultaneously, per New America's research. Academic researchers at the University of Strathclyde reached a similar verdict: no existing technology is at once effective, privacy-preserving, and affordable, according to their peer-reviewed scoping review.
Meanwhile, the current methods exclude real people. EFF documents significant access gaps among US adults:
- Roughly 15 million adult citizens lack a driver's license; 2.6 million lack any government-issued photo ID
- 18% of Black adults have no driver's license
- 43% of transgender Americans lack identity documents correctly reflecting their name or gender
- An estimated 100 million people worldwide live with facial differences that can confound face-scan systems
Public trust makes the whole picture harder. Polling cited by Canada's privacy regulator shows 71% of Canadians have "not much" or "no" trust that Big Tech will protect their personal information — and 86% say the same of social media companies, according to coverage of the OPC's position. The regulator itself puts it bluntly: "no one wants to give their ID to a porn site."
This is the tension every adult platform now navigates. Regulators reject self-declaration outright — the ICO states flatly that "self-declaration is not age assurance," per IAPP's workshop reporting — yet document uploads carry genuine privacy costs. That's why FlirtAlly treats its ID-based verification for the 18+ "Spicy" side as an honest trade-off: it meets what regulators expect for high-risk content, but it also means being upfront with users about what verification involves and why a checkbox isn't enough.
The encouraging news is that document-free methods — zero-knowledge proofs, on-device estimation, digital credentials — are moving from theory to deployment. Understanding why today's landscape is so fraught is the first step toward spotting the better options as they arrive.
The Document-Free Methods That Exist Today — and Their Trade-Offs
If you want to prove you're over 18 without handing over your passport, you technically have a few options — but each comes with a catch that's worth understanding before you choose one.
Self-declaration is the weakest option. Clicking a button that says "I'm 18+" is the classic age gate, and regulators have little patience for it. The UK's Information Commissioner's Office has stated plainly that "self-declaration is not age assurance", and Canada's privacy regulator notes it can be too easily circumvented in high-risk contexts. For anything sensitive, self-declaration alone won't cut it.
Facial age estimation is document-free — but not privacy-free. Some services can estimate whether you're over 18 from a selfie, with no ID upload required. The trade-off, according to EFF, is that this still means submitting your biometric data, and the technology is reportedly less accurate for Black, Asian, Indigenous, and transgender users. Once you've handed over a face scan, that's a threshold EFF argues is difficult to walk back.
Zero-knowledge proofs are the most promising method — and the least available today. ZKPs let you prove you're over 18 without revealing your identity, documents, or anything else. The system works as a "double blind": verifiers learn only yes or no, nothing more, as New America explains. The infrastructure is arriving quickly:
- Apple announced ZKP age-signal support in February 2025, aligned with W3C standards
- Google followed with its own ZKP framework in March 2025
- The EU targets a ZKP protocol within its Digital Identity framework by the end of 2026
Even so, industry analysis is candid that ZKP age proof "remains limited in theory and real-world adoption." Most people cannot use it today — there's no widely adopted, document-free way for an individual to prove age online in Canada or most other countries.
That's why platforms handling adult content still rely on traditional verification. FlirtAlly, for example, requires ID-based age verification for its 18+ "Spicy" experience — a requirement that matches what regulators currently expect, even as the industry works toward privacy-preserving alternatives. Until ZKPs become genuinely available, the honest answer is that every existing method involves a trade-off between convenience, privacy, and reliability.
What Regulators Actually Expect From Age Checks
Not all age checks are created equal. The difference between a trustworthy verification system and a privacy liability comes down to a handful of standards regulators have now made explicit — and knowing them lets you evaluate any platform that asks you to prove you're over 18.
