The EU’s Age Verification App Was Hacked Almost Immediately

There has been growing attention around the European Union’s new age verification app after security researchers showed that the system could be bypassed only shortly after it was introduced. The app was designed to help users prove they are old enough to access age-restricted websites without forcing them to share personal information with every platform they visit.

When researchers started looking at how the app worked, they found that some of the app’s security protections were stored directly on the device in files that could be changed. Instead of keeping sensitive protections locked behind stronger hardware-based security, parts of the system relied too heavily on local settings that could be edited. Because of that, someone with enough technical knowledge was able to change those files and get around the verification process much faster than expected.

The main reason the app was hacked in the first place appears to be that too much trust was placed in the user’s own device. Security experts pointed out that if important protections can be modified by the person using the phone, then those protections can become much easier to break. In this case, the weakness was not necessarily the idea of age verification itself, but the way the first version of the app handled its security.

After the flaw became public, the incident raised concerns about whether governments can create digital identity systems that balance privacy with real security. The European Commission responded by saying the issue was discovered in a demonstration version and that improvements would be made before wider release. Even so, the situation became an example of how quickly new digital systems can face criticism when security is not fully tested before the public sees them.

For many people, the controversy is not just about one app being bypassed. It also reflects a larger concern about governments introducing digital verification tools before they are fully ready, especially when those tools involve personal privacy and access to online spaces.

Sources:
European Commission: EU age verification initiative
Reuters: EU age verification app rollout
WIRED: Security researchers bypass demo app
Proton: Technical analysis of the security flaw
PC Gamer: Public reporting on the app bypass