OPSEC 101 All guides

THE FULL KIT · AGEPROOF

Prove your age online without handing over a photo of your ID

Pass online age checks without uploading your ID: pick safer methods, share only "over 18" from your phone, and delete old copies.

Checked 7 Oct 2026 · 10 min read

This guide shows you how to pass online age checks while giving away as little as possible, from picking alternatives to an ID upload to cleaning up old copies. It takes about 45 minutes.

Why bother

Picture a ring-shaped cave with a locked door at the back. Peggy wants to prove she knows the password without saying it. Victor shouts "come out left" or "come out right", and she does it every time. After 20 rounds the chance she was guessing is about one in a million, yet Victor never hears the word. That is a zero-knowledge proof, and it exists today for age checks.

Instead, many sites still demand a full photo of your passport or licence, and those photos pile up. In October 2025 Discord said about 70,000 users' ID photos were exposed through a support contractor. In July 2025 the Tea app lost about 13,000 selfies and ID photos, which ended up on 4chan. A site that only needs "over 18" should never get your name, address and document number.

Before you start

Steps

1 Stop at the upload screen and look for other options

When a site asks you to "verify your age", don't upload anything yet. Scroll the whole screen and look for links like Try another way or Other methods. In the UK, Ofcom accepts open banking, facial age estimation, mobile network operator checks, credit card checks, digital identity services and email-based age estimation, not just ID photos.

Pick the option that reveals the least, roughly in this order:

  1. A wallet or reusable age credential (Steps 3 and 4): only "over 18: yes" leaves your phone.
  2. Facial age estimation done on your device: your face stays on the phone; the site gets an estimate.
  3. A credit card or mobile network check: confirms adulthood from an account you already have.
  4. Open banking: your bank answers yes or no, but learns which service asked.
  5. ID scan plus selfie: last resort only; follow Step 5 first.

You should see a list of methods. If an ID upload is the only option, go to Step 5 before continuing.

2 Use the on-device or card option (Discord as the example)

As of September 2026 Discord first estimates your age from account signals, and if it is confident you are an adult, it asks for nothing. If you are asked:

  1. Open the age check prompt Discord shows when you try an age-restricted server or setting.
  2. Choose facial age estimation. Discord says the short video selfie is processed entirely on your phone and only the estimated age is sent.
  3. If the estimate is wrong, retry once in good light. If it fails again, choose the credit card check: a temporary charge under $0.50, refunded within 14 business days.
  4. If you already have an ID in Google Wallet, or an age on your App Store or Google Play account, choose that instead. Google Wallet shares your age range and issuing country; App Store and Google Play share only an age range.

You should see a confirmation that your age group is set. Never send an ID photo to Discord support or an appeal chat as a shortcut: the 2025 leak came from exactly those tickets.

Steps 3 and on are in the full guide

  1. Set up a phone wallet ID
  2. Share only what the site needs, every time
  3. If an ID upload is the only way, shrink what you hand over
  4. Remove the ID copies already scattered around
  5. Ask services to delete the ID they hold

Open the full guide

Free with the opsec.101 newsletter: a few emails a month, unsubscribe anytime.

Watch the 60-second version →