Eurogamer’s coverage of Discord’s controversial age-verification rollout landed the same week regulators in three jurisdictions started publishing draft technical standards for how platforms should prove a user is over 18 without keeping a copy of the ID. That is the tension every “just upload your passport” flow ignores. Verifying an age is a one-second yes/no. Storing the document that proved it is a data-breach liability that lives forever.
Privacy-preserving age verification is a real category now. The seven apps below all support at least one of three techniques: zero-knowledge proofs, on-device face-age estimation, or verifiable credentials that hand the user a reusable token instead of leaving the document on someone else’s server. This is not a listicle of general ID apps. Every entry here has a shipped mode that returns “over 18” without persisting the underlying evidence.
What to look for in a privacy-first age check
- Data minimisation by default. The app returns a boolean and forgets the source. Anything else is a compliance box, not privacy.
- On-device processing. Face-age estimation and document scanning should run on the phone, not in a data center. Look for explicit “no image leaves the device” documentation.
- Reusable credentials. A one-time verification that hands you a signed token you can present again saves you from re-uploading a passport to every gaming platform.
- Verifiable revocation. If you lose the phone or the wallet, the credential should be revokable without you having to email support.
- Regulator alignment. UK Ofcom, EU eIDAS 2.0, and the emerging US state schemes all land in slightly different places. An app that publishes conformance is easier to trust.
- Open specifications. Anything built on ISO/IEC 18013-5 (mobile driver’s license) or the EU Digital Identity Wallet framework is auditable in a way proprietary flows are not.
Quick comparison
| App | Best for | Free plan | Starting price | Standout feature |
|---|---|---|---|---|
| Yoti | Consumer-facing age tokens | Yes | Free for users | Reusable digital ID |
| IDnow | Regulated financial contexts | No, business-only | Priced per verification | Trained-operator video calls |
| Onfido | High-volume platform onboarding | No, business-only | Priced per check | Global document library |
| Persona | Configurable identity flows | No, business-only | Priced per check | Tenant-configurable verification recipes |
| Ondato | EU-first compliance stack | No, business-only | Priced per check | eIDAS 2.0 wallet-ready |
| Veriff | Fintech and marketplace | No, business-only | Priced per check | Real-time deepfake checks |
| Sumsub | Crypto and travel | No, business-only | Priced per check | Reusable KYC across integrations |
The apps
1. Yoti — Best consumer-facing reusable digital ID
Yoti is the pick for individuals who want a phone-first age check that a growing list of services accept. The Android app scans a government ID once, runs a liveness check, and issues a reusable digital ID stored in the Yoti wallet. Any partner site that asks for age gets a signed “over 18” claim, not the passport. The face-age estimation mode does not even need an ID for many low-stakes flows.
Where it falls short: Coverage is best in the UK and improving in the EU and US. Some smaller platforms still ask for the underlying document even when the wallet claim is available. The Yoti wallet holds the document, so trust in Yoti’s own infrastructure is required.
Pricing:
- Free for individuals, forever
- Businesses pay per verification
Platforms: Android, iOS
Download: Yoti on Aptoide · Google Play
Bottom line: Pick this if you want one wallet on your phone that answers “am I over 18” to any partner without re-uploading anything.
2. IDnow — Best when a regulator is watching
IDnow built its business on video-ident, where a trained operator confirms your ID over a live call. That extra human step makes it the pick for banks and regulated brokers who need audit trails no automated flow can match. The Android app supports both video-ident and its lower-friction AutoIdent flow, which uses on-device liveness plus NFC passport reading.
Where it falls short: Overkill for a gaming platform’s age check. The video-ident slot times run into minutes and require a stable connection. The app is targeted at users being verified into a partner service, not general-purpose wallets.
Pricing:
- Free for end users when a partner covers the fee
- Businesses pay per verification
Platforms: Android, iOS, web
Download: IDnow on Aptoide · Google Play
Bottom line: Pick this when you are opening a regulated account and the platform pays for the higher-friction path.
3. Onfido — Best coverage for global document libraries
Onfido covers about 195 countries and 2,500 document types, which makes it the default choice for platforms with an international user base. The Android SDK is what sits inside third-party apps such as ride-share driver onboarding and neobank sign-ups. On the user side, that means the same Onfido flow appears inside many products, and the passport photo you take never leaves the encrypted session.
Where it falls short: There is no standalone Onfido consumer app. Verification happens inside partner apps. Reusable credentials are not the strong suit here.
Pricing:
- Free at the user-facing point of use
- Businesses pay per verification, with volume tiers
Platforms: Embedded inside partner Android and iOS apps
Download: No standalone consumer app; the SDK ships inside partner platforms.
Bottom line: Pick this when the platform onboarding you already onto uses Onfido, and you want a flow that supports the widest set of documents.
4. Persona — Best configurable per-platform verification
Persona lets platforms mix and match verification steps into a recipe. That configurability lands in the Android experience as a shorter flow when the risk is low and a stricter one when it is not. For an “over 18” gate on a social app, Persona can short-circuit to face-age estimation. For a payment threshold it can escalate to document + liveness.
Where it falls short: Persona is a business-side product. What you experience as a user is whatever the platform configured. Reusable credentials require both sides of a Persona integration to opt in.
Pricing:
- Free at the user-facing point of use
- Businesses pay per verification, tiered by recipe complexity
Platforms: Embedded inside partner Android and iOS apps
Download: No standalone consumer app; embedded inside partner platforms.
Bottom line: Pick this when the platform behind the age gate has clearly tuned the flow to the risk, and you would rather answer three questions than six.
5. Ondato — Best EU wallet alignment
Ondato built its compliance stack around eIDAS 2.0 from the start, which means the same Android flow that verifies an age today should slot into the EU Digital Identity Wallet in 2027 without re-onboarding. That forward compatibility matters most for platforms that would rather pick a partner once than migrate again in eighteen months.
Where it falls short: UK and US document coverage lags the pan-European stack. Consumer-facing brand recognition is thin compared to Yoti or IDnow.
Pricing:
- Free at the user-facing point of use
- Businesses pay per verification with EU-region discounts
Platforms: Android, iOS
Download: Ondato on Aptoide · Google Play
Bottom line: Pick this if you live inside the EU and want a stack that is ready for the wallet mandate the moment it lands.
6. Veriff — Best for real-time deepfake checks
Veriff built its liveness detection around deepfake and injection-attack resistance, which matters more every quarter as generative video quality climbs. The Android SDK does the liveness sample on-device and only sends a short signed proof to Veriff’s servers. For fintech and marketplace onboarding where a spoofed video is a real risk, Veriff is the pick.
Where it falls short: Consumer-side transparency about what is stored and for how long is thinner than Yoti’s. Not the right pick for a low-risk age gate.
Pricing:
- Free at the user-facing point of use
- Businesses pay per verification, priced above the market average
Platforms: Embedded inside partner Android and iOS apps
Download: No standalone consumer app; embedded inside partner platforms.
Bottom line: Pick this when the platform’s risk model treats a fake selfie as the most likely attack.
7. Sumsub — Best for reusable KYC across services
Sumsub publishes a reusable-KYC scheme that lets a user complete a full identity check inside one Sumsub-powered platform and then reuse the signed result with any other Sumsub partner. For crypto exchanges, travel platforms, and marketplaces that all pull from the same identity pool, that turns a five-minute onboarding into a five-second one.
Where it falls short: The reuse only works across Sumsub partners. Non-Sumsub platforms still trigger a full flow. Consumer-side control over the shared record is thinner than Yoti’s.
Pricing:
- Free at the user-facing point of use
- Businesses pay per verification, with credits for reuse
Platforms: Embedded inside partner Android and iOS apps
Download: No standalone consumer app; embedded inside partner platforms.
Bottom line: Pick this when the services you use are all inside the Sumsub network, and you would rather complete one KYC than seven.
How to choose
- If you want a personal wallet you carry between platforms: Yoti.
- If a regulator is watching the flow: IDnow.
- If the platform behind the gate serves a global audience: Onfido.
- If the platform tunes the flow per-risk: Persona.
- If the flow needs to be EU wallet-ready: Ondato.
- If the attack the platform fears most is a fake video: Veriff.
- If reuse across many services is the point: Sumsub.
Stay with an existing platform-native age check only if the alternative would break sign-in for millions of existing users and the data flows have been externally audited. Platforms that added an “upload your passport” flow last quarter should treat any of the seven above as an upgrade.
FAQ
Do these apps actually keep the ID document? Yoti, Ondato, and Sumsub can issue reusable claims without keeping the source document on the platform side. Onfido, Veriff, and IDnow retain some records for compliance retention windows that vary by jurisdiction. Always read the specific partner’s privacy policy, not just the vendor’s.
Is face-age estimation accurate enough for legal age gates? For under-16 versus over-18 the current best models hit tight enough error margins that regulators in the UK and Australia accept them for low-risk contexts. Anything close to the threshold falls back to a document check.
Can I refuse and still use the platform? Depends on the platform. Discord’s rollout uses age assurance where local law requires it, with fallbacks. Adult-content and gambling platforms typically cannot offer an anonymous fallback.
Is Yoti free forever? The consumer app is free. Businesses pay per verification. That subsidy is what keeps the wallet free at the point of use.
What is the EU Digital Identity Wallet? A mandatory EU-wide wallet standard rolling out across member states through 2027. It will hold verifiable credentials such as age, driver’s license, and university degrees, and let citizens present a claim without exposing the source data.
