Discord is officially resuming its global age verification rollout this June and July. Following a severe vendor data breach in December 2025 that exposed 70,000 government IDs, the platform halted its original plans to overhaul its security architecture. Now, the company is bringing the system back online with a completely new technological approach.
During this June and July rollout, flagged users will be prompted to confirm their identity using Google Wallet ID passes or standard credit card checks. The new testing phase strictly targets a small subset of the user base—estimated by Discord at under 10%—whose ages cannot be accurately confirmed by the platform’s internal behavioral algorithms.
Securing the Biometrics Locally
For users who opt into facial age estimation instead of providing financial credentials, the underlying technology has fundamentally shifted. Discord partnered with a new vendor, Incode, under one absolute requirement: all biometric data processing must happen locally on the user’s physical device. The platform is entirely abandoning cloud-based ID storage to prevent another vendor leak.
If a user chooses the face scan, the hardware executes the calculation directly on their phone or PC. Only the final verification token is sent to Discord’s servers, ensuring no raw image files ever leave the device.
The Teen Default Lock
If users trigger an age-restricted prompt and refuse these manual verification checks, they face immediate restrictions. These accounts remain permanently locked into a highly restrictive “teen default” setting. The limitations of this default experience include:
- A complete ban from accessing or joining any 18+ designated servers.
- Automatic blurring of all sensitive media attachments across the platform.
- Strict limitations on incoming direct message requests from unverified adults.
To address community frustration over server-wide age gates, Discord is actively developing a dedicated “spoiler channel” option. This new feature allows communities to hide mature, non-adult conversations like heavy political discourse without forcing everyone in the server to scan their ID or credit card.
Why On-Device Processing Changes the Privacy Standard
Discord’s pivot to localized biometric processing with Incode establishes a strict new template for digital platforms facing age assurance mandates. By refusing to let third-party vendors hold raw image files, Discord shifts the liability entirely off its own servers. This localized method directly answers the privacy concerns raised after the 5CA vendor leak in 2025.
It forces the broader age-gating industry to rely on cryptographic tokens rather than storing vulnerable physical ID photos in external databases. Users who trigger the system now have a clear technical guarantee that their physical appearance is not sitting in a server waiting to be compromised.