Discord drama delays age verification debut until the second half of 2026
(2026/02/24)
- Reference: 1771963771
- News link: https://www.theregister.co.uk/2026/02/24/discord_drama_delays_age_verification/
- Source link:
Discord is delaying age verification checks for a little while after its plan inspired a lot of hand-wringing among the community. But it's not backing down.
Discord cofounder and CTO Stanislav Vishnevskiy said in a Tuesday [1]blog post that, okay, maybe the company messed up when it [2]announced it was going to verify the ages of users beginning in March and restrict unverified accounts from accessing potentially adult spaces.
"We've made mistakes. I won't pretend we haven't," Vishnevskiy said. "Many of you walked away thinking we're requiring face scans and ID uploads from everyone just to use Discord."
[3]
The Discord CTO said the company has no plans to do that, as we explained in our story earlier this month, "but the fact that so many people believe it tells us we failed at our most basic job: clearly explaining what we're doing and why. That's on us."
[4]
[5]
Discord's actual plans to verify users' ages isn't explicitly changing, the company said today. It's still going to use an automated system, and around 90 percent of users should never notice a change. The system will work out their age based on account signals, including the account's age, whether a payment method is on file, what type of servers a user belongs to, and other "general patterns of account activity." And that'll be it.
Messages, conversations, or posts are not reviewed as part of age determination, he said.
[6]
"Discord already runs safety systems that catch spam rings, prevent raids, and detect coordinated abuse, powered by our rules engine," Vishnevskiy explained. Age determination will work largely the same way, and will be done by internal Discord systems, not a third-party vendor.
When age verification is needed, Vishnevskiy noted, users will be able to choose from multiple vendors, all of which will be listed on Discord's website, and users will be able to review what methods they use, how data is handled, and the like.
Persona? Not grata
One age verification partner that won't be present in Discord's eventual rollout is Persona, which recently caught flack for reportedly exposing a front end on a government server. The researchers who exposed the opening [7]speculated that it was of a widespread conspiracy to turn identity verification data into a government-controlled people tracker.
Persona has been in communication with the researchers and has expressed gratitude to them for pointing out the exposed front end, but also disagreed with the way the researchers characterized their discovery in a [8]blog post published Tuesday.
[9]Discord says 70,000 photo IDs compromised in customer service breach
[10]OpenAI will try to guess your age before ChatGPT gets spicy
[11]Millions of age checks performed as UK Online Safety Act gets rolling
[12]Selfie-based authentication raises eyebrows among infosec experts
The company said that it has no active contracts with any US government agency, and said the website in question was a test environment set up as part of its ongoing effort to achieve FedRAMP authorization to sell its products to the US government. Persona told The Register that its plans with the US government are limited to workforce verification that would ensure the feds are hiring who they think they're hiring.
Discord noted in today's blog post that it had partnered with Persona when it was evaluating age verification partners, but only ran a brief test with the company in January that was limited to the UK. After the testing period concluded, Discord decided not to move forward with Persona as a partner.
"We've set a new bar for any partner offering facial age estimation, including that it must be performed entirely on-device, meaning your biometric data never leaves your phone," Vishnevskiy wrote. "Persona did not meet that bar."
[13]
Noting the word "including" in Vishnevskiy's statement, we asked both Persona and Discord if that meant there were other concerns with Persona's systems that inspired Discord's rejection. Persona told us that it didn't want to speculate on Discord's internal decision making. In a [14]post on X, Persona CEO Rick Song claimed the company does offer on-device facial scanning, suggesting there may have been other reasons for the rejection.
Discord plans to pull the trigger om the system in the second half of this year, the company said.
"We're listening. We'll get this right. And when we ship, you'll be able to see for yourselves," Vishnevskiy asserted. ®
Get our [15]Tech Resources
[1] https://discord.com/blog/getting-global-age-assurance-right-what-we-got-wrong-and-whats-changing
[2] https://www.theregister.com/2026/02/09/discord_demands_id_proof_of_age/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://vmfunc.re/blog/persona
[8] https://withpersona.com/blog/post-incident-review-source-map-exposure-non-production-subdomain
[9] https://www.theregister.com/2025/10/09/discord_photo_ids_leaked/
[10] https://www.theregister.com/2026/01/21/openai_bets_on_age_prediction/
[11] https://www.theregister.com/2025/08/04/millions_of_age_checks_performed/
[12] https://www.theregister.com/2024/07/08/selfie_authentication_security/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[14] https://x.com/rickcsong/status/2025864186707026361
[15] https://whitepapers.theregister.com/
Discord cofounder and CTO Stanislav Vishnevskiy said in a Tuesday [1]blog post that, okay, maybe the company messed up when it [2]announced it was going to verify the ages of users beginning in March and restrict unverified accounts from accessing potentially adult spaces.
"We've made mistakes. I won't pretend we haven't," Vishnevskiy said. "Many of you walked away thinking we're requiring face scans and ID uploads from everyone just to use Discord."
[3]
The Discord CTO said the company has no plans to do that, as we explained in our story earlier this month, "but the fact that so many people believe it tells us we failed at our most basic job: clearly explaining what we're doing and why. That's on us."
[4]
[5]
Discord's actual plans to verify users' ages isn't explicitly changing, the company said today. It's still going to use an automated system, and around 90 percent of users should never notice a change. The system will work out their age based on account signals, including the account's age, whether a payment method is on file, what type of servers a user belongs to, and other "general patterns of account activity." And that'll be it.
Messages, conversations, or posts are not reviewed as part of age determination, he said.
[6]
"Discord already runs safety systems that catch spam rings, prevent raids, and detect coordinated abuse, powered by our rules engine," Vishnevskiy explained. Age determination will work largely the same way, and will be done by internal Discord systems, not a third-party vendor.
When age verification is needed, Vishnevskiy noted, users will be able to choose from multiple vendors, all of which will be listed on Discord's website, and users will be able to review what methods they use, how data is handled, and the like.
Persona? Not grata
One age verification partner that won't be present in Discord's eventual rollout is Persona, which recently caught flack for reportedly exposing a front end on a government server. The researchers who exposed the opening [7]speculated that it was of a widespread conspiracy to turn identity verification data into a government-controlled people tracker.
Persona has been in communication with the researchers and has expressed gratitude to them for pointing out the exposed front end, but also disagreed with the way the researchers characterized their discovery in a [8]blog post published Tuesday.
[9]Discord says 70,000 photo IDs compromised in customer service breach
[10]OpenAI will try to guess your age before ChatGPT gets spicy
[11]Millions of age checks performed as UK Online Safety Act gets rolling
[12]Selfie-based authentication raises eyebrows among infosec experts
The company said that it has no active contracts with any US government agency, and said the website in question was a test environment set up as part of its ongoing effort to achieve FedRAMP authorization to sell its products to the US government. Persona told The Register that its plans with the US government are limited to workforce verification that would ensure the feds are hiring who they think they're hiring.
Discord noted in today's blog post that it had partnered with Persona when it was evaluating age verification partners, but only ran a brief test with the company in January that was limited to the UK. After the testing period concluded, Discord decided not to move forward with Persona as a partner.
"We've set a new bar for any partner offering facial age estimation, including that it must be performed entirely on-device, meaning your biometric data never leaves your phone," Vishnevskiy wrote. "Persona did not meet that bar."
[13]
Noting the word "including" in Vishnevskiy's statement, we asked both Persona and Discord if that meant there were other concerns with Persona's systems that inspired Discord's rejection. Persona told us that it didn't want to speculate on Discord's internal decision making. In a [14]post on X, Persona CEO Rick Song claimed the company does offer on-device facial scanning, suggesting there may have been other reasons for the rejection.
Discord plans to pull the trigger om the system in the second half of this year, the company said.
"We're listening. We'll get this right. And when we ship, you'll be able to see for yourselves," Vishnevskiy asserted. ®
Get our [15]Tech Resources
[1] https://discord.com/blog/getting-global-age-assurance-right-what-we-got-wrong-and-whats-changing
[2] https://www.theregister.com/2026/02/09/discord_demands_id_proof_of_age/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://vmfunc.re/blog/persona
[8] https://withpersona.com/blog/post-incident-review-source-map-exposure-non-production-subdomain
[9] https://www.theregister.com/2025/10/09/discord_photo_ids_leaked/
[10] https://www.theregister.com/2026/01/21/openai_bets_on_age_prediction/
[11] https://www.theregister.com/2025/08/04/millions_of_age_checks_performed/
[12] https://www.theregister.com/2024/07/08/selfie_authentication_security/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aZ4tk8f-Pt9WePe5SnZGfQAAAAM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[14] https://x.com/rickcsong/status/2025864186707026361
[15] https://whitepapers.theregister.com/
Re: Ffffft
Anonymous Coward
The least expensive way to get a government (any goverment) the data is to run your connections through a pair of back-to-back proxies that communicate between themselves via http. Encrypted -> proxy -> unencrypted -> proxy -> Encrypted -> server. Then just span the switch ports carrying the unencrypted traffic and no-one will ever know. Put the proxys and switches in a 1/4 rack on a different row and no-one will be the wiser.
> Discord plans to pull the trigger om the system
cyberdemon
Well, at least El Reg hacks haven't been subsumed by the auto-autocomplete cancer
Well, at least we have 4ish months to get off Discord
Rob F
Don't be surprised if you see a surge in development on Discord-like Open Source, run your own server alternatives, in the next 4 months.
4months to do a Sellafield
Yet Another Anonymous coward
Shit it looks like Palantir are bad PR -Announce we will now support "Fluffy Bunny Solutions" for our age-verification system (*)
* Fluffy Bunny Solutions is a wholly owned subsidiary of Beelzebub (Hades) Ltd
** Beelzebub (Hades) Ltd is a wholly owned subsidiary of Palantir
Ffffft
This changes NOTHING, just delays it a bit to get it out of the current news cycle.
And gives Persona time to set up some shell companies.