"We cannot accept a world where every adult is expected to hand over ID as the price of going online," Proton CEO Andy Yen wrote, framing the current push for age checks as a tipping point between anonymity and an internet that functions like an ID checkpoint.
Andy Yen: "death of anonymity" and the ID checkpoint risk
In a blog post published Thursday, Andy Yen laid out a blunt trade-off: efforts that target minors by design will also identify everyone else. "You can't reliably identify minors without identifying everyone else first," Yen argued, warning that systems built to protect children will inevitably sweep in adults. "Age verification as is currently being proposed in country after country would mean the death of anonymity online," he added.
Yen framed the debate not as abstract policy but as a structural change — one that, if allowed to proceed in current forms, would move the web away from anonymity by default and toward routine identity disclosure for ordinary online activity. He was explicit about the stakes: "With age verification, we're on the cusp of, once and for all, requiring ID for every single person going online, for any reason, legal or not, adult or not."
Products and rollouts: Anthropic, Microsoft, Sony, and Discord
Yen's warning arrives as age verification moves from legislative debate to product reality. Anthropic has rolled out ID verification tied to certain personas in its Claude chatbot. Microsoft has warned UK Xbox users they will need to verify their age to keep using core social features. Sony has begun introducing age checks for PlayStation users this week. Discord, after considering the idea, reversed course in part because of a security incident: the company admitted that hackers accessed records, including government ID photos, tied to more than 70,000 users via a third-party age verification vendor.
Those product moves underscore Yen's central point: age checks are no longer hypothetical and are already being embedded into mainstream services and devices.
Security incidents and data-risk warnings
Yen emphasized the security consequences of aggregating sensitive identity data. "The more sensitive data you stockpile in privately held databases, the bigger a target it becomes for criminals," he wrote, adding that leaks are "more or less inevitable once that data is collected." The Discord incident — government ID photos and records exposed for tens of thousands of users through a third-party vendor — is cited in the blog as evidence that the risks Yen describes are materializing.
Privacy groups are making similar warnings. The Open Rights Group told reporters that mandatory age checks pose serious risks to privacy, data protection, and freedom of expression, particularly if verification systems become centralized or linked across services.
Proton's proposed approach: on-device checks, ephemeral answers, and open source
Because Proton's business centers on privacy-first services, Yen proposed a set of technical constraints he says would reduce those risks. He argued verification should occur on the user's device, use facial scans rather than uploaded ID documents, and discard data immediately after producing a simple yes-or-no answer to whether someone is old enough. That anonymized answer, he said, should be transmitted with end-to-end encryption and supported by open source code so observers can verify it performs as claimed.
Yen framed those design choices as minimally invasive: avoid central stockpiles of scanned IDs, limit the retained data to a non-identifying age decision, and make the process auditable by publishing code — measures he presented as necessary to keep verification from becoming a permanent repository of personal data.
Open Rights Group, consumers, and platform operators
- Open Rights Group: The group has warned that mandatory age checks threaten privacy, data protection, and freedom of expression, especially where systems become centralized or linked across services.
- Consumers: Yen's argument and the Discord breach together highlight a consumer risk — sensitive identity material provided for age checks can be exposed, and broad verification requirements could force adults to disclose IDs for routine online use.
- Platform operators (Anthropic, Microsoft, Sony, Discord): Several major providers are already testing or implementing age-verification measures; they face a choice between centralized data collection and the decentralized, on-device approaches Yen outlines, with attendant operational and security trade-offs.
Proton's CEO has tied an existential-sounding privacy concern to specific product moves and one prominent breach. The question left on the table is whether the industry and regulators will accept Yen's device-centric, ephemeral model — or continue down a path that, he warns, could make ID checks an everyday gatekeeper for the internet.
