Are IDs now needed for Reddit?
A few months ago, Reddit’s CEO Steve Huffman said something pretty clear about user privacy: the platform doesn’t need or want to know who you are. Fast forward to now, and a chunk of users are being asked to upload a government ID or snap a selfie to prove their age. So which is it??
What’s happening
Reports started bubbling up in Reddit’s own privacy communities: users getting hit with an age-verification prompt, either a government-issued ID or a facial selfie, before they could access certain content. A lot of the people reporting it were in European countries that hadn’t seen this before, which is what made it feel like something new was quietly switching on. Reddit hasn’t officially announced a broad expansion. But the timing raised eyebrows, since it landed shortly after UK regulators fined the company roughly £14.5 million (about $19 million) for mishandling children’s data over a multi-year period.
How the verification actually works
According to Reddit’s own help documentation, the ID checks run through a third-party provider rather than Reddit itself. Reddit says it doesn’t receive or store the actual photos, only a confirmation of your age and verification status, and that the third party deletes the submitted info after a few days. That’s the privacy-preserving setup in theory: a middleman confirms you’re old enough, and the platform never touches your documents. Huffman has framed Reddit’s approach the same way, saying the goal is to confirm someone’s a real adult human, not to catalog their identity. He’s also described full government-ID verification as the company’s least-preferred method, behind options like passkeys and biometric checks.
Why users aren’t fully buying it
The skepticism showed up fast. In the discussion threads, people immediately started asking how much of their ID they could redact and still pass, the address, the ID number, anything beyond the birthdate. The underlying worry is simple: even if Reddit genuinely never sees your document, you’re still handing sensitive ID data to some company in the chain, and you’re trusting every link in that chain to delete what it says it deletes and never get breached. That’s not a Reddit-specific fear, either. Privacy advocates have warned for years that age-verification systems can force people to surrender sensitive personal info just to view legal content, and that users rarely get a clear picture of who ends up with their data or how long it sticks around.
The bigger picture
Reddit isn’t acting alone here, it’s responding to a wave of regulation hitting platforms worldwide: The UK’s Online Safety Act already pushed Reddit to verify UK users starting in mid-2025. The EU is building its own age-verification app, which member states are expected to roll out by the end of 2026. Notably, the EU’s design aims to confirm you’re over 18 without exposing any other personal details, which is closer to how this should work. In the US, a federal bill (the SAFE for Kids Act) was introduced in June 2026 that would require certain sites to verify visitors’ ages, on top of the 25-plus states that already have their own versions. So the direction is hard to miss. Age checks are shifting from rare to routine, and the real question isn’t whether platforms adopt them, it’s how. A system that proves your age and nothing else is a very different thing from one that wants your whole ID on file somewhere.
The takeaway
Keeping kids away from adult content is a legitimate goal, that part’s not controversial. The friction is in the method. “Confirm you’re an adult” and “upload your government ID to a third party” are not the same request, and the distance between them is exactly where your privacy is exposed. If one of these prompts shows up for you, it’s reasonable to slow down and ask the boring-but-important questions: who actually receives this, what do they keep, and for how long? “We don’t want your identity” reads great in a CEO’s blog post. It carries a lot less weight when the next screen is asking for your face.