Age verification for apps in 2026: what indie devs actually have to do

Your app probably needs age verification now — and "we'll deal with it later" stopped being an option in 2026.

The UK's Online Safety Act (age checks live since July 2025), Texas's App Store Accountability Act, Utah's App Store Accountability Act, and Louisiana's age-verification law have created a patchwork where the app stores, not just your app, are in the chain of responsibility. The EU's Digital Services Act adds risk assessments for services used by minors, and Australia's social-media age rules keep expanding.

What actually triggers an obligation

It's not "does my app have adult content." The triggers are things like: user-generated content or messaging, algorithmic feeds, loot boxes or gambling-adjacent mechanics, and operating in the UK, Texas, Utah, Louisiana, the EU, or Australia. A journaling app with no social features in most US states: probably fine. A social app with DMs available in the UK: you need a plan now.

The decision tree I wish someone gave me

1. Map where your users are. UK and the named US states are the strictest right now.
2. Classify your features. Social/UGC/messaging = highest risk. Pure utility with accounts = medium. No accounts, no UGC = lowest.
3. Pick your assurance level. Self-declaration of birthdate is the weakest and increasingly insufficient where laws bite. Document-based checks and age estimation are stronger but add friction and cost.
4. Never build verification yourself. Use a vendor (Stripe Identity, Veriff, Yoti, Persona, Jumio all have app-friendly options — pricing varies, check their current pages) or the platform-level checks where they exist.

The mistakes that get indie devs in trouble

• Assuming COPPA-style "under 13" thinking covers it (new laws target under-16s and under-18s).
• Collecting MORE data to verify age than the law allows you to keep (data minimization cuts both ways — verify, then delete).
• No paper trail: if a regulator asks, "we used a vendor" is not documentation. Keep your decision record.

I put together a drop-in age-verification widget plus a compliance guide covering the UK, Texas, Utah, Louisiana, EU, and Australia rules with the decision tree above, vendor comparison, and documentation templates: https://8286544375711.gumroad.com/l/age-verification-kit

Disclosure: that's my $29 product. Everything in this article stands alone — the kit is there if you want the implementation shortcut.