Age verification on X – how does it work and do you need to do it?

Black and white X logo with blurry person holding a smartphone in the foreground
(Image credit: SOPA Images / Getty Images)

Age verification laws are being implemented in numerous countries around the world. As a result, a number of websites and apps started asking them to verify their age.

X is one of those sites, and along with the likes of Reddit, Spotify, and Bluesky, it required users to submit proof of age in order to see certain content and use its Grok AI chatbot – but age verification on X is complex to say the least.

NordVPN: Our #1 VPN overall

NordVPN: Our #1 VPN overall
We've tested dozens of VPNs, and we consider NordVPN the best for most people. It boasts super fast speeds, top-tier privacy and security, and great unblocking power.

What you'll get...

🚀 1,000+ Mbps speeds
🔑 Post-quantum encryption
📱 Protection for up to 10 devices
🌍 8,000+ servers worldwide
✨ Powerful extra features

Tom's Guide readers can get a 2-year deal for $3.39 per month ($81.36 up front pre-tax) and it includes a 30-day money-back guarantee.

What age checks does X have in place?

X requires users in certain countries – including the UK, US, and Australia – to verify their age due to online safety laws in those countries and regions.

As it stands, X users that have not verified their age will either not see content deemed 18+ on their timeline, or will see a message that reads: "Due to local laws, we are temporarily restricting access to this content until X estimates your age."

Screenshot of X age restriction message

(Image credit: Future)

X's Age Assurance policy lists the ways in which age verification can take place. One method is using "highly reliable signals" such as:

  • Self-attested age: If a user previously indicated that they are under 18
  • ID verification: previously completed X’s ID verification process
  • Legacy verified public figures: some users are verified through this process
  • Account creation date: Needing to be 2012 or earlier
  • Grey badged accounts: This indicates a government or multilateral organization official
  • Gold badged accounts: verified official organization accounts

X verifies users automatically using these signals, and no further action is required. Additional steps that don't require user action are email address and network-based connections.

Not every X user can be automatically verified in this way. X offers two methods for user-involved verification:

  • Facial age estimation: X's AI systems estimate age based on a live selfie
  • ID verification: Users can submit government-issued ID which X's AI systems use to estimate age

Woman sitting on sofa in living room at home holding credit card and scanning face id on a smart phone

(Image credit: Jajah-sireenut / Getty Images)

When age verification was first introduced for X users in the UK, reports suggested that user-involved age verification can only be accessed by subscribing to X Premium.

X's ID Verification policy states "ID Verification is available globally for X Premium" and doesn't make reference to age verification for non-subscribing users.

Despite this, some UK users on Reddit said in July 2025 that two types of ID are required, even after purchasing X Premium. Another user reported that the ID verification systems were "offline."

A Reddit user in Spain said even after verifying their ID and subscribing to X Premium, they are still receiving the "due to local laws" message.

This implied that anyone who fails the "highly reliable signals" part of X age verification was unable to verify their age at all. It's unclear if these p[problems are still persisting.

Screenshots of Reddit users warning about X's age verification systems

Image: Reddit users share their experiences of X's age verification systems (Image credit: Future)

Concerns over privacy and security

Even if an X user can verify their age, it's still a potential privacy risk. The data being handed over is highly sensitive and consequences could be catastrophic if there was a data breach.

People see it as an attack on privacy and there are strong opinions on either side of the debate.

X previously said it uses Au10ticx, Persona, and Stripe for ID verification, with Stripe being used for creators in the US. But Au10ticx is no longer listed in its ID Verification Policy & Privacy guidance.

Questions are being asked about how any data submitted is stored – and how securely.

X says "we collect an image of the ID and the selfie, which include face data and data extracted from the ID."

It says it "prioritizes your privacy" and adds that "third-party providers will also be bound by strict data protection standards."

In its age verification policy it says "Persona deletes images of the IDs, selfies and data extracted from the ID after 30 days. This helps X provide you an opportunity to appeal a verification decision and for X to review your appeal."

However it says "Stripe will retain the data as long as the user remains a creator."

Nothing is mentioned regarding the data previously collected by Au10ticx, and what has happened to it.

Is it possible to get around X's age checks?

As mentioned, demand for VPNs in the UK, US, and Australia has soared with the introduction of age verification. Users believe connecting to a server in another country could help them avoid age verification checks.

In the UK, OFCOM discouraged the use of VPNs to bypass checks. A UK government consultation is currently taking place, and age-restricting VPNs is an option being investigated.

US lawmakers have attacked VPNs, but the privacy tools haven't seen as much pressure in Australia. However X itself was targeted in Australia's under-16 social media ban. It was one of 10 platforms ordered to age check its users.

In the case of X, user reports suggested that VPNs alone can't unblock content on the app. There is an option within X's settings to change your location and if this is set to a country with age verification laws, content will be blocked regardless of whether you use a VPN or not.

Originally, it appeared as though changing this location was enough to avoid the checks and unblock content – but this no longer seems to be the case.

Experiences vary, but users who have had success in avoiding age checks and unblocking content report having to change their in-app location and use a VPN at the same time.

Disclaimer

We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone the illegal or malicious use of VPN services. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.

George Phillips
Staff Writer

George is a Staff Writer at Tom's Guide, covering VPN, privacy, and cybersecurity news. He is especially interested in digital rights and censorship, and its interplay with politics. Outside of work, George is passionate about music, Star Wars, and Karate.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.