Google adding a way to prove age and identity with Google Wallet for websites and apps

Privacy and Security News
,
1

Google is implementing age verification within Google Wallet and claims they will open source the technology behind it: Zero Knowledge Proof (ZKP) technology.

Quotes from the article

Fast and private age verification

Given many sites and services require age verification, we wanted to develop a system that not only verifies age, but does it in a way that protects your privacy. That’s why we are integrating Zero Knowledge Proof (ZKP) technology into Google Wallet, further ensuring there is no way to link the age back to your identity. This implementation allows us to provide speedy age verification across a wide range of mobile devices, apps and websites that use our Digital Credential API.

We will use ZKP where appropriate in other Google products and partner with apps like Bumble, which will use digital IDs from Google Wallet to verify user identity and ZKP to verify age. To help foster a safer, more secure environment for everyone, we will also open source our ZKP technology to other wallets and online services.

Google Wallet will launch in 50 more countries

We’re also expanding Google Wallet to 50 more countries, allowing users to view and use digital passes in the app and on the web. This update brings the security and convenience of Google Wallet to countries where tap to pay is not yet available.

My question:

What’s everyone’s thought on this solution Google is proposing? They say it will be “private” and they will be open-sourcing the technology. Do you as a user believe this to be true or are too skeptical based on Google’s track record with privacy?

1 Like
2

did they?
Even then wouldn’t trust that claim Google being Google.
Like it’s to the point I would trust Apple to do a better job than Google would (Considering how well done and private Apple Pay is).

But of course they can certainly prove me or us wrong and that would be great.

2 Likes
3

I can only say that we’ll have to wait and see. Either they adhere to their word or what they create is neither private nor what they claim it to be.

I still don’t see this solution being private to Google. I think they will definitely know who you are, but every site that asks for your age won’t know your identity.

However, I could be wrong about how Google implements this.

4

Zero Knowledge Proofs are modern and powerful cryptographic tools. I don’t think Google would implement some backdoor into their service at this level.

What I am worried about is that there are other steps involved in age verification that would compromise anonymity. I imagine that Google’s implementation requires a Google account, a verified “secure” OS, and other identifiers, which would be used to defeat the entire purpose of ZKPs.

2 Likes
5

everybody should just use lightning/btc at this point smh.

6

why not monero?

7
8

https://cointelegraph.com/news/finnish-authorities-traced-monero-vastaamo-hack

9

If you read the report article linked in the page you linked, you’ll know that it wasn’t because of using Monero that they found the guy.

Please don’t share info claiming something when it’s really not that. This is what’s called misinformation.

There’s nothing wrong with XMR.

@Henry, do you want to set the record straight as well?

3 Likes
10

Google has in fact now open sourced their Zero Knowledge Proof project.

I don’t know, at least I’m glad to see the potential that an entirely FOSS solution to this problem could come about, similar how I can use Aegis to authenticate for a Big Tech account instead of using one of their authenticators. We shall see.

2 Likes
11

I think this is good news. Even if Google’s implementation requires a Google account or forces other invasive things onto the user, people can fork the code and make a more private app.

Let’s hope the EU won’t mess this up by criminalizing privacy…

2 Likes
12

https://www.ghacks.net/2025/07/28/europes-age-verification-proposal-under-flak-for-google-dependency/

Content:

Age verification continues to be a hot topic in several regions and countries, including the European Union. The main question surrounding various solutions is whether age verification checks should be implemented to block access to certain content for (mainly) minors.

Critics argue that age verification systems have issues, including privacy issues, high implementation costs, that they may be ineffective and that there is potential for overreach and censorship.

The European Union is working on an open-source Android application for age verification that is part of a wider Age Verification Solution Toolbox that members of the EU may use to develop national age verification solutions.

The main purpose of the application is to “obtain, store, and present an age verification attestation” and “share the proof of age attestation with online services to gain access”. The current implementation is “developed solely for the purpose of demonstrating the business flow”, according to the description on GitHub.

This did not protect it from criticism leveled against the solution. The primary concern of users, at least judging on the GitHub repository, is the project’s use of Google Play Integrity API and Apple App Attestation for verification of apps and devices.

The two established services may look like good candidates for such checks initially. They are operated by the companies behind Android and iOS after all. However, both are operated by companies from the United States, which would further “deepen the EU’s dependency” according to one critic of the proposed system and put identity verification in the hands of a foreign corporation.

Furthermore, the system would only work with apps and devices that can be verified through Google Play or Apple’s AppStore, and require that users use Google or Apple accounts on their devices and accept the terms of service of the American companies. While most do that, it would certainly impact users who jailbreak their devices or use custom roms. It would also prevent anyone from accessing certain services, if they do not use an Android or Apple phone, or prefer not to use one for the purpose of age verification.

Another user pointed out that an identity verification app already exists that would fit many of the requirements. The Dutch-based Yivi application can be used for age verification and does not rely on Google or Apple for the functionality.

The issue remains open at the time of writing and new comments are added regularly to it. Whether that will impact development of the app remains to be seen.

Now You: what is your take on age verification on the Internet?

4 Likes
13

Since you mentioned Yivi in your post, I looked it up to see how viable of an alternative it is. So far it seems better, though I’m not sure how they supposedly validate your information in a way that stays on the app but can be confirmed. I don’t know how this compares to the Zero knowledge proof thing that Google made.

Yivi’s main website doesn’t do much to explain how it works, but their developer page helps more.

14

Could you maybe use this quote box feature by pressing the ” button

Quoted content

for the article text? I got confused and thought you wrote that yourself for a second. :folded_hands:

I am kind of chaotic and nitpicky, don’t worry, it’s still quite clear that it’s from the article.

15

Out of all the big tech companies google is at least honest. They clearly state what they collect, how they collect it and you can delete it.

Apple promises too much, delivers too less.

But

Apple pay gives tokenized card data to merchants for payments.

Google Pay does not.

Google has to verify identity to comply with the authorities, the fact they are promoting zero knowledge tech for this is a HUGE precedent for the industry of identity verification.

If I have to use a wallet/payment app, I will go with apple pay on an apple watch.