Apple has extended its age gate from the App Store to the operating system. From iOS and iPadOS 27.2, iPhones and iPads in a set of countries can prove the user's age with a selfie, which an "age estimation model" then evaluates, according to a support document the company published on 27 October.
Such proof is already mandatory in the United Kingdom, Australia, Brazil, South Korea, Singapore and the US state of Texas. The selfie is a new option in the UK, Australia, Brazil and Singapore. Apple has not announced it for Germany or most of the EU, though the bloc's forthcoming Kids Act makes a later rollout plausible. In the UK, Apple introduced age verification in the spring apparently without a clear statutory requirement to do so.
What is at stake is not a nuisance prompt. Without confirmed adulthood, automated filters block web content Apple deems undesirable and nude imagery, and the device stops being fully usable: Apple's document says the proof is required to install software updates and to change "certain security settings". App installation is then possible only through Family Sharing. In some regions, Apple may ask users to confirm adulthood before specific actions in their Apple Account.
The mechanism is the interesting part. The selfie needs an internet connection, because the age models run "both on the device and in Private Cloud Compute" — Apple's cloud for AI workloads, which the company markets with unusually strong privacy claims. Apple says the photo is therefore "accessible to no one — not even Apple", and that it is deleted after the age is confirmed and "not retained in any form".
The selfie is one option among several. Apple still accepts a credit card or certain identity documents. That matters legally: an age check that can be satisfied by a payment instrument or an ID is a different privacy trade-off from one that requires a face scan, and users in the affected markets will have to choose which they prefer to hand over.
Apple has been moving toward this for a while, and the direction of travel is regulatory rather than technical. Age assurance mandates are spreading across the English-speaking world and into EU law; the operating system is simply where they become unavoidable, because the gate now sits in front of the device rather than in front of a single app.
The open questions are the familiar ones. Age-estimation models misjudge faces, and the failure mode here is asymmetric: a false negative locks a legal adult out of updates and app installs, with no stated appeal path other than trying a different proof method. Apple has not published error rates for the model, nor said what happens to users whose appearance the system consistently misreads.
