Technologies

Welcome to the Era of Online Age Verification. Are You Ready to Identify Yourself?

The introduction of the UK’s Online Safety Act marks a shift in internet culture, the ripples of which are already being felt around the world.

Last Thursday morning I woke up to find I no longer had access to my messages on social network Bluesky. «You must complete age assurance in order to access this screen,» a pop-up notification told me.

It went on to say the local laws where I live mean that I need to verify I’m an adult to view mature content or send direct messages. I’m based in the UK, and the law Bluesky was referring to is the Online Safety Act, which came into force on Friday.

This piece of legislation requires web companies to ensure that people under the age of 18 don’t have access to harmful content, including porn and material relating to self-harm, suicide and eating disorders. If sites choose to allow this content, they must verify the ages of people using their platforms to confirm that they’re adults. Failure to do so could result in fines of £18 million or 10% of annual revenue, whichever is greater.

«Prioritising clicks and engagement over children’s online safety will no longer be tolerated in the UK,» Melanie Dawes, chief executive of regulator Ofcom, said in a statement. «Our message to tech firms is clear — comply with age-checks and other protection measures set out in our Codes, or face the consequences.»

Over the past few days, free VPNs shot to the top of the UK App Store charts as people have looked for ways to bypass the requirement to verify their ages. It should be noted that using free VPNs comes with it own set of risks, and isn’t recommended by online security experts.

The Online Safety Act might be a UK-specific law, but it affects companies based in the US and around the world, including Bluesky, Reddit, Discord, X, Porn Hub and Grindr — all of which have committed to «age-gating» features to protect young people from stumbling across harmful content.

It’s also emblematic of a bigger shift in internet culture, which is seeing age verification become a mainstream concern across the world. Increasingly, adults who want to keep accessing internet services, from mainstream social networks to porn sites, will have to prove their age. In other words, expect my Bluesky experience to be coming to the internet near you soon.

Earlier this month, the European Commission published an age verification app prototype that will help keep young people safe online in accordance with the EU’s Digital Services Act. We’re also starting to see the ripple effect in the US of the legislation the UK and EU have enacted, says Vaishnavi J, founder of online child safety consultancy Vys. Just last month, the US Supreme Court upheld a Texas law requiring porn sites to verify the age of all visitors.

«State laws, advocacy campaigns, and growing parental demand in the US are all converging around the need for age assurance,» said J, who previously worked in the policy teams at Meta and Twitter. «Combine that with rapid advances in the tech ecosystem, and it’s no longer a question of if the US adopts age verification, but how and when.»

Safety vs. privacy

The Wild West nature of the internet and the ability to be largely anonymous often blurs the lines between spaces occupied by children and adults in a way that doesn’t happen in the offline world. This means children are often exposed to content many would consider inappropriate or harmful. According to Ofcom’s own research, around 1 in 10 children in the UK between the ages of 8 and 14 have watched online pornography — an activity the new age verification rules are designed to prevent.

Making the internet safer for children might be necessary and admirable, but age verification policies have also come under fire from digital rights and privacy groups.

I’ve been covering the UK’s attempts to bring in age verification since 2016. The government at the time decided it was too difficult and ultimately decided not to push ahead with plans aimed at age-gating porn sites in 2019.

The main objection to the legislation was the same then as it is now. Asking people to share their government-issued identification with private companies poses a threat to their privacy.

«The British public is being forced to hand over sensitive personal data to unregulated age assurance providers if they want to have full access to platforms such as Reddit and Bluesky or to use dating apps such as Grindr,» said James Baker, head of programming at Open Rights Group, in a statement ahead of the Online Safety Act coming into force.

«The threats and harms of phishing and hacking are very real, and will cause people online harms,» he added.

Open Rights Group also criticized the fact that people aren’t being given the right to choose how they verify their age. A number of verification methods exist, including age estimation via video selfie (a method gaming platform Roblox announced it was introducing last week), banking or credit card checks, third-party digital ID services, mobile carrier checks or photo ID matching. It’s up to the individual service which method they want to adopt, which could leave people vulnerable to problematic privacy policies.

As with many internet rules, there’s always some level of tradeoff involved when making the online world safe. In many ways, the idea of age verification is «common sense,» Mariana Olaizola Rosenblat, tech policy adviser at NYU’s Stern Business School, wrote in a blog post this week. At the same time, she added, depending on regulations and methods chosen, age verification can introduce serious privacy, security and access risks.

«In some cases, the systems employed are so flawed that they fail to protect minors while also excluding adults who should have lawful access,» said Rosenblat. «Policymakers must understand and carefully weigh these tradeoffs before mandating age verification at scale.»

Many critics of age verification have also argued that verification will be ineffective due to the wide availability of VPNs and teens’ ability to circumvent any rules attempting to limit their internet use.

Whether age verification is truly effective at keeping kids safe online is a question that can only be answered as the Online Safety Act and similar legislation comes into force. In the meantime, I — and possibly you — will need to be prepared to prove our identities and our ages if we’re to continue using the internet in the way we’ve become accustomed to using it.

Technologies

Your Microsoft Passwords Will Vanish in a Few Hours. What to Do Right Now

Microsoft’s go-to password manager won’t be the same after Aug. 1.

It’s time to say so long to the Microsoft Authenticator app as we know it.

As of this Friday, Aug. 1, the app will no longer save or manage passwords, use two-factor authentication or auto-fill. And it won’t be your go-to password manager anymore, either. Instead of passwords, Microsoft is moving to passkeys — such as PINs, fingerprint scans, facial recognition or a pattern on your device’s lock screen.

Using passkeys is a safer alternative to the risky password habits 49% of US adults use, according to CNET’s password survey. However, Attila Tomaschek, a CNET software senior writer and digital security expert, prefers Microsoft’s new login over password habits that can risk your data being stolen.

There’s not much time to learn about passkeys or password manager, but we’re here to help. Here’s what you need to know to get started.

Microsoft Authenticator will stop supporting passwords on Aug. 1

Microsoft Authenticator houses your passwords and lets you sign into all your Microsoft accounts using a PIN, facial recognition like Windows Hello or other biometric data like a fingerprint. Authenticator can be used in other ways, such as verifying you’re logging in if you forgot your password, or using two-factor authentication as an extra layer of security for your accounts. In June, the company stopped letting users add passwords to Authenticator.

As of this month, you won’t be able to use the autofill password function. And starting Aug. 1, you’ll no longer be able to use saved passwords.

If you still want to use passwords instead of passkeys, you can store them in Microsoft Edge. However, CNET experts recommend adopting passkeys during this transition. «Passkeys use public key cryptography to authenticate users, rather than relying on users themselves creating their own (often weak or reused) passwords to access their online accounts,» Tomaschek said.

Why passkeys are a better alternative to passwords

So what exactly is a passkey? It’s a credential created by the Fast Identity Online Alliance that uses biometric data or a PIN to verify your identity and access your account. Think about using your fingerprint or Face ID to log into your account. That’s generally safer than using a password that is easy to guess or susceptible to a phishing attack.

«Passwords can be cracked, whereas passkeys need both the public and the locally stored private key to authenticate users, which can help mitigate risks like falling victim to phishing and brute-force or credential-stuffing attacks,» said Tomaschek.

Passkeys aren’t stored on servers like passwords. Instead, they’re stored only on your personal device. More conveniently, this takes the guesswork out of remembering your passwords and the need for a password manager.

How to set up a passkey in Microsoft Authenticator

Microsoft said in a May 1 blog post that it will automatically detect the best passkey to set up and make that your default sign-in option. «If you have a password and ‘one-time code’ set up on your account, we’ll prompt you to sign in with your one-time code instead of your password. After you’re signed in, you’ll be prompted to enroll a passkey. Then the next time you sign in, you’ll be prompted to sign in with your passkey,» according to the blog post.

To set up a new passkey, open your Authenticator app on your phone. Tap on your account and select «Set up a passkey.» You’ll be prompted to log in with your existing credentials. After you’re logged in, you can set up the passkey.

Other password manager alternatives

Since Microsoft will get rid of all of your passwords in two weeks, you’ll need a new place to store your passwords safely. Tomaschek has a few of the best password manager recommendations after testing and reviewing several.

The top recommendation is Bitwarden for its transparency. It’s open-source and audited annually. From a price perspective, the free plan lets you store infinite passwords across unlimited devices. The free plan also includes features most password managers would charge for, including password sharing and a username and password generator.

Bitwarden’s upgraded plans have other upgraded features that could be worth the cost, too.

Personally, Tomaschek has been using 1Password for a while, and he likes the interface and family plan. Even though it’s second on the list, Tomaschek says it’s just as good as Bitwarden.

Technologies

Zelda Spinoff Age of Imprisonment Unravels Secrets Behind the Imprisoning War

The hack-and-slash Nintendo Switch game expands on the lore of The Legend of Zelda: Tears of the Kingdom.

A new trailer for Hyrule Warriors: Age of Imprisonment was shown at the Nintendo Direct Partner Showcase on Thursday — the first look we’ve had since its debut when the Nintendo Switch 2 was unveiled in April.

Hyrule Warriors: Age of Imprisonment will take place far in the past to explain the events leading to The Legend of Zelda: Tears of the Kingdom. The video features Princess Zelda, King Rauru and other characters from the game, and it teases a mystery revolving around an animated suit of armor that could be used by Link.

The Hyrule Warriors series is a crossover developed by Koei Tecmo and published by Nintendo. The spinoff started back in 2014 and was a mash-up between Koei Tecmo’s popular Dynasty Warriors franchise, featuring Zelda characters with hack-and-slash gameplay. Unlike in the Zelda games, where the action is limited to a few enemies at a time, Hyrule Warriors has playable characters such as Zelda and Link fighting off waves of enemies at once, doing long combos and fighting giant monsters.

The last installment of the spinoff series, Hyrule Warriors: Age of Calamity, came out in 2020 and acted as a prologue for the events of Legend of Zelda: Breath of the Wild. Age of Imprisonment dives deep into the history of Hyrule and takes place during the Imprisoning War, a battle referenced in Tears of the Kingdom. The war was against an enemy known as the Demon King and involved the ancient Zonai race.

Hyrule Warriors: Age of Imprisonment is set to release sometime this winter for the Switch 2.

Technologies

Octopath Traveler 0 Isn’t Just a Prequel, It’s a Whole New Approach

The next installment of the popular Nintendo Switch game lets you customize who the hero will be.

The Nintendo Direct Partner Showcase on Thursday showed trailers for some games already announced for the Nintendo Switch 2 and revealed a few new ones as well. The biggest of those debut games is the third game in the Octopath Traveler series, Octopath Traveler 0.

As the «0» implies, this game is a prequel to the first Octopath Traveler game, released on the original Switch in 2019. This turn-based RPG makes a big change to the series by allowing players to make their own protagonist instead of picking a character to play. As the hero, players will have to rebuild their hometown and fight powerful enemies with the help of more than 30 recruitable characters.

The Octopath Traveler series has a key feature of having eight playable characters. Each character starts from a different part of the world of Osterra and has their own unique job with abilities, and their story arc plays out and eventually meets up with the other heroes. Another trademark of the franchise is its HD-2D graphics and the Break and Boost battle system. In battles, players have their own Boost points that can be used to quickly Break a character, so they can become unable to fight or can be saved to unleash more damage on enemies who get broken during regular attacks. The result is surprisingly fast combat.

This new entry in the series isn’t the only prequel for the franchise. In 2022, Square Enix released a free-to-play gacha game for Android and iOS called Octopath Traveler: Champions of the Continent. That game was a prequel to the first Octopath game, so it’s unclear how Octopath Traveler 0 will fit into the timeline.

Octopath Traveler 0 will come out on Dec. 4 for the Switch and Switch 2.