Experts say the EU’s new age verification app was hacked in minutes

In short: The European Commission released a new age verification app, and security experts say it was easy to break into.

What happened

The European Commission launched a free, open source app meant to help websites check a user’s age. The goal is to make it harder for children to access adult content and to push social networks and pornography sites to do stronger age checks.

Soon after the release, security consultant Paul Moore said he was able to hack the app “in less than 2 minutes,” according to Politico. He pointed to several problems, including how the app stores a user-created PIN (a short passcode, like the code you use to unlock a phone). If that PIN is stored poorly, an attacker could more easily take over a person’s app profile, like finding a spare key taped under a doormat.

Politico reported that Baptiste Robert, described as a white hat hacker (someone who finds security flaws to help fix them), confirmed the vulnerability. Moore warned that the app could lead to a major data breach in the future.

Why it matters

Age checks can involve sensitive information, even if an app tries to avoid collecting more data than necessary. If attackers can take over profiles or exploit weak security, it can undermine trust and create risks for everyday users, especially teenagers and parents who may rely on these tools to work safely.

Source: Wired