--- title: EU's Digital ID is Killing the Open Phone Market | daily.dev description: The EU's European Digital Identity project includes hardware-backed age verification requirements that could effectively sideline open-source and custom... canonical: https://daily.dev/posts/eu-s-digital-id-is-killing-the-open-phone-market-rgd1wgy1x twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: EU's Digital ID is Killing the Open Phone Market | daily.dev og:description: The EU's European Digital Identity project includes hardware-backed age verification requirements that could effectively sideline open-source and custom... og:url: https://daily.dev/posts/eu-s-digital-id-is-killing-the-open-phone-market-rgd1wgy1x og:image: https://api.daily.dev/og/posts/rGd1wgY1X.png og:image:alt: EU's Digital ID is Killing the Open Phone Market og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # EU's Digital ID is Killing the Open Phone Market **[Mental Outlaw](https://daily.dev/sources/mentaloutlaw)** · 9 min read · 7 upvotes · 3 comments ## Summary The EU's European Digital Identity project includes hardware-backed age verification requirements that could effectively sideline open-source and custom Android devices. The spec mandates that age credentials be stored in secure hardware enclaves (like Apple's Secure Enclave, Android's TEE, or Strongbox) and verified via the Google Play Integrity API. This means devices running GrapheneOS, custom ROMs, Linux phones like the Jolla phone running Sailfish OS, or older hardware lacking secure enclaves would fail verification checks and be locked out of compliant online services. Rather than an outright ban, the effect is a soft exclusion: non-compliant devices simply can't access mainstream services, pushing users toward certified American tech hardware. The author argues this deepens EU dependence on US tech companies and threatens Europe's FOSS ecosystem. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Why would GrapheneOS or a custom Android ROM fail the EU digital identity age verification check? The EU age verification app relies on the Google Play Integrity API to confirm a device is genuine, unmodified, and Google-certified. Unlocking the bootloader, installing a custom ROM like GrapheneOS, or rooting a phone causes that integrity check to fail, meaning the device cannot generate the hardware-backed cryptographic key the age proof requires, effectively blocking access to compliant services. _Developers weighing device integrity checks against user freedom can follow this debate on daily.dev._ ### Why does the EU's digital identity age verification require hardware-backed cryptographic keys instead of a regular file? A hardware-backed key store prevents an age credential from being copied like a normal file and distributed to unauthorized users, similar to passing around a fake ID. The private key is generated and locked inside protected hardware such as a secure enclave, trusted execution environment, or Strongbox, and the phone can use it to sign proofs without ever letting the key be extracted or moved to another device. _Anyone tracking how EU digital ID rules reshape device requirements can follow updates on daily.dev._ ## Community discussion Top comments from developers on daily.dev. **@whytrashearth** · 0 upvotes > Hi Mental Outlaw, nice to see you on here! Hope your chickens are well 🐔 **@fabooy961** · 0 upvotes > If you wanna fuck up things - hand it over to governmental organizations > >  **@agustinbarrientos** · 0 upvotes > For me, one vendor's device attestation can't gate the open web. A standards-based proof across certified hardware and alternative operating systems would preserve the security goal without enforcing platform lock-in ## Similar posts on daily.dev - [EU Age Control: The trojan horse for digital IDs](https://daily.dev/posts/eu-age-control-the-trojan-horse-for-digital-ids-yjo4s4rm0) · Hacker News · 0 upvotes · 0 comments - [The EU says its age verification app is ready](https://daily.dev/posts/the-eu-says-its-age-verification-app-is-ready-hwjz2h6nd) · The Next Web · 7 upvotes · 8 comments - [GrapheneOS: "Apple and Google are gradually…"](https://daily.dev/posts/grapheneos-apple-and-google-are-gradually--m5jit5q02) · Hacker News · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#open-source](https://daily.dev/tags/open-source) [View this post on daily.dev](https://daily.dev/posts/eu-s-digital-id-is-killing-the-open-phone-market-rgd1wgy1x) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"EU's Digital ID is Killing the Open Phone Market","url":"https://daily.dev/posts/eu-s-digital-id-is-killing-the-open-phone-market-rgd1wgy1x","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/eu-s-digital-id-is-killing-the-open-phone-market-rgd1wgy1x"},"datePublished":"2026-08-09T22:34:32.090Z","dateModified":"2026-09-14T06:40:55.238Z","description":"The EU's European Digital Identity project includes hardware-backed age verification requirements that could effectively sideline open-source and custom...","image":"https://i.ytimg.com/vi/WEHVIofDFJ4/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/WEHVIofDFJ4/sddefault.jpg","isAccessibleForFree":true,"articleSection":"Mental Outlaw","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Mental Outlaw","logo":"https://media.daily.dev/image/upload/s---3xRV5E---/f_auto/v1712315214/logos/mentaloutlaw","url":"https://daily.dev/sources/mentaloutlaw"},"commentCount":3,"discussionUrl":"https://daily.dev/posts/eu-s-digital-id-is-killing-the-open-phone-market-rgd1wgy1x","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":7},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":3}],"keywords":"security,open-source","timeRequired":"PT9M","video":{"@type":"VideoObject","name":"EU's Digital ID is Killing the Open Phone Market","description":"The EU's European Digital Identity project includes hardware-backed age verification requirements that could effectively sideline open-source and custom...","thumbnailUrl":"https://i.ytimg.com/vi/WEHVIofDFJ4/sddefault.jpg","uploadDate":"2026-08-09T22:34:32.090Z","duration":"PT9M","url":"https://api.daily.dev/r/rGd1wgY1X","embedUrl":"https://www.youtube.com/embed/WEHVIofDFJ4"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Mental Outlaw","item":"https://daily.dev/sources/mentaloutlaw"},{"@type":"ListItem","position":3,"name":"EU's Digital ID is Killing the Open Phone Market"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/eu-s-digital-id-is-killing-the-open-phone-market-rgd1wgy1x","comment":[{"@type":"Comment","text":"Hi Mental Outlaw, nice to see you on here! Hope your chickens are well 🐔","datePublished":"2026-08-13T12:39:27.630Z","url":"https://daily.dev/posts/rGd1wgY1X#c-0wqF7DCvd","author":{"@type":"Person","name":"WhyTrashEarth","url":"https://daily.dev/whytrashearth","image":"https://avatars.githubusercontent.com/u/100886922?v=4"}},{"@type":"Comment","text":"If you wanna fuck up things - hand it over to governmental organizations","datePublished":"2026-08-12T14:30:59.909Z","url":"https://daily.dev/posts/rGd1wgY1X#c-HdUNjOGmd","author":{"@type":"Person","name":"Le Fä De Le Lö","url":"https://daily.dev/fabooy961","image":"https://media.daily.dev/image/upload/v1677218265/avatars/avatar_H6lLM2y9S4Yf8VCWicpd8.jpg"}},{"@type":"Comment","text":"For me, one vendor’s device attestation can’t gate the open web. A standards-based proof across certified hardware and alternative operating systems would preserve the security goal without enforcing platform lock-in","datePublished":"2026-08-25T11:26:29.492Z","url":"https://daily.dev/posts/rGd1wgY1X#c-UYaJO7vuJ","author":{"@type":"Person","name":"Agustin Barrientos","url":"https://daily.dev/agustinbarrientos","image":"https://media.daily.dev/image/upload/s--5ayxQnqn--/f_auto/v1788281802/avatars/avatar_wQYYVe5Tbj0NJ7C7qPoa8?_a=BAMAMicg0"}}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/eu-s-digital-id-is-killing-the-open-phone-market-rgd1wgy1x#faq","mainEntity":[{"@type":"Question","name":"Why would GrapheneOS or a custom Android ROM fail the EU digital identity age verification check?","acceptedAnswer":{"@type":"Answer","text":"The EU age verification app relies on the Google Play Integrity API to confirm a device is genuine, unmodified, and Google-certified. Unlocking the bootloader, installing a custom ROM like GrapheneOS, or rooting a phone causes that integrity check to fail, meaning the device cannot generate the hardware-backed cryptographic key the age proof requires, effectively blocking access to compliant services. Developers weighing device integrity checks against user freedom can follow this debate on daily.dev."}},{"@type":"Question","name":"Why does the EU's digital identity age verification require hardware-backed cryptographic keys instead of a regular file?","acceptedAnswer":{"@type":"Answer","text":"A hardware-backed key store prevents an age credential from being copied like a normal file and distributed to unauthorized users, similar to passing around a fake ID. The private key is generated and locked inside protected hardware such as a secure enclave, trusted execution environment, or Strongbox, and the phone can use it to sign proofs without ever letting the key be extracted or moved to another device. Anyone tracking how EU digital ID rules reshape device requirements can follow updates on daily.dev."}}]} ```