Linux Distros Push Back Against Age-Verification Laws Targeting Operating Systems

A new wave of age verification laws is targeting operating systems, requiring kids and teenagers to register before they can use a computer. As my colleague Liam Proven reports, several states in the US are now demanding that operating system vendors collect and store the age or date of birth for each user account.

For commercial platforms like Windows and macOS, this presents little challenge. Microsoft already requires Windows 11 users to have a Microsoft account, and Apple, while claiming privacy-first credentials, still examines every photo you take through Apple's Enhanced Visual Search. But for Linux and other open source operating systems like the BSDs, this represents a fundamental philosophical clash.

These communities have always been about empowering users to do anything they want, within the confines of their licenses, anytime they want, regardless of age. The very ethos of open source computing stands in opposition to mandatory age verification.

Global Pushback Against Unrestricted Computing

The problem extends far beyond US state borders. The European Union has guidelines for protecting minors that could cause trouble for open source developers. Brazil already has an age-verification law for operating systems. In the UK, while operating systems aren't targeted yet, stricter social networking rules for the under-16 set are being pushed.

Australia stands alone among Western nations with a complete ban on social networks for young people. Given that Australians are already questioning whether teenagers should be banned from GitHub, it's not hard to imagine operating systems becoming the next target.

Distro Developers Take a Stand

Several Linux distributions are already pushing back. The FreeBSD distribution MidnightBSD has added a clause to its license stating "California residents are not authorized to use MidnightBSD for desktop use in the state of California effective January 1, 2027."

Adenix GNU/Linux, a Debian-based distro, has taken an even stronger stance. Its founder, J. Mazzullo, has declared that his distro "will NOT have any age checks and that they are not for use in regions with OS age verification laws."

David Heinemeier Hansson (DHH), creator of the new Omarchy Linux distro, simply calls the new California law "unenforceable."

Technical Workarounds and Compliance Debates

At Canonical, Ubuntu Linux's parent company, developers are discussing technical approaches to comply without creating surveillance infrastructure. One proposal involves local age-bracket flags set at account creation, exposed via a simple API or config file, with no online ID checks or central user registry.

Specifically, programmers have floated a D-Bus interface so desktops and app centers like GNOME Software/Snap Store can read a coarse age band without storing full birth dates. However, Jon Seager, Canonical's VP of Engineering, noted: "Canonical is aware of the legislation and is reviewing it internally with legal counsel, but there are currently no concrete plans on how, or even whether, Ubuntu will change in response."

Jef Spaleta, the Fedora Project leader, suggests a simpler approach might work: mapping "uid to usernames and group membership and having a new file in /etc/ that keeps up with age." In this model, age information might never need to leave the PC. The government would just be told that the user "YoungDude13" is under 16, with no other information shared.

The Human Cost of Digital Restrictions

Carl Richell, founder and CEO of System76, the Linux PC vendor and maker of the Pop!_OS distro, highlights why this matters to the Linux community. "Most System76 employees installed operating systems and created accounts on their computer when they were under 18. They did this out of curiosity. Many started writing software. Some were already writing operating systems."

Linux has traditionally been for the young, intellectually gifted, and curious—the very people these restrictions will keep away from Linux. Richell added that System76 will follow the laws, but he hopes "these laws will be recognized for the folly they are and removed from the books or found unconstitutional."

Why These Laws Won't Work

The fundamental problem with age verification laws is that they don't work. They've never worked. Prohibition failed in the United States. People use virtual private networks (VPNs) to get around the restrictions of the UK's Online Safety Act. As the Electronic Frontier Foundation (EFF) notes, VPNs are far from a perfect solution, but they demonstrate the futility of technical restrictions.

The real issue is the growth of the surveillance state. From voting rights in the United States, facing Trump's Orwellian-named SAVE America Act, to Ring's doggie tracking system that can also be used to follow people, to AI tools being pressured for mass surveillance, privacy is on the decline.

The Enforcement Nightmare

There's one good thing about the current operating system laws: they're essentially unenforceable as written. Richell pointed out, "There is no actual age verification. Whoever installed the operating system or created the account simply says what age they are. They can lie. They will lie."

Indeed, they will. These laws can, and almost certainly will, get worse. New York's proposed Senate Bill S8102A explicitly forbids self-reporting. The state Attorney General will decide how to enforce it. For example, to use Linux, you might need to submit a driver's license.

This is nuts. While I can understand why people don't want their kids accessing certain content, operating systems themselves? Really? This makes no sense.

As one Linux advocate put it, paraphrasing an old American right-wing political slogan: "I'll give you my Linux when you pry it from my cold, dead hands."

The battle over operating system age verification represents more than just another regulatory headache—it's a fundamental question about who controls computing and whether the next generation of developers, innovators, and curious minds will have the freedom to explore the digital world on their own terms.