{"id":581883,"date":"2026-08-03T14:21:09","date_gmt":"2026-08-03T14:21:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/581883\/"},"modified":"2026-08-03T14:21:09","modified_gmt":"2026-08-03T14:21:09","slug":"eu-id-wallet-app-draws-flak-for-depending-on-american-big-tech-for-age-verification","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/581883\/","title":{"rendered":"EU ID wallet app draws flak for depending on American big tech for age verification"},"content":{"rendered":"

When you purchase through links on our site, we may earn an affiliate commission. Here\u2019s how it works<\/a>.<\/p>\n

\n Design decisions in the EU Digital ID (EUDI) wallet have drawn criticism for relying on hardware attestation, locking users into closed ecosystems. <\/p>\n

\n

Paul Hill<\/a><\/p>\n

Neowin
\n @ziks_99<\/a> \u00b7<\/p>\n

Aug 3, 2026 03:36 EDT<\/p>\n

\"EU<\/a>
\nImage via Pexels<\/a><\/p>\n

Collaborators working on the EU Digital Identity Wallet (EUDI) app<\/a> have confirmed that hardware-bound attestation<\/a> is a mandatory project requirement, creating concern for people who run custom ROMs as the wallet may not support their devices properly.<\/p>\n

The supposed requirement was mentioned<\/a> by @manecke on a GitHub issue on the project\u2019s repository. He stated that \u201cHardware-bound attestation is a requirement of this project, not an implementation detail we can simply drop.” To help explain this position in more depth, @manecke said that a dedicated security review and threat model addressing the hardware attestation trade-off will soon be published.<\/p>\n

The worry from the community is that this requirement will push people towards using stock Android installs, rather than privacy-friendly alternatives like GrapheneOS<\/a> that support hardware attestation, but fail proprietary validation like Google Play Integrity. This is ironic as it comes at a time when the European Union is trying to enforce more digital sovereignty now that relations with the US are more strained.<\/p>\n

User @ddpasa noted, \u201cThis makes no sense. Your interpretation of the requirements is forcing EU citizens to be customers of American companies. There is no trade-off here, just terrible engineering.\u201d<\/p>\n

Community members in the issues thread also highlighted contradictions in the project\u2019s documentation, saying that they say hardware capabilities are only needed \u201cwhen they are available.\u201d The docs also say that the project should promote \u201cseamless integration across diverse device operating systems,\u201d yet, the actual implementation is doing the opposite.<\/p>\n

National variants of the EUDI wallet are expected to be launched by the end of this year or early next year. We will then see the public and private sector start to support it later in 2027. Hopefully, the impending security review will give some much-needed clarity on hardware attestation, otherwise it could be quite bad for GrapheneOS users.<\/p>\n