Image: Mariia Shalabaieva/Unsplash
Apple updated its Declared Age Range API to support age-assurance rules in Brazil, Australia, and Singapore, as well as new US requirements in Utah and Louisiana.
Apple is turning the App Store into a checkpoint.
With age verification laws multiplying from Texas to Tasmania, the company is expanding its Declared Age Range API, providing developers with clearer signals on whether a user is a minor or a verified adult. The update stretches beyond US borders, landing simultaneously in Brazil, Australia, and Singapore, while preparing for new enforcement deadlines in Utah and Louisiana.
In a Feb. 24 announcement, Apple framed the move as regulatory housekeeping. But the implications are larger.
As governments tighten restrictions on age-restricted apps, from social platforms to games with loot boxes, Apple is quietly positioning itself as the gatekeeper of compliance. Developers will now build within a growing lattice of age-assurance rules, signals, and consent requirements, shaped by the App Store itself.
The Decleared Age Range API is a developer tool from Apple that does two things for developers and users:
The API officially debuted at Apple’s WWDC 2025. By November 2025, it was updated to incorporate a Texas requirement for a specific age range within the state. The Texas update also added a signal indicating the method used for age verification: government ID or credit card.
Importantly, enforcement of this update in Texas was later paused, but the update still exists, optionally for developers.
Enforcement of this update began on Feb. 24 in Brazil, Singapore, and Australia. Apple, via its developer’s blog, noted that users in these regions will be blocked from using apps rated 18+ unless they verify they are adults using reasonable methods.
While Apple didn’t specify what they meant by “reasonable methods,” they noted that confirmation will be automatic. However, building on the Texas update, age verification in these regions may be automatically confirmed using official IDs or card information that users have previously used for verification.
The report also noted that developers whose apps are used in Brazil will need consent from users, their parents, or guardians for age assurance. Additionally, it also specified that the API will share a signal from users’ devices on the methods of age assurance used.
Age verification in Brazil is tighter, as apps with loot boxes will require an 18+ sign, restricting access to only those who have been verified as adults.
For Utah and Louisiana, the enforcement deadline for new accounts will begin by May 6, 2026, and July 1, 2026, respectively. By these dates, developers can request that users share their age categories using the API.
The update also introduces new compliance steps for developers. They must now follow specific procedures before, during, and after rolling out app updates, including notifying adult users in affected states. The revised API will also signal when parental or guardian consent is required before significant updates can proceed.
Age verification enforcement has tightened over the past few months — from fines made to Reddit to Australia’s ban on child social media use — underscoring the critical role of Apple’s App Store in shaping how app developers comply.
Countries like Brazil, Singapore, and Australia coming on board suggest others will follow suit.
Also read: Google’s developer identity verification highlights how quickly app stores are tightening controls on who gets to publish and what gets through review.
Joseph is a Technical Writer with about 3 years of experience in the industry, also advancing a career in cyber threat intelligence. He is passionate about the responsible use of technology, a passion that led him into cybersecurity. As an undergrad, he leads a novel community of technology enthusiasts at his school, NOUN, where he guides and shares resources for beginners in tech. His writing experience includes writing on a diverse range of topics, from consumer tech to startups and tutorials. Additionally, he periodically shares case studies and research reports on cybersecurity on his social media pages.
