Is Persona Safe? What to Know Before You Verify Your Identity [2026]

You were just scrolling on your phone and trying to use an app when suddenly the screen changed. You're asked to use something called Persona to verify your identity. Now it's no longer a casual browsing session. An unfamiliar platform asking for your driver's license and a selfie sounds a bit invasive.

You're not alone in wondering if Persona is safe. 79% of Americans worry their personal information could be collected or exposed when verifying their identity. Let's talk about what Persona is, the data it collects, and whether it's safe to use.

What is Persona?

Persona is an ID verification and Know Your Customer (KYC) provider that confirms users are who they say they are. Companies such as Reddit, LinkedIn, Microsoft, and Indeed use Persona to verify user identities.

Age and identity checks are spreading due to new laws aimed at protecting users from fraud and underage users from social media and adult content. The U.K.'s Online Safety Act and various U.S. state laws have started to require age verification. 

Besides Persona, there are other verification providers, like AgeGO, AU10TIX, IDenify, AgeChecked, Veriff, and more. The age verification system you'll encounter varies by country and industry. 

Persona is a platform that helps companies comply with verification regulations. If a company asks you to use Persona, it's a legitimate request and not a scam. However, that doesn't guarantee that Persona is safe to use for your data security.

Who uses Persona?

A lot of companies use Persona identity verification. Top names include:

• Reddit
• Microsoft
• Lyft
• LinkedIn
• CoffeeMeetsBagel
• Square
• Etsy
• OpenAI
• Fivver
• Coursera
• Udemy
• Figma

How does Persona verify your identity, and what data does it collect?

Persona's verification process is pretty straightforward. The exact process will vary with each company, but here's the general idea of what you'll do:

1. A company will ask you to verify your identity using Persona, and you'll get redirected to the platform.

2. Persona asks you to provide at least one identity type:

• Government ID
• Phone number
• Selfie
• Document (like a utility bill or bank statement)
• Personal information that gets compared to databases for a match

3. After submitting the requested information, Persona will check it in real time

4. Persona sends the results back to the company, which then decides what will happen to your account.

In practice, this could look like you submitting a picture of your driver's license and then taking a selfie to check that you match the photo ID. Other verification flows may ask for your phone number, and you'll get sent a two-factor authentication (2FA) code.

In addition to the personal data you provide, Persona collects information from third parties to verify your identity. This can include:

• Current and previous names and contact information
• Demographic data, like marital status, birthdate, gender, and age
• Government documents, barcodes, and identifiers
• Device information, like IP address, device type, and identifiers
• Account information
• Publicly available data, like social media and government records
• Geolocation data
• Wireless device data
• Government and national ID registries
• Consumer credit bureaus
• Utility companies
• Mobile network providers
• Postal address database

Persona follows the user's requests on how long to retain this personal data. According to its privacy policy, "Subject to the customer’s retention period, Persona will permanently destroy ID and Selfie Scan Data upon completion of identity verification services or within three years of your last interaction with Persona, consistent with the customer’s instructions unless Persona is otherwise required by law or legal process to retain the data."

Make sure you're picking the retention policy that best fits your preferences. Otherwise, Persona can store your data for up to three years.

Is Persona safe and legit?

Persona is compliant with the GDPR and CCPA. It also holds recognized security and compliance certifications, including SOC 2 Type II and ISO 27001. Per its privacy policy, Persona doesn't use your data to train AI models and doesn't share or sell your personal data to third parties.

But Persona hasn't avoided controversy over its services. Here are a few recent incidents:

1. Researchers found that Persona performs up to 269 distinct verification checks beyond age or ID checks.^[1]
2. Persona exposed its entire government dashboard codebase on a public server.^[1]
3. Identities were screened against counter-terrorism and espionage databases.^[1]
4. A security researcher pointed out that a 3-minute LinkedIn verification process involved extensive cross-referencing of data with 17 subprocessors, including AI companies like Anthropic, OpenAI, and Groqcloud. Not to mention, Persona caps its liability at $50 and may retain your data indefinitely for legal reasons.^[2]
5. Discord parted ways with Persona in February 2026 after backlash over "teen-by-default" settings and privacy concerns.^[3]

Another concern is the encryption policy. AES-256 encryption is the standard protocol, but Persona only uses it for data in the database. All web traffic is encrypted only via HTTPS and TLS 1.2, which is less secure.

Ultimately, Persona is a legit service used by several big-brand companies. But users should stay cautious about what they share with Persona and alter settings to meet their privacy standards.

How to protect your privacy when you're asked to verify

When a platform asks you to verify your identity with Persona, there are a few things you can do to protect your privacy.

1. Use the least intrusive option. Sometimes you get a choice between verification types. Choose the option that requires the least amount of data. For instance, a phone number verification is less intrusive than a selfie.
2. Know your deletion and access rights. In regions covered by regulations like GDPR and CCPA, you can request access to your data and its deletion.
3. Use a VPN. Some locations require age verification. Using a VPN (virtual private network) can make your location appear to be in a different place, which doesn't require age verification. This won't bypass legitimate KYC checks, though.
4. Check data retention settings. Customize your settings to make sure your data isn't retained longer than necessary. If you don't, Persona may keep it for up to 3 years.

Bottom line

Persona is a legitimate platform. Many notable companies, including Reddit, LinkedIn, and Microsoft, use Persona for age and identity verification. But users may want to proceed with caution. No system that collects IDs, personal data, and biometrics is ever risk-free.

Whether Persona is safe may depend on how you feel about its policies. You'll want to weigh the pros and cons of sharing your data and verifying your account. If you do decide to use Persona, you'll want to change the settings to manage how long it keeps your data.

FAQs