New Incode age estimation tool processes biometrics on-device. FAE appealing to organizations wary of public concerns over biometric collection Prompted by the introduction of online safety regulations globally, Incode has released an on-device age estimation product. An announcement from the company says the tool performs all facial analysis on the user's device, with "no biometric data, raw or processed, sent to Incode, a client server, or anywhere else." The primary selling point of facial age estimation (FAE) is that it does not, at any point, require a user to share a date of birth (as age verification does). Nor does it collect and store any biometric data. According to Chris Allgrove, CTO of Ingenium Biometrics Laboratory, biometric FAE tends to use deep learning algorithms to assess visual ageing indicators like skin texture, face shape and structural ratios. It is a real-time biometric technology that only angages with the user when it is analyzing their face to estimate age. As such, it has proven popular as an age assurance method for lower risk scenarios, or as an initial check in a step-up age assurance stack. However, it typically comes with a confidence range, meaning the tech needs to be configured to factor in buffer ages. Three-layered process includes metadata analysis. Incode's tool provides a binary result: "pass or fail, based on the platform's configured age threshold." But the age assurance process itself has three layers. Incode's FAE is a "compact model that preserves the accuracy of the server baseline without biometric transmission." The company says that in testing, it has achieved as low as 1.08 years MAE (mean absolute error, a continuous measure of estimation error) for the strictest age groups. Security concerns necessitate liveness detection and injection attack detection (IAD); per the company's post, "keeping the face on-device doesn't eliminate the need to verify that a real, live person is present." But for IAD, the company analyzes metadata on its server - meaning that, while all biometric processing is done on-device, some data still runs server-side. Finally, the system cascades as needed. "When a use case calls for a higher assurance level, due to risk profile, regulatory requirement, or borderline confidence near an age threshold, the system automatically steps the user up to other Incode age check methods, or any other route the customer decides, without interrupting the user experience," Incode says. For users, the process just looks like taking a selfie, with automatic capture once optimal positioning and lighting conditions are achieved. In unstable trust environment, even true claims can be volatile. Incode's pitch stresses the urgency of finding trusted age assurance methods as regulations take hold in the UK, EU, Australia, and increasingly in the U.S. "More than 32 age assurance laws are in force globally, with requirements expanding into social media, online gaming, and AI platforms. Facial age estimation has emerged as one of the most preferred compliance mechanisms: no government ID required, no external databases, and the only viable option for users who don't have traditional identification." It also names "negative attitudes toward biometric collection" as a driver of the FAE market. In doing so, the pitch also nicely illustrates the delicacy of selling a biometric product to an ever more privacy-conscious public. The tagline is that Incode's FAE does all biometric processing on-device. Server-side processing only addresses metadata - but that technicality may not matter to those seeking an opportunity to paint biometrics providers as secret hoarders of user data. There is no lack of transparency in Incode's product announcement: it clearly states that "we analyze metadata on our server to prevent injection attacks and tampering of the results." Rather, the issue is in the tension between promoting the product and full transparency. Claims that AI software tools are completely privacy preserving inevitably invite challenges. While these may be spurious - see the recent case of Yoti defending its integrity against U.S. researchers - they can do reputational damage, and fast. There is no obvious answer to the question of how to weigh promotional zeal with the need to build a stable public trust ecosystem in biometric tools in general. But in the biometrics industry, where trust is the most valuable currency, it matters more than in most. Article topics. Latest biometrics news. Jul 13, 2026, 5:21 pm EDT NEC has signed a memorandum of understanding (MoU) with blockchain firm Ava Labs, to "promote the consideration of next-generation on-chain... Jul 13, 2026, 5:06 pm EDT Deepfake detection teams at Canadian startup deepidv and fraud prevention developer Scam.AI will work together under a new partnership that... Jul 13, 2026, 1:20 pm EDT The Facewatch live facial recognition system used by over 125 retailers operating thousands of stores across the UK will soon... Jul 13, 2026, 12:51 pm EDT ROC continues to cement its position in the U.S. biometrics market for defense and law enforcement, with the announcement that... Jul 13, 2026, 12:50 pm EDT Jul 13, 2026, 12:49 pm EDT Papua New Guinea advances its digital transformation with a new international partnership, fresh AI-safety reforms and deeper integration of its...

Incode adds biometric verification to Auth0 password resets. Incode launched two integrations on Okta's Auth0 marketplace to bring biometric identity verification into customer authentication workflows. The integration includes Incode ID Verification and Incode Face Auth Reset that applies biometric checks at different stages of account security. As the name suggests, Incode ID Verification adds biometric identity proofing to the Auth0 login experience. For example, a new user can be redirected to Incode to capture a government-issued ID and a live selfie. Incode then validates the identity document, checks for liveness, and confirms that the face in the selfie matches the ID. Once that identity has been verified, organizations can use the verification result as a reference point for future authentications. In addition, Incode Face Auth Reset extends that identity check to password resets. The user completes a live face scan, which is matched against the verified identity previously enrolled. This means a password reset requires proof that the person requesting the change is the same verified individual who created the account. This is crucial because password resets are among the weakest points in account security. Traditional password resets depend on control of an email inbox, a reset link, or a one-time code. These methods can fail if an attacker has compromised the user's email account, stolen login credentials or gained access to recovery channels. The Incode-Auth0 integration changes the reset process by checking if the user is the same verified individual who created the account. For organizations using Auth0, the integrations add a biometric layer to customer identity and access management without needing a separate identity proofing system. The approach is more beneficial for financial services, healthcare, and government platforms because the account takeovers can expose sensitive or regulated data. The Auth0 launch comes soon after Incode's acquisition of the Tel Aviv-based startup Identiq. The deal aimed to establish a privacy-preserving fraud-signal-sharing network using Identiq's cryptographic technology for institutions to share fraud intelligence without centralizing customer data. At the application layer, the Auth0 integrations include Incode's biometric ID verification and face authentication for customer identity workflows. This gives organizations a way to verify users during onboarding, login re-verification, and password resets. But at the fraud network layer, the Identiq acquisition gives Incode a way to support shared fraud detection while maintaining customer privacy. The significance of the integration is that biometric identity verification is implemented beyond user onboarding. In this model, the face match and liveness check become part of the account security lifecycle to support re-authentication when the risk level rises. Article topics. Latest biometrics news. Jul 3, 2026, 3:50 pm EDT A wave of new partnerships between major tech players is accelerating a multi-wallet digital identity ecosystem, even as critics warn... Jul 3, 2026, 3:28 pm EDT Police in Canada's capitol Ottawa, Ontario are taking their first step towards a potential implementation of facial recognition from Idemia... Jul 3, 2026, 3:27 pm EDT Laws putting age limits on social media are being introduced in countries around the world, driven by pressure from parents... Jul 3, 2026, 3:25 pm EDT An announcement from UK firm Nuggets, which provides trust infrastructure for autonomous AI, says it has released langchain-nuggets, "an open... Jul 3, 2026, 3:18 pm EDT Insiders and experienced digital identity practitioners within the MOSIP ecosystem are convening to build understanding and dispel misconceptions around the... Jul 3, 2026, 2:07 pm EDT Spain-headquartered digital identity verification company Facephi says its fraud prevention technology has helped reduce commission scam for Peruvian internet gaming...

Auth0 and Incode boost authentication security with biometric identity verification. Secure your authentication pipeline. Learn how the new Auth0 and Incode integration uses biometric identity verification to halt account takeovers. TL;DR: Auth0 and Incode have launched new integrations to combat fraud with biometric verification. Incode ID Verification validates new users against government IDs, while Incode Face Auth Reset prevents account takeovers by requiring biometric scans before password changes. These tools enable high-assurance identity verification for regulated industries, boosting security without creating user friction. Building a resilient identity strategy means continuously adapting to sophisticated digital fraud. Organizations are looking for seamless ways to bring real-world, legal identity verification directly into their access management workflows. Elevating security at critical milestones allows businesses to establish an ironclad chain of trust from day one. While passwords and email-based reset links successfully verify credentials, high-assurance environments require an extra layer to definitively prove identity. The 2025 Verizon Data Breach Investigations Report confirms that stolen credentials are the primary entry point for breaches, playing a role in 88% of all basic web application attacks. Every day, attackers buy stolen credentials on breach forums. Inboxes get compromised. And the password reset flow - the very mechanism meant to protect users - has become one of the most common ways for attackers to take over accounts. An email reset link in the wrong hands is all it takes. For teams in financial services, healthcare, legal, HR, and government, this gap is not just a security risk. It is a compliance one. Regulators, auditors, and customers all expect you to know that the person behind an account is genuinely who they claim to be. Meeting these strict standards requires tying digital access directly to a verified legal identity. So Auth0 asked a simpler question: What if your login flow could verify a real, legal identity, and confirm it again at the moments that matter most? That is what Auth0 and Incode are launching. Prove identity once. Re-Verify it at the moments that matter. Two new Incode integrations are now live on the Auth0 Marketplace. Together, they create a continuous chain of trust, proving identity when a new user logs in for the first time, then re-confirming it before sensitive actions like a password reset. What is Incode ID Verification? The Incode ID Verification adds Incode's full biometric identity verification flow directly to your Auth0 login experience. When a new user logs in for the first time, they are automatically redirected to Incode to complete verification: capturing their government-issued ID and a live selfie. Incode validates the document, checks for liveness, and confirms the face matches the ID. Once verified, that identity is securely stored in the user's Auth0 profile. On subsequent sign-ins, returning users simply authenticate with a quick face scan. And you stay in control: configure how often users must re-verify (daily, monthly, yearly, or never), and optionally block login entirely if verification fails. What is Incode Face Auth Reset? The Incode Face Auth Reset helps secures one of the most exploited paths to account takeover. Before any password change is allowed, users get redirected to Incode to complete a live face scan. That face is matched 1:1 against the legal identity enrolled during their first login, confirming the person requesting the reset is the same verified individual who created the account. An attacker with stolen credentials and email access cannot pass this check. If the faces match, the reset proceeds. If not, it is blocked. Common use cases include: * Identity proofing at onboarding: For example, financial services and fintech companies verifying customer identity at account creation to meet regulatory requirements. * High-assurance login: Organizations requiring step-up verification for access to sensitive data, transactions, or privileged actions. * More secure password reset: Preventing account takeover via compromised email-based reset flows by requiring biometric verification before any credential change. What Incode ID Verification and Incode Face Auth Reset means for your team? You know who is really behind the account. By anchoring access management to a government-issued ID and a live biometric check, organizations gain confidence that the physical person logging in is the true account owner. Security does not come at the cost of experience. After initial verification, returning users authenticate with a quick face scan. No documents to re-scan, no OTP codes, no friction. You can deploy it in minutes, not months. Both integrations are available as Auth0 Marketplace. No custom development required. See Incode ID Verification and Incode Face Auth Reset in action. Here is a full end-to-end video walkthrough of both integrations: Get started. Both integrations are live now on the Auth0 Marketplace. Have questions? Reach out to the Auth0 team to discuss your use case. Reyna lao. Product Marketing Intern Reyna is a Product Marketing Intern at Okta, contributing to the growth and strategy of Okta Workflows and Auth0 Extensibility. Currently pursuing an Economics degree at UC Berkeley, she is passionate about the intersection of technology, product, and marketing. She is driven to translate complex technical capabilities into high-impact value propositions for users and enterprises. View profile