Arizona Wants Your ID Before You Can Use the Internet. Legba Doesn't.

You visit a website. Before you can see any content, a wall appears. It does not ask if you are over 18. It asks for your government-issued photo ID.

Your driver's license. Your passport. Your state ID. Uploaded to a third-party verification service, processed, and stored. For a website.

This is not a hypothetical. This is Arizona House Bill 2112. And it is not alone.

What HB 2112 Actually Says

Arizona's HB 2112 requires any website that contains material "harmful to minors" to verify the age of every visitor before granting access. The law defines "harmful to minors" broadly — adult content, but the language is vague enough to sweep in a range of material.

The verification mechanism is the real problem. Sites must use "reasonable age verification methods," which in practice means:

• Government-issued ID upload— scanning or photographing your driver's license, passport, or state ID.
• Third-party verification services — companies like Yoti, VerifyMy, or similar services that process and store your identity documents.
• Facial recognition matching — some services compare a live selfie to your ID photo.

Websites that fail to verify can face civil liability. The practical result: every site covered by the law now requires you to hand over your most sensitive identity documents before you can browse.

Not Just Arizona. This Is Spreading.

Arizona is not an outlier. Age verification laws have been enacted or are advancing in multiple states:

• Louisiana was the first state to enact an age verification law (Act 440, effective January 2023). It requires commercial websites with more than 33.3% adult content to verify user age.
• Texas passed HB 1181, requiring age verification for adult websites. The law was challenged and partially blocked by courts but remains active in modified form.
• Utah passed SB 287 and HB 311, requiring both age verification and parental consent for minors on social media. Major platforms responded by blocking Utah users entirely.
• Virginia, Mississippi, Arkansas, Montana, Indiana, and others have passed or are advancing similar legislation.

The trend is clear. More states are requiring identity verification for internet access. And the ID wall is the mechanism.

The Privacy Cost They Do Not Talk About

The stated goal is protecting children. The actual cost is a surveillance infrastructure that links your legal identity to your browsing activity.

Every ID upload creates a record. Your government ID, linked to a specific website visit, at a specific time, from a specific IP address. That data exists on a server somewhere. It can be breached. It can be subpoenaed. It can be sold.

Age verification companies have already been breached. In 2023, a major age verification provider suffered a data leak that exposed user verification records. The data included which sites users had verified their age on — effectively creating a browsing history linked to real identities.

The Electronic Frontier Foundation has been clear: "Age verification systems are surveillance systems. They create databases of people's browsing habits linked to their real identities. That data is a target for hackers, a tool for blackmail, and a resource for governments."

The Chilling Effect on Legal Activity

The adult content framing is a Trojan horse. The real impact extends far beyond any single category of websites.

• Health information. Searching for information about sexual health, reproductive health, or STI testing now carries the risk of ID-linked tracking. People will avoid searching for information they need.
• LGBTQ+ resources. In states with hostile political environments, having your identity linked to visits to LGBTQ+ support sites, dating platforms, or community resources creates real personal risk.
• Domestic violence resources. Survivors researching shelters, legal options, or support services could have those searches linked to their legal identity — information an abuser could access through legal discovery.
• Journalism and whistleblowing.Any website that might contain material deemed "harmful to minors" now requires identity verification, chilling anonymous access to information.

When accessing legal content requires surrendering your identity, people stop accessing it. That is the chilling effect. It does not require prosecution. It requires the mere possibility of exposure.

Platforms Are Just Blocking States Entirely

Rather than build age verification infrastructure, some platforms have chosen to block access in affected states entirely. Pornhub blocked access in Texas, Utah, Montana, North Carolina, and other states rather than comply with age verification mandates.

Their message to users is blunt: "The best and most effective solution for protecting children and adults alike is to identify users by their device and allow access to age-restricted materials and websites based on that identification. The laws being passed are not effective."

The result: adults in these states lose access to legal content because lawmakers chose an enforcement mechanism that prioritizes surveillance over effectiveness.

Your Browsing Stays Private. Always.

Browser isolation through Legba changes the equation fundamentally. Instead of browsing from your device in Arizona — where the age verification law applies — your browsing session executes in a remote, isolated environment.

The website sees a session from the isolated environment. Not from Arizona. Not from any state with age verification mandates. The ID wall never appears because the session does not originate from a jurisdiction that requires it.

• No ID upload. Your government ID stays in your wallet. The isolated session originates from an environment where no verification is required.
• No browsing record linked to your identity. The website never learns your name, address, or ID number. The session is ephemeral — destroyed when you close the tab.
• No data to breach. If there is no verification record, there is nothing to hack. Your privacy is protected by the absence of data, not by a promise to keep it safe.
• No chilling effect. Access health information, support resources, legal content, or anything else without your identity attached to the visit.

Legba installs as a Chrome extension. One click, and your browsing session runs in an isolated environment. No router configuration. No VPN to detect and block. The session is a real browsing session executing somewhere else — there is nothing to flag.

The Internet Does Not Need Your ID

Age verification laws create a surveillance infrastructure that links your legal identity to your browsing habits. They do not protect children — determined minors bypass them trivially. What they do is make every adult hand over their most sensitive documents to access legal content.

Arizona wants your ID before you can use the internet. More states are following. The ID wall is expanding.

Your browsing stays private. Always.