Windows Age APIs Can Expose Your Date of Birth to Apps

TL;DR

  • Windows’ new age API is supposed to give an app only your age range
  • The current implementation first obtains your date of birth, then calculates the range inside the requesting app’s process
  • The requesting process can intercept the token or DOB
UserMgrProxy decoding the birthdate claim and calculating the user’s exact age

The API returns a range—but that is not the whole story

that Windows 11 will allow apps to request an age range without receiving the user’s birthday. Microsoft’s documentation describes GetUserAgeRangeAsync, which returns ranges such as 13–15, 16–17, or 18+.

添加评论
点赞收藏
点踩分享查看原文
评论
?
参与讨论