GKRootWire
Security ICE Signs $2M Deal for Zero-Click Phone Hacking ToolSecurity Attackers Exploit Critical Elementor Pro Bug to Hijack WordPress SitesAI ChatGPT Goes Down, Serves 404 Errors to UsersAI ChatGPT and Codex Suffer Widespread OutageAI Google DeepMind's WeatherNext 3 Sharpens AI Weather ForecastingAI Google's New AI Weather Model Sharpens Storm ForecastsSecurity ICE Signs $2M Deal for Zero-Click Phone Hacking ToolSecurity Attackers Exploit Critical Elementor Pro Bug to Hijack WordPress SitesAI ChatGPT Goes Down, Serves 404 Errors to UsersAI ChatGPT and Codex Suffer Widespread OutageAI Google DeepMind's WeatherNext 3 Sharpens AI Weather ForecastingAI Google's New AI Weather Model Sharpens Storm Forecasts
Security

TreasuryDirect Will Require ID.me Identity Verification for Login

The US government's savings bond platform is moving to third-party identity verification, joining other federal agencies that have adopted ID.me.

TreasuryDirect, the platform millions of Americans use to buy and manage savings bonds, is rolling out a new login requirement built on ID.me, a private identity verification service. Users will need to verify their identity through ID.me's process—which typically involves uploading a government ID and completing facial recognition or video verification—before they can continue accessing their accounts.

This follows a pattern seen at other federal agencies, including the IRS, which previously attempted a similar mandate before backing off amid privacy backlash. ID.me has faced scrutiny over data handling, accessibility issues, and its use of biometric matching.

The rollout gives users roughly a one-month window to prepare, though details on fallback options for those unable or unwilling to complete ID.me verification remain unclear from the notice itself.

Why it matters: Centralizing identity verification for government financial services through a single private vendor raises real questions about biometric data retention, vendor lock-in, and what happens to citizens who can't or won't submit to facial recognition. Given the previous IRS reversal, expect similar pushback here, especially from privacy advocates and older or less tech-savvy bondholders.

Sources: Hacker News