Last updated: August 2026
Key Takeaways
- Discord delayed its global age-assurance rollout to the second half of 2026. As of August, mandatory checks apply only in the UK and Australia, and Discord says over 90 percent of users will never be asked to verify.
- The October 2025 breach exposed roughly 70,000 government IDs submitted through Discord's age-appeal pipeline — the documented cost of centralized ID collection, whoever operates it.
- Matrix (Element) and Stoat are the closest Discord-shaped replacements, Mumble covers self-hosted voice, and Session and SimpleX trade the Discord feel for requiring no identity at all.
Matrix, used through the Element client, is the closest full Discord replacement that never asks for your ID — and you can host the server yourself. Stoat mirrors Discord's interface almost exactly. Mumble handles self-hosted voice. Session and SimpleX require no identity at all. With Discord's global age checks scheduled for the second half of 2026, here is where things actually stand and what each exit costs.
What Discord Actually Requires Right Now (August 2026)
As of August 2026, Discord requires age verification only where the law demands it — the United Kingdom and Australia — and the delayed global rollout is scheduled for the second half of 2026 but has not shipped. For most adults, Discord's age inference model estimates age from account signals such as tenure, device data, and activity patterns; the company says private message content is not used. Accounts that cannot be inferred as adult in covered regions lose access to age-restricted servers and channels, sensitive-content unblurring, and certain settings until they verify.
| Date | What happened |
|---|---|
| October 3, 2025 | Discord disclosed a breach at a third-party support vendor affecting users who had contacted Customer Support or Trust and Safety. |
| October 8-9, 2025 | Discord put the figure at roughly 70,000 users whose government-ID photos may have been exposed, and named vendor 5CA — which denies its systems were involved. |
| February 9, 2026 | Discord announced global teen-by-default settings with age assurance, set to begin rolling out in early March. |
| February 24, 2026 | After public backlash, Discord delayed the global rollout to the second half of 2026 and committed to on-device facial age estimation and vendor transparency. |
| June-July 2026 | Discord tested new verification methods: a Google Wallet passport pass, a credit card check, and on-device ID scanning with a new vendor, Incode. |
| August 2026 | The rollout window Discord set is open. Mid-July reporting confirms the global switch has not been flipped, and Brazil is expected to join the law-required list. |
Timeline compiled from Discord's announcements, support documentation, and independent reporting. Details can change inside the open window; Discord's age assurance documentation has the current state.
Credit where the record supports it. Discord delayed the rollout in response to criticism rather than pushing through it, acknowledged in its CTO's own words that it explained the plan poorly, and now requires facial age estimation to run entirely on-device — dropping a vendor that could not meet that bar. Its current vendor documentation says ID images go to the verifier, are deleted after age confirmation, and are never linked to the Discord account. And since early 2026, every voice and video call is end-to-end encrypted by default under the open-source DAVE protocol, stage channels excepted. Those are real improvements. Proton's counterpoint is also fair: swapping the ID-check vendor does not change the architecture that failed in 2025, and text chat — the part most people actually use — remains readable by the platform.
Why the Breach Matters More Than the Policy
The strongest argument for keeping an alternative ready is not Discord's policy; it is the demonstrated failure mode of centralized identity pipelines. In October 2025, attackers compromised a third-party customer support environment and reached data from users who had contacted Discord's support teams — including, by Discord's count, roughly 70,000 government-ID photos submitted for age-related appeals. The attackers claimed a far larger haul; Discord disputes those numbers as extortion inflation and refused the ransom. The entry point was not the verification system but the appeal path — users flagged as underage who sent documents to prove otherwise.
A password can be rotated after a breach. A passport cannot. Any pipeline that collects identity documents at scale concentrates a permanent kind of risk in one place, whoever operates it and however good the intentions. That is the architecture argument, and October 2025 is its documented case. The pipelines themselves are largely a product of law — the UK's Online Safety Act, Australia's rules, Brazil's incoming requirements, and similar mandates advancing in the EU and several US states — which means more platforms will build them, not fewer. Roblox and YouTube already have.
This guide is not a route around protections aimed at minors; it is written for adults weighing a privacy trade the law now forces platforms to offer. And candidly, every platform below runs a far smaller trust-and-safety operation than Discord does. If you moderate a community, that belongs on the cost side of your ledger.
The Five Alternatives, Compared
Matrix and Stoat replace the Discord experience, Mumble replaces the voice channel, and Session and SimpleX replace the account itself. The short version is below; the honest details follow.
| Platform | Feels like Discord? | Identity required | End-to-end encryption | Jurisdiction | Self-hostable |
|---|---|---|---|---|---|
| Matrix (Element) | Yes — closest match | None if self-hosted | Yes, in private rooms | Open protocol; servers anywhere | Yes |
| Stoat (formerly Revolt) | Yes — near identical | No; on the roadmap | UK | Yes | |
| Mumble | Voice only | None on your own server | Encrypted to a server you control | Yours | Yes — built for it |
| Session | No — messenger | None; random Session ID | Yes; forward secrecy arrives with Protocol V2 | Switzerland (foundation) | No |
| SimpleX | No — messenger | None; no user IDs exist | Yes | UK; relays run anywhere | Yes (relays) |
Matrix (Element): The Closest Full Replacement
Matrix is an open protocol, not a company product, and Element is its flagship client — spaces, rooms, voice, and video in a layout any Discord user will recognize within minutes. Private rooms and direct messages are end-to-end encrypted by default, and if you run your own homeserver, no one can require anything from you at signup, because you are the one issuing accounts. The protocol's institutional record is unusual evidence of maturity: France's Tchap runs a private federation of roughly 350,000 active users, and Germany's BwMessenger serves over 100,000 in the armed forces. Some privacy advocates dislike the institutional embrace; the more useful read is that a deployment is not a backdoor — the code is open, and your server answers to you. The honest costs: clients are heavier and less polished than Discord, and when you host, moderation and uptime are your job.
Stoat (Formerly Revolt): The Familiar Interface
Stoat is the open-source project that rebranded from Revolt in October 2025 after a cease-and-desist over the name — same team, same servers, same data. Its entire design goal is to feel like Discord, and it does, down to the muscle memory. An email address is all it asks, the code is open source, and you can self-host your own instance. The honest caveat is significant: Stoat does not offer end-to-end encryption today. The team's own answer is that DMs are not currently encrypted end-to-end, though it remains on the roadmap. Add a small, largely volunteer team and an iOS app still in development, and the fair framing is this: Stoat is a familiar room without the corporate checkpoint, not a vault.
Mumble: Self-Hosted Voice That Just Works
If what you actually use Discord for is a voice channel during games, Mumble has been solving exactly that for two decades: low-latency voice, positional audio, and a server you run yourself — on a Raspberry Pi, if you like. There is no account system beyond your own server; client certificates handle identity, so there is nothing to hand over and no one to hand it to. The honest costs: it is voice only, the interface looks its age, and traffic is encrypted between client and server rather than end-to-end — which is the whole point when the server is yours, and a real caveat when it is not.
Session: No Identity, Swiss Stewardship, Real Trade-offs
Session asks for nothing at signup — no phone number, no email. Your identity is a randomly generated Session ID, and messages travel over an onion-routed network so no single node sees both ends. Since late 2024 the project has been stewarded by the Session Technology Foundation in Switzerland, after its predecessor stepped back from Australia's regulatory climate. Two honest disclosures the glowing reviews tend to skip: in April 2026 the foundation said publicly it would wind down without at least $1 million in new funding, then confirmed on June 15 it had secured enough to continue — a real sustainability scare, recently resolved. And the current Session protocol lacks forward secrecy; the project's announced Protocol V2 re-implements it alongside post-quantum cryptography, but it is not what ships today. Session is also not Discord-shaped: it is a messenger with communities, not voice-channel hangouts.
SimpleX: The No-Identifier Design, Tested
SimpleX's defining property is that user identifiers do not exist at all — not a username, not a random ID, nothing persistent to subpoena or correlate. That design has now been tested against reality: the company's transparency report states it received 12 law-enforcement requests in 2025 and identified no responsive information to provide. Trail of Bits reviewed the protocol design in 2024. The company is UK-registered, a fair caveat under British surveillance law, but the architecture is the answer to the jurisdiction question: the operator cannot see who talks to whom, and you can run your own relays. Honestly placed, SimpleX is the strongest privacy tool on this page and the least Discord-like: best at one-to-one and small groups, with large groups improving but nowhere near Discord-grade.
If your question is really about private messengers — Signal, Threema, and the rest — that comparison lives in our secure messaging apps guide. This page is about replacing the community, not the text thread. And no, Telegram is not the privacy upgrade it markets itself as: default chats are not end-to-end encrypted.
The Sovereignty Ceiling: Run the Server Yourself
A Raspberry Pi 5 or a small mini PC on your shelf can host a Matrix homeserver for a mid-sized community, or a Mumble voice server for game night, with no company in the loop at all. Synapse is the reference Matrix server, lighter implementations exist for modest hardware, and the deployment pattern is the same one we use for other self-hosted services: run it in Docker, put a reverse proxy in front, and keep it on an isolated network segment — the exact setup from our self-hosted server deployment guide applies unchanged. For choosing the box itself, our mini PC guide covers the hardware tiers; a community chat server needs far less than a local AI workload, so the budget tier is plenty.
Check Price on Amazon: CanaKit Raspberry Pi 5 Kit
The trade is the one sovereignty always asks for: federation choices, backups, and moderation become your job. In exchange, this is the single exit on this page that no future policy change, vendor swap, or acquisition can touch.
What You Give Up
Network effects, discovery, polish, and Discord's trust-and-safety infrastructure — those are the honest costs of leaving, and they are not small. So the calm version of the decision looks like this. Staying restricted costs nothing and exposes nothing: you lose age-gated access and keep everything else. Verifying is less exposing than early coverage suggested now that on-device estimation, wallet passes, and card checks are arriving — read what the vendor processes before submitting anything. Migrating means the table above, plus the reality that most communities run both platforms in parallel for months. That is not failure; that is how migrations actually work. What the past year settled is the direction: identity checkpoints are becoming legal infrastructure, and the only communications layer they can never reach is the one running on hardware you control.
Frequently Asked Questions
Does Discord require ID verification from everyone?
No. As of August 2026, mandatory age assurance applies only in the UK and Australia, and Discord says more than 90 percent of users will never be asked to verify because its inference model estimates age from account signals. Manual verification is triggered mainly by accessing age-restricted content, changing certain settings, or appealing an age flag. The delayed global rollout is scheduled for the second half of 2026.
Is Discord end-to-end encrypted?
Voice and video, yes: since early 2026, calls, voice channels, and Go Live streams are end-to-end encrypted by default under Discord's open-source DAVE protocol, with stage channels the exception. Text messages are not end-to-end encrypted — the platform can read them, which is part of what enables its content moderation.
What happened in the October 2025 Discord ID breach?
Attackers compromised a third-party customer support environment and accessed data from users who had contacted Discord's support teams — including roughly 70,000 government-ID photos submitted for age-related appeals, by Discord's count. The attackers claimed a far larger haul, which Discord disputes as extortion inflation; the company refused the ransom. Discord named vendor 5CA, which denies its systems were involved.
Which Discord alternatives require no phone number or email?
Session, where a random Session ID is your only identity, and SimpleX, which has no user identifiers at all. Matrix requires nothing if you host your own server, though public homeservers usually ask for an email. Mumble needs no account beyond the server you run yourself. Stoat asks for an email address.
Can I run a Discord alternative on a Raspberry Pi?
Yes. A Raspberry Pi 5 or a small mini PC can host a Matrix homeserver for a mid-sized community, or a Mumble voice server for a game group. Run it in Docker behind a reverse proxy, keep it on an isolated network segment, and your community's conversations never touch a company's cloud in the first place.
Is Matrix still private if governments use it?
Government adoption is evidence of protocol maturity, not a backdoor. France's Tchap and Germany's BwMessenger run as private federations on government-controlled servers precisely because Matrix is open source and self-hostable — the same properties that let you keep your own homeserver, and your community's data, entirely under your control.
