What is Worldcoin’s Orb, and how does it protect your personal data?

What is Worldcoin’s Orb, and how does it work?

Worldcoin’s Orb is a biometric scanning device designed to verify individuals’ identities through their unique iris patterns and create a universal identity system. 

Shaped like a chrome sphere about the size of a bowling ball, the Orb plays a critical role in the Worldcoin ecosystem by helping users register their digital identity. By scanning the iris, the Orb ensures that each registered ID corresponds to a real, unique person and not artificial intelligence or a bot.

Orb employs a combination of camera sensors and machine learning models to analyze both facial and iris features. Worldcoin does not use your iris to identify who you are; instead, it simply confirms that you are unique and do not already exist in the system.

Worldcoin’s Orb is more than just a biometric device; it’s a key component in the Worldcoin ecosystem. By facilitating identity verification through iris scans, the Orb creates a bridge between users and their digital identities, connecting them to World ID, a unique identifier that enables individuals to access various services and participate in the Worldcoin network.

How to scan an iris with Worldcoin’s Orb

The first step in using Worldcoin is to find a Worldcoin Orb, which is available in 16 countries worldwide as of October 2024.

After selecting an Orb location, you will go through a simple process. The Orb takes a picture of your iris without storing your personal data or requiring additional eye scans to check your identity. 

Once the verification process is complete and the Orb captures several images of the user’s irises, it generates an IrisCode. This numerical representation highlights key features of the iris pattern that can be used to issue a World ID. 

Worldcoin’s Orb update

In October 2024, Worldcoin announced a rebranding, dropping the “coin” from its name and simplifying its name to “World.” World also introduced the next generation of the Orb along with the new name.

The updated Orb is built with Nvidia hardware, aiming to make it significantly more robust — reportedly five times more so than its predecessor. It features a smaller design and fewer components, enhancing its usability. 

The latest version of the Orb has been redesigned to improve efficiency, with 30% fewer parts and three times the processing capacity. This upgrade is intended to support faster AI operations and enhance privacy features directly within the device.

In the future, users will find these new Orbs in self-service kiosks in select markets. For those who prefer not to seek out an Orb in person, Worldcoin plans to introduce an on-demand service where users can request an Orb delivered with a simple button tap, similar to ordering through a delivery app. Worldcoin also encourages people to become “community operators” by renting or purchasing an Orb to verify others in their local area. 

Earlier versions of the Orb drew both interest and criticism, especially among privacy advocates. In response, Worldcoin has added some transparency measures, such as introducing removable SD cards to allow public auditing of the operating code. Additionally, Worldcoin made open-source software the core component of the Orb, enabling further scrutiny and accountability.

Worldcoin is also expanding identity verification options. Users will soon be able to confirm their identity through methods beyond the Orb hardware. With the introduction of World ID Credentials, those holding near-field communication (NFC)-enabled government-issued passports will be able to authenticate themselves directly within the World app.

Did you know? Due to the excessive collection of biometric data, countries like Hong Kong, Portugal, South Korea and Germany have expressed serious concerns about Worldcoin’s Orb data collection and privacy practices, leading to regulatory actions such as bans and investigations.

How Worldcoin’s Orb protects personal data

Worldcoin’s Orb is designed with privacy in mind, ensuring that your biometric data remains secure and under your control.

When the Orb scans your iris, it doesn’t actually store that image permanently; instead, it captures your iris pattern just long enough to create a unique, encrypted code that confirms you’re a genuine and unique human. 

This code, known as an “iris fragment,” doesn’t reveal any personal information — it’s just a set of encrypted numbers that represent your unique identity. Once this is created, the Orb deletes the iris image immediately, leaving only the encrypted code.

If you agree to share your data, this encrypted information bundle is stored securely on your phone, giving you a fully verified World ID and access to the World Network’s entire platform. You can even delete this data later if you choose. This opt-in option allows you to help improve the system by enabling Worldcoin to analyze your data, but it’s entirely voluntary.

If you prefer not to opt in, you can still use the World App to set up a wallet and use the World ID verified by your device. In both cases, Orb’s setup ensures that data about your unique identity is decentralized and encrypted, split across multiple servers to reduce privacy risks. This unique privacy framework lets you control your data while ensuring the security needed to power a trustworthy, user-focused ID system.

Worldcoin’s Orb privacy measures have been updated to address growing concerns about transparency and control. If a user decides to “un-verify” their World ID, they can request the deletion of their old iris code permanently, rendering it invalid. This code is erased permanently after a six-month cool-off period, 

Did you know? As Worldcoin shifts its focus from Europe to Asia and Latin America, it faces ongoing regulatory scrutiny regarding its compliance with the General Data Protection Regulation (GDPR).

How Worldcoin’s Orb ensures data security for third-parties

Worldcoin’s Orb can provide a robust solution for third-party platforms focused on data privacy, enhancing security practices while facilitating safe and user-friendly interactions.

By integrating the Orb, companies can ensure that user data remains protected without sacrificing functionality. This means that users can enjoy seamless experiences while knowing their personal information is kept under wraps.

The uniqueness of the Orb lies in its ability to create a layer of security that third-party platforms can rely on. For instance, when users interact with applications using the Orb, their biometric data isn’t stored on those platforms but is instead processed securely. This approach minimizes the risk of data breaches and unauthorized access, making it an attractive choice for businesses aiming to maintain user trust.

In addition to protecting user data, Worldcoin has also introduced in-person age verification to prevent minors from participating in activities that may not be suitable for them. This verification check is particularly significant as it does not involve recording or storing data, effectively addressing concerns about younger users’ privacy. By ensuring that age verification is handled securely and discreetly, Worldcoin reinforces its commitment to safeguarding user information.

Companies that adopt the Orb can benefit from a more efficient verification process. By leveraging the Orb’s technology, platforms can streamline identity checks, making onboarding smoother while still adhering to strict privacy standards. This can be particularly valuable for industries that handle sensitive information, such as finance or healthcare, where safeguarding user data is paramount.

Worldcoin’s Orb and privacy issues

With so much at stake, the questions about how personal data collected with Worldcoin’s Orb is handled and protected continue to loom large, leaving many users hesitant about the whole endeavor.

Regarding data privacy, Worldcoin’s Orb has raised serious concerns regarding the possibility of improperly handling or misusing biometric data. The primary issue is the lack of openness surrounding the use and storage of this data. 

According to critics, there is no assurance that the data won’t be accessed by unauthorized parties or even sold to third-party businesses or the black market if there are no defined guidelines. The history of data breaches in the tech sector contributes to this worry, making people hesitant to trust new technologies, regardless of how innovative they seem.

Moreover, there are questions about consent. How informed are users when they opt to participate in the Worldcoin project? If the terms are unclear or complex, people might not fully understand what they are signing up for. This may cause those who are less tech-savvy to feel like they are being taken advantage of.

Compounding these concerns, a report from CertiK revealed a serious security vulnerability in the operator onboarding process. This flaw could have allowed individuals to bypass verification and operate an Orb without proper identification or even being a legitimate company. While Worldcoin’s team has since fixed the issue, the discovery adds fuel to the fire of ongoing privacy and ethical debates surrounding the project.