All hackers must complete identity verification before submitting to bug bounty programs (BBP). Vulnerability Disclosure Programs (VDPs) aren't affected. VDPs remain open to the public with no ID verification required.
Completing identity verification makes you eligible to receive rewards.
Verification pending? Reviews can take up to 72 hours. We'll update your status once it's complete. If there's an issue, we'll let you know how to fix it. No need to contact Support unless it's been more than 72 hours.
Who is eligible for identity verification?
To be eligible, you must be at least 18 years old and hold a physical identity document supported by our verification partner, Veriff. See Veriff's supported countries and document types.
If you are under 18, contact us at support@hackerone.com for guidance on alternative verification options.
If Veriff does not support your identity document, you are not eligible for verification at this time. We do not process documents manually, nor do we grant exceptions. Veriff updates the supported list regularly, so your document might become eligible later.
Review Veriff's tips and FAQs before you begin. The items below cause most rejections.
Rules we enforce automatically
We reject verifications completed with any of the following:
A VPN
The private reply function on an iOS device
An SDK emulator
A jailbroken device
A traffic anonymizer
Complete verification yourself. Submitting falsified or altered identity documents or using a third party, a service, or another person to verify on your behalf breaches our policies and results in a permanent ban.
Have a valid ID ready
A passport, ID card, residence permit, or driver's license will usually work. Accepted documents depend on your country. Your document must be unexpired and physically undamaged.
Use the physical document. Veriff does not support digital copies or photocopies.
Verification must be completed in the name of the tax form holder.
Set up your device before you start
Recent smartphones give the highest success rate. A good laptop webcam works too. Uncover the camera, clean the lens, and use a recommended browser.
Device - PC, Mac, iPhone and iPad, Android
Recommended browser - Chrome or Firefox, Safari or Chrome, Safari, Chrome
Veriff might request temporary access to your camera and microphone for the session only.
Have your document in hand before you begin. The session closes after around five minutes.
Capture readable photos
Work in even light. Dark rooms and strong backlighting produce unusable images. Remove glasses, headphones, and other headgear.
Fit the whole document inside the on-screen markers and keep the text sharp. If a photo is blurry, select Try again to retake it.
Document type | What to capture |
ID card, driver's license, residence permit | Both sides |
Passport | The photo page carries your picture and personal details |
Selfie step, if requested | You and your document together, in frame and in focus |
How do I become ID verified?
Go to your User profile page and click the ID Verification + Clear header. the User profile page and click the ID Verification header.
Sign the Rules of Engagement. Click the Sign the Rules of Engagement button, review the linked documents, tick the confirmation box, then select Save:
Start the verification. Select the Start Verification button:
Consent and complete the ID Verification. Check out our tips, then read and confirm that you give consent to our ID Verification Vendor, Veriff, to process your data for the identity check by ticking the consent box. Then click the Get Started button. We redirect you to Veriff:
If you are not ready to finish your ID verification, an email will be sent with a link to continue the process later.
After your Veriff session, Veriff confirms on screen whether the data collection succeeded. However, this doesn't confirm your ID verification. HackerOne will email you to confirm your ID verification status, usually within 72 hours, and if your application was not successful, explain any issues and provide guidance for reapplying.
How do I know that my identity is verified?
ID-verified hackers receive a green badge on their profile page:
Clear hackers will still see their Clear badge!
How can I check my verification status?
Track your progress in the same section of your settings page where you started the process.
What does it mean if my verification status has changed?
If your status changes from Approved to Rejected, it may be due to a secondary manual review flagging an issue, for example, VPN use during your session. You will receive a new verification link with details on what to correct, or a member of our Support team will contact you with further guidance.
Why is my verification pending?
Reviews take up to 72 hours. We update your status once the review is complete and notify you if an issue needs to be resolved. No need to contact Support unless more than 72 hours have passed.
Why was my application rejected?
If we reject your verification, do not contact Veriff. Our team sends a new verification link with guidance or contacts you directly for more information. If your application fails twice in a row, email support@hackerone.com for a new link.
Reason | What to do next |
Veriff does not support your ID type | See Who is eligible for identity verification. Until you hold a supported document, you are not eligible for reward payments |
Your ID has expired | Verify with a document valid at the point of application |
Your ID appears to be a photocopy | Photograph the physical document. Veriff does not accept photocopies, scans, or digital copies |
We were unable to read the text in the front image | Blurry or unclear photos prevent Veriff from reading the text. Retake in even light with the whole document inside the markers |
No barcode was detected, or the barcode was unreadable | If your document carries a barcode, capture the full barcode with no blur and no cropping |
We were unable to fully read the MRZ | Capture the machine-readable zone in full, without cropping or blurring. See the example below |
You did not look in the right direction during the selfie | Face the screen throughout. Keep your eyes on the screen and turn your head only when instructed |
A VPN, traffic anonymizer, SDK emulator, or jailbroken device was detected | Retry on a standard device and connection. See What should I know before starting verification |
How often do I need to verify?
ID verification lasts 12 months and must be renewed every year. We alert you to re-verify one month before your expiration date. Renewals must also be completed at least one month before your identity document expires.
If you do not renew in time, we will revoke your ID verification. You lose your green badge, you lose the ability to submit to bug bounty programs, and you lose access to programs requiring ID verification. If you later renew your status successfully, you will receive new invites for the active ID verification-required programs you were removed from, so long as you still meet all of the program’s invite criteria and the program allows reinvites.
A member of our team might ask you to re-verify at any point during the year. If so, we will contact you with more information.
Are you part of Clear? Prioritize your annual renewal to keep your Clear status and privileges.
Is identity verification the same as Clear?
No. Identity verification is separate from HackerOne Clear. Clear requires a successful criminal background check plus all of the following:
Lifetime signal - 44 minimum
Lifetime impact score - 15 minimum
Lifetime bounty earnings - $15,000 minimum
If you meet the Clear criteria, we will contact you separately to complete a criminal background check.