What is World’s Orb, and how does it work?
The Orb is a device that verifies you are a unique human by capturing and processing photos of your face and eyes that tell people apart from one another without knowing who someone is.
Shaped like a chrome sphere about the size of a bowling ball, the Orb plays a critical role in the World Network ecosystem by helping users verify their humanness. By taking a photo of the iris, the Orb ensures that each registered World ID corresponds to a real, unique person and not artificial intelligence or a bot.
Orb employs a combination of camera sensors and machine learning models to analyze both facial and iris features. World does not use your iris to identify who you are; instead, it simply confirms that you are unique and do not already exist in the system.
World’s Orb is more than just a biometric device; it’s a key component in the World ecosystem. By facilitating proof of human verification through iris images, the Orb creates a bridge between users and their digital identities, connecting them to World ID, a unique identifier that enables individuals to access various services and participate in the World Network.
How to scan an iris with World’s Orb
The first step in accessing World Network is to download the World App, then find a World Orb), which is available in 16 countries worldwide as of October 2024.
After selecting an Orb location, you will go through a simple process. The Orb takes a picture of your iris without storing your personal data or requiring additional eye scans to check your identity.
Once the verification process is complete and the Orb captures several images of the user’s irises, it generates an IrisCode. This numerical representation highlights key features of the iris pattern that can be used to issue a World ID.
World’s Orb update
In October 2024, Worldcoin announced a rebranding, dropping the “coin” from its name and simplifying its name to “World.” World also introduced the next generation of the Orb along with the new name.
The updated Orb is built with Nvidia hardware, aiming to make it significantly more robust — reportedly five times more so than its predecessor. It features a smaller design and fewer components, enhancing its usability.
The latest version of the Orb has been redesigned to improve efficiency, with 30% fewer parts and three times the processing capacity. This upgrade is intended to support faster AI operations and enhance privacy features directly within the device.
In the future, users will find these new Orbs in self-service kiosks in select markets. For those who prefer not to seek out an Orb in person, World Network plans to introduce an on-demand service where users can request an Orb delivered with a simple button tap, similar to ordering through a delivery app. World also encourages people to become “community operators” by renting or purchasing an Orb to verify others in their local area.
Earlier versions of the Orb drew both interest and criticism, especially among privacy advocates. In response, World has added some transparency measures, such as introducing removable SD cards to allow public auditing of the operating code. Additionally, the World Network made open-source software the core component of the Orb, enabling further scrutiny and accountability.
World is also expanding WorldID verification options. Users will soon be able to confirm their unique humanness through methods beyond the Orb hardware. With the introduction of World ID Credentials, those holding near-field communication (NFC)-enabled government-issued passports will be able to authenticate themselves directly within the World app.
Did you know? Due to the excessive collection of biometric data, countries like Hong Kong, Portugal, South Korea and Germany have expressed serious concerns about World’s Orb data collection and privacy practices, leading to regulatory actions such as bans and investigations.
How World’s Orb protects personal data
World’s Orb is designed with privacy in mind, ensuring that your biometric data remains secure and under your control.
When the Orb scans your iris, it doesn’t actually store that image permanently; instead, it captures your iris pattern just long enough to create a unique, encrypted code that confirms you’re a genuine and unique human.
The code called iris code doesn’t reveal any personal information — it’s just a set of encrypted numbers that represent your unique identity. Once this is created, the Orb deletes the iris image immediately, leaving only the encrypted code.
By default, this encrypted information bundle is stored securely on your phone, giving you a fully verified World ID and access to the World Network’s entire platform. Notably, you can even delete this data later if you choose.
If you prefer not to opt in, you can still use the World App to set up a wallet and use the World ID verified by your device. In both cases, Orb’s setup ensures that data about your unique identity is decentralized and encrypted, split across multiple servers to reduce privacy risks. This unique privacy framework lets you control your data while ensuring the security needed to power a trustworthy, user-focused ID system.
World’s Orb privacy measures have been updated to address growing concerns about transparency and control. If a user decides to “un-verify” their World ID, they can request the deletion of their old iris code permanently, rendering it invalid. This code is erased permanently after a six-month cool-off period,
Did you know? As World shifts its focus from Europe to Asia and Latin America, it faces ongoing regulatory scrutiny regarding its compliance with the General Data Protection Regulation (GDPR).
How World’s Orb ensures data security for third-parties
World’s Orb-verified World IDs can provide a robust solution for third-party platforms focused on data privacy, enhancing security practices while facilitating safe and user-friendly interactions.
By integrating the World ID, companies can ensure that user data remains protected without sacrificing functionality. This means that users can enjoy seamless experiences while knowing their personal information is kept under wraps.
The uniqueness of the Orb and World ID lies in its ability to create a layer of security that third-party platforms can rely on. For instance, when users interact with applications using the World ID, their biometric data isn’t stored on those platforms but is instead processed securely. This approach minimizes the risk of data breaches and unauthorized access, making it an attractive choice for businesses aiming to maintain user trust.
In addition to protecting user data, World has also introduced in-person age verification to prevent minors from participating in activities that may not be suitable for them. This verification check is particularly significant as it does not involve recording or storing data, effectively addressing concerns about younger users’ privacy. By ensuring that age verification is handled securely and discreetly, World reinforces its commitment to safeguarding user information.
Companies that adopt the World ID can benefit from a more efficient verification process. By leveraging the World ID technology, platforms can streamline humanness checks, making onboarding smoother while still adhering to strict privacy standards. This can be particularly valuable for industries that handle sensitive information, such as finance or healthcare, where safeguarding user data is paramount.
World’s Orb and privacy issues
With so much at stake, the questions about how personal data collected with World’s Orb is handled and protected continue to loom large, leaving many users hesitant about the whole endeavor.
Regarding data privacy, World’s Orb has raised serious concerns regarding the possibility of improperly handling or misusing biometric data. The primary issue is the lack of openness surrounding the use and storage of this data.
To address this, World has introduced AMPC (anonymized multi-party computation), which is a next-gen, open-source quantum-secure protocol for privacy-preserving biometric verification. It protects iris data by anonymizing it during processing, ensuring no sensitive information is exposed. Leveraging high-performance NVIDIA GPUs, AMPC achieves up to 50 million pairwise comparisons per second, advancing privacy, security, and scalability in global biometric systems.
According to critics, there is no assurance that the data won’t be accessed by unauthorized parties or even sold to third-party businesses or the black market if there are no defined guidelines. The history of data breaches in the tech sector contributes to this worry, making people hesitant to trust new technologies, regardless of how innovative they seem.
Moreover, there are questions about consent. How informed are users when they opt to participate in the World Network project? If the terms are unclear or complex, people might not fully understand what they are signing up for. This may cause those who are less tech-savvy to feel like they are being taken advantage of.
Compounding these concerns, a report from CertiK revealed a serious security vulnerability in the operator onboarding process. This flaw could have allowed individuals to bypass verification and operate an Orb without proper identification or even being a legitimate company. While World’s team has since fixed the issue, the discovery adds fuel to the fire of ongoing privacy and ethical debates surrounding the project.