; and (B) that the user is not less than 18 years old. (2) Means of compliance In carrying out paragraph (1), a covered platform operator shall verify the identity and age of a user by— (A) requiring use of an adult access code or adult personal identification number; (B) accepting a digital certificate that verifies age; or (C) using any other reasonable measure of age verification that the Attorney General has determined to be feasible with available technology. (3) Insufficient user confirmation Merely requiring a user to confirm that the user is not less than 18 years of age, without independent means of verification, shall not satisfy the requirement under paragraph (1). (b) Verification of participants (1) In general A covered platform operator may not upload or allow a user to upload a pornographic image to the covered platform unless the operator has verified, in accordance with paragraph (2), that each individual appearing in the pornographic image— (A) was not less than 18 years of age when the pornographic image was created; (B) has provided explicit written evidence of consent for each sex act in which the individual engaged during the creation of the pornographic image