Verification, and what is read

You complete 5 comment engagements through the app. Only someone holding the phone can leave a comment from that account, which is exactly what ownership means — and the check is useful work rather than a hoop, because five real creators get a real comment out of it.

It is deliberately low-tech. A password would be a liability for both sides, and an official login would grant far broader access than reading a public profile requires.

This is the same proof Instagram uses, run by the same wizard. TikTok used to be different: ownership was proved with a short code placed in your bio and read back from your public profile. That challenge is gone, and both platforms now have one definition of verified. If you still have an old code in your bio, you can remove it.

A second guard does work the bio code never could. TikTok releases an abandoned handle for reclaim after 30 days, which Instagram does not, so a handle is not a durable identity here. Ownership is re-checked against the stable identifier behind it, and revoked when that identifier moves — even though the handle still matches.

Public profile fields: username, follower and following counts, video count, total likes, whether the account is private or verified, and your duet, stitch and comment settings.

Public video data for recent posts: the video id, when it was posted, the caption, its hashtags, the sound, and the duration.

Public counters for those videos: plays, likes, comments, shares and saves.

Nothing private. No analytics only you can see, no messages, no drafts, no audience demographics. Everything read is visible to anyone who opens your profile.

Delivery is confirmed by a combination of automated checks and pattern review across an account's history, rather than by any single test. Nothing here is described as verified unless it is.

The creator who was expecting an engagement can dispute it. Disputes carry screenshot proof, a right of reply and a human moderator, and the penalties run both ways — filing a false report costs the same as failing to deliver, so neither side of the lie is free.

On top of that sit the pacing and realism rails: an account whose actions arrive too fast, too evenly, or in a mix real audiences never produce is visible as a pattern long before any individual action is examined.

What is not published is a breakdown of which checks apply to which action. A public map of where the checks are thinnest is of use to almost nobody except the people the checks exist to stop.

Both of the things that used to stand in the way are gone. The feature flag that hid the whole TikTok surface — features.tiktok, set by the TIKTOK_ENABLED environment variable — is on, and the service that reads public TikTok profiles has a provider behind it, so an account can be looked up and verification can complete.

A verified TikTok account gets you into the comment exchange, which is the one of the four that has shipped, and into PowerSwap, which is not gated on a room being open. It also gets you a vote. Watch, Saves and Deep Dive are written and tested and deliberately held back, and each member has one vote for which of them opens next.

Holding three finished exchanges behind a vote is a real cost, and it is worth saying why it was paid. Shipping all four at once on a platform with a small connected population would have produced four thin rooms rather than one that fills — and build order chosen by what members actually want beats build order chosen by the sequence things happened to be written in.

A new account is not thrown straight into delivery. An account under 14 days old, or with fewer than 5 posts, is held back from the rails' full pace — the quarantine rule is on the safety-rails page in full.