If you’ve spent any time in adtech conversations this year, you’ve probably heard someone mention UID2. Maybe in a webinar. Maybe in a pitch deck from your DSP rep. Maybe on a podcast where the host kept saying “cookieless future” like it was a doomsday prophecy.
Here’s the thing: UID2 isn’t new. It’s been building quietly for years. But it just crossed a threshold that makes it impossible to ignore — and if you’re still running campaigns on cookie-based targeting, you’re running out of runway.
This is a plain-English breakdown of what UID2 actually is, how it works, who’s using it, and why it matters for your ad strategy heading into 2027.
What Is UID2, Exactly?
UID2 — short for Unified ID 2.0 — is an open-source identity framework designed to replace the role that third-party cookies used to play in digital advertising. It was originally created by The Trade Desk and has since been transferred to Prebid.org for independent governance.
Instead of tracking users across sites with cookies (which are now blocked in Safari, Firefox, and increasingly restricted in Chrome), UID2 creates a persistent, encrypted identifier from a piece of first-party data — typically a hashed email address or phone number.
That identifier can then be used across publishers, advertisers, and platforms to do the things cookies used to handle: frequency capping, audience targeting, measurement, and attribution. But with one big difference — the user actually provided the data voluntarily.
How Does It Actually Work?
The mechanics are straightforward, even if the infrastructure behind them is complex:
- A user authenticates. They log in, sign up for a newsletter, create an account — anything that provides an email address or phone number.
- That identifier gets hashed and encrypted. The raw email is never stored or shared. It’s run through SHA-256 hashing, then encrypted into a UID2 token by a certified operator.
- The token travels through the ad ecosystem. Publishers pass it in the bidstream. Advertisers match it against their own first-party data. DSPs and SSPs use it for targeting and measurement.
- The user can opt out at any time. UID2 includes a Transparency and Control Portal where consumers can revoke their participation entirely.
Worth noting: the raw email is never shared between parties. Each participant only sees encrypted tokens. If a user opts out, their token gets invalidated across the entire ecosystem — not just one platform.
Why Now? The Cookie Problem Hit Critical Mass
Third-party cookies have been dead in Safari since 2020 and Firefox since 2019. Chrome — which still holds roughly 65% of global browser share — has been steadily restricting them through its Privacy Sandbox migration.
The result? 54% of mobile impressions now lack traditional identifiers entirely. That means more than half the mobile inventory advertisers are buying comes with no way to tie it back to a real person using cookies alone.
That’s the vacuum UID2 fills. Not by recreating the cookie’s cross-site tracking behavior, but by building identity on something more durable: a direct relationship between the user and the publisher.
Who’s Already Using It?
This isn’t theoretical. UID2 has crossed what The Trade Desk’s CEO Jeff Green called “critical mass” of adoption.
As of 2026, over 300 companies have implemented UID2, according to Landbase’s tracking data. The list includes names you’d recognize:
- Publishers: The Washington Post, New York Post, Dotdash Meredith, The Hollywood Reporter
- Streaming & CTV: Roku, Fox, DirecTV
- Audio: Spotify, Pandora
- DSPs & SSPs: The Trade Desk (obviously), plus broad SSP integration across the programmatic ecosystem
The revenue incentive is real. The Washington Post reported that authenticated users — those with a UID2 token — generated CPMs roughly 3 to 4 times higher than unauthenticated inventory. Dotdash Meredith saw similar results in early A/B tests.
When authenticated impressions pay three or four times more, publishers get serious about login walls fast.
Where UID2 Actually Shines (It’s Not Just the Browser)
Here’s something that gets overlooked in the “UID2 vs. cookies” conversation: cookies only ever worked in web browsers. UID2 works everywhere.
- Connected TV (CTV): No cookies on your Roku or Fire Stick. But UID2 tokens work natively.
- Mobile apps: Apple’s ATT framework gutted IDFA-based tracking. UID2 gives app publishers an alternative identity layer.
- Audio streaming: Logged-in users on Spotify and Pandora can be addressed with UID2 — something cookies never could have done.
- Programmatic display: The open web, obviously. But with better privacy controls than cookies offered.
As Jeff Green put it: UID2 is “an identity framework that works across all digital advertising channels, not just a couple of walled gardens that own browsers.”
UID2 Isn’t the Only Game in Town
Let’s be honest here. UID2 is the most widely adopted alternative identifier, but it’s not the only one. The 2026 identity landscape is a portfolio, not a single replacement:
- ID5 Universal ID — A deterministic-plus-probabilistic hybrid with strong SSP coverage
- LiveRamp’s RampID — Tied into LiveRamp’s broader identity graph and authenticated traffic infrastructure
- Google Privacy Sandbox — Chrome’s native replacement (Topics API, Protected Audience API, Attribution Reporting API) — in production, but effectiveness varies by use case
- First-party data activation — CDPs, email-based identifiers, loyalty programs. The foundation underneath everything else.
Smart marketers (and we mean that literally — anyone thinking clearly about this) aren’t betting on just one solution. They’re building a stack that layers authenticated identifiers like UID2 on top of strong first-party data infrastructure.
What About Europe? Meet EUID
If you operate in European markets, there’s a separate implementation called EUID (European Unified ID). Same technical framework, but built to satisfy GDPR and the IAB’s Transparency and Consent Framework (TCF).
The main differences are around consent practices — EUID requires explicit opt-in under GDPR, while UID2 follows local regulations like CCPA and CPRA in the US. Both use the same open-source codebase and both offer consumer opt-out controls.
If you’re a US-only advertiser, UID2 is your lane. If you’re running campaigns in the EU or UK, you’ll want EUID on your radar too.
What This Means for Your 2027 Planning
Here’s the practical takeaway. If you’re planning media budgets or evaluating identity solutions for next year, three things matter:
1. Prioritize authenticated inventory. Publishers with UID2 integration are producing better match rates, better CPMs, and better measurement. Your media dollars go further when they’re pointed at authenticated impressions.
2. Build your first-party data foundation now. UID2 only works when someone provides an email or phone number. If your site relies entirely on anonymous traffic, you have no identifiers to work with.
That means login incentives, newsletter signups, gated content, and value exchanges that make people want to authenticate.
3. Work with UID2-compliant partners. Not every identity resolution vendor, data enrichment platform, or ad tech partner supports UID2 yet. When evaluating tools, ask specifically about UID2 integration.
Smart Marketer, for example, is UID2-compliant across its identity resolution infrastructure — matching against 307M+ profiles while maintaining the encrypted, consent-based framework UID2 requires.
The identity landscape isn’t getting simpler. But UID2 gives the open internet something it hasn’t had since cookies started dying: a standardized, privacy-respecting way to connect advertisers with real people across every channel. That’s worth understanding now — not in 2027 when your competitors have already made the switch.
