Google Introduces Selfie Video Verification for Account Sign-In and Recovery

Google on Thursday rolled out a new selfie video verification feature, providing users an alternative method for logging into their accounts and for recovery if they are locked out. The Alphabet-owned company said the new option is designed to offer stronger protection in cases of forgotten passwords or lost devices, according to a report from Reuters.

How the Feature Works

The system requires users to first set up verification by recording a brief video of themselves. During this process, they will be prompted to perform specific head movements to capture their likeness from multiple angles. This recording is then saved to their account.

To sign in or recover an account later, a user will record a new, live video performing similar guided movements. Google's system will then compare this live video to the stored recording to authenticate the user's identity. The feature became available to eligible Google Account users on Thursday.

Security and Privacy Implications

Ad

While the video selfie method could bolster security against fraud, it also raises privacy considerations surrounding the collection and storage of biometric data. Google stated that the verification video is stored only with the user's consent and can be deleted at any time through their account settings.

The company also noted that the video data will be used exclusively for sign-in purposes unless a user explicitly opts in for other uses. To combat impersonation attempts, including sophisticated deepfakes, Google said it employs security checks that compare the new recording with the saved video and require specific live movements to confirm the user is present.

Context for Account Security

This launch adds another layer to the account security landscape, which currently relies on methods like trusted devices, registered phone numbers, recovery contacts, and two-factor authentication (2FA). The use of facial recognition and other biometric identifiers by major technology firms has long been a subject of public and regulatory debate over data privacy and security.