Google has introduced an optional selfie-video method for getting back into a Google Account when a user is locked out or cannot access their usual phone or computer. Eligible users can enroll by recording a short video while following prompts to move their head and capture multiple angles.
If account access is later lost, the user records another selfie. Google compares the new capture with the enrolled video to confirm that the person requesting access is the account holder.
The process adds a biometric recovery option alongside Google’s expanding support for FIDO2 authentication, passkeys and recovery contacts. It addresses a different part of the account lifecycle than a passkey: establishing identity after the primary sign-in method or trusted device is unavailable.
Google says the enrolled video is recorded and stored with the user’s consent, encrypted at rest and removable through account settings. The company says it uses the video only to help with sign-in unless the user chooses to share it for another purpose.
The recovery check includes liveness measures intended to reject photographs, prerecorded videos and synthetic impersonations. A user must perform prompted movements while Google applies its standard controls for detecting suspicious sign-in activity.
That combination makes the saved selfie a biometric reference rather than a reusable password. It also means recovery depends on both a successful face comparison and evidence that a live person is present during the attempt.
Google has not said that the option is available to every account immediately. Users can visit the company’s enrollment page to check eligibility, and the feature remains one of several recovery methods rather than a replacement for all existing options.
The rollout comes as authentication providers are working through the operational questions surrounding maturing passkey deployments, including what happens when a credential or device is lost. Google’s approach places a consent-based face check into that recovery layer while retaining passwordless methods for routine access.
Source: Google
–
By the ID Tech Editorial Team
