Google Expands Biometric Identity Check to All Android Devices in 2025

Google has announced that its Identity Check security feature will expand to a broader range of Android smartphones with the upcoming Android 16 release, moving beyond its initial availability on Pixel and Samsung Galaxy devices. The anti-theft feature, which enforces biometric-only authentication for high-risk actions, will soon be supported by other manufacturers including OnePlus, as part of Google’s broader Android security initiative.

Identity Check was first introduced in December via the Pixel Feature Drop and Samsung’s One UI 7 update. When enabled, the feature requires fingerprint or facial recognition before users can perform critical actions, especially when the device is outside of pre-defined “trusted locations.” Unlike previous implementations, the system deliberately removes fallback options such as PINs or passwords, meaning that even if an attacker has the device’s unlock code, they cannot access protected functions without a successful biometric match.

Actions protected by Identity Check include accessing saved passwords and passkeys via Google Password Manager, autofilling credentials in apps (excluding Chrome browser), modifying screen lock settings, changing or removing biometric credentials, initiating a factory reset, disabling Find My Device or theft protection features, accessing Developer options, and adding or removing Google Accounts. The feature also restricts transferring data to a new device and turning off the Identity Check setting itself.

Enabling Identity Check also activates enhanced protection for the user’s Google Account (and Samsung Account on Galaxy devices), making account takeover significantly more difficult. In the event of repeated failed biometric attempts, Android enforces a temporary lockdown, adding an additional deterrent to brute-force access.

Google has also strengthened factory reset protection: a Google Account login is required after a reset, reducing the incentive for device theft by making stolen phones harder to resell. However, the system’s reliance on “trusted locations” introduces a potential limitation—if a device is stolen while in such a location, some protections may not be immediately triggered.

Under the hood, Identity Check builds on biometric prompt updates first introduced in Android 15 QPR1. Android 16 consolidates these changes to simplify adoption for OEMs. Manufacturers must meet specific hardware requirements, including support for a class 3 secure biometric system, to implement the feature. Eligible devices running Android 16 will be able to activate Identity Check manually through Settings > Google > Theft Protection. Setup requires signing into a Google Account and optionally defining trusted locations.

The feature is part of Android’s larger Theft Protection suite, which includes tools like Theft Detection—which can recognize when a phone is snatched—and Offline Device Lock, which automatically locks devices that lose connectivity for an extended period.

Android 16 is scheduled for release in June, with Identity Check becoming available to eligible devices in the months that follow. Users can enable the feature by navigating to their device’s settings once the update is installed.

Sources: Android News, Android Police

—
April 15, 2025 – by Ali Nassar-Smith