Google Extends Android Identity Check to Enforce Biometric-Only App Access Outside Trusted Locations

Google is expanding Android’s anti-theft capabilities with an update to its Identity Check feature in Android 16 QPR2, slated for public release in Q4 2025, with December widely expected. When Identity Check is turned on, the system will enforce biometric-only authentication for any app using the standard Android biometric prompt, removing the option to fall back to a PIN, pattern, or password when the device is outside trusted locations. This ensures sensitive applications remain protected even if a thief obtains a user’s screen lock credentials.

The update builds on the Identity Check feature introduced earlier this year, which requires biometric authentication for certain actions outside trusted locations. With QPR2, the protection extends to any application that integrates with the system biometric prompt. After installing the QPR2 beta, users see a notice in Settings ▸ Security & privacy stating: “Identity Check is available on more apps. You can secure your identity protection on any app that offers Fingerprint or Face Unlock to identify you.”

Additional Security Enhancements

The QPR2 update also introduces a rolling-out biometric setting for Chrome’s password Autofill, extending protections to Google’s password management system and closing a long-standing gap in web autofill security. This follows the company’s Android Enterprise feature drop in June 2025, which emphasized biometric authentication and device protection for business users.

Identity Check protections are enforced automatically when enabled and the device is detected outside trusted locations. This targeted approach is designed to protect against theft scenarios while maintaining convenience in secure environments. The move aligns with a broader industry trend toward stronger biometric security in smartphones.

Sources: Android Authority

–

By the ID Tech Editorial Team