Google is moving to expand the use of selfie videos as an additional way to verify account owners’ identities and restore access when they lose their usual device or cannot use other login methods. The company announced the feature in July 2026, before beginning in September to promote it more clearly and display it to a larger number of users.
Setting up a selfie video and recovering an account
The system allows users to set up a selfie video in advance through their account settings by looking at the camera and making simple head movements to record their face from multiple angles. If a user later has difficulty signing in, Google may ask them to record a new clip in the same way, then compare the face shown in it with the face recorded in the stored video to verify their identity.
Google presents this method as an additional account-recovery option, not a replacement for passwords or passkeys, known as “Passkeys”. It is intended for situations in which an account owner loses access to their usual device or cannot sign in using the methods available to them, giving them another way to prove their identity.
The feature is not currently available for all accounts, devices or regions. A selfie video also cannot be set up for Google Workspace accounts, children’s accounts or accounts enrolled in the Advanced Protection Programme. These restrictions confirm that the feature is not a compulsory measure imposed on all users of the company’s services.
Google’s layers of protection against images and deepfakes
The verification process is not limited to directly comparing the two faces in the stored and new recordings. Google says it uses multiple layers of protection to try to prevent users’ identities being impersonated with fake images or recordings, including content created using deepfake technology.
For this reason, users are asked to make a specific movement while recording to help prove that the camera is capturing a real person, rather than a still image or a pre-recorded clip. According to Google’s explanation accompanying the feature’s launch, the selfie video may also be used to verify that an account owner is a real person in some cases linked to making specific features or services available.
This may include checking that the account was not created by automated programmes or is not being used by automated tools for abusive purposes. Regarding facial data, the company says the video is recorded with the user’s consent and stored securely in encrypted form. The account owner can delete the clip, while Google explains that its primary purpose is to help with signing in, unless the user gives separate permission for it to be used for other purposes.
Options for using facial data and developing technologies
The settings provide an option allowing users to consent to the use of the selfie video and associated data to develop and improve Google technologies. The areas listed include facial-recognition technology, age estimation and identity-verification methods based on facial features or movements.
This consent remains optional, and users can withdraw it later. Google explains that the video may not be deleted immediately, as the process can take some time, and that the company may retain the clip briefly for security reasons. The data-retention period may be extended if the account has breached the company’s policies.
The risks of biometric data compared with passwords
Using facial recognition adds a way to recover an account when traditional methods fail, but at the same time introduces sensitive biometric data into the security system. Security analyses indicate that storing a video of a face raises different considerations from storing passwords, because facial features cannot be changed in the way a user can replace a compromised password.
The feature therefore places the convenience of account recovery alongside the requirements of protecting biometric data and its privacy.
As its rollout continues to expand, it remains an optional tool among login and recovery methods, and an example of the growing use of biometric verification to secure digital accounts.
