Google may require selfie videos to sign in: What it means for account security
Google selfie verification will help protect accounts from bot attacks (Photo: Pexels)
Google is introducing a new way to sign in to and recover accounts using a short selfie video. The company says the feature is designed to make accounts harder to hack while simplifying identity verification, according to Google.
How does selfie sign-in and recovery work?
Creating a video reference takes just a few simple steps.
Users are asked to look into their device's camera and follow a few prompts, such as turning their head left, right, or nodding. This allows the system to capture the face from multiple angles.
If you later have trouble accessing your account, you'll simply need to record a new selfie video.
Google's algorithms compare it with the previously saved recording to verify your identity and restore access to your email, documents, or photos.
Multi-layer protection against bots and deepfakes
The main goal is to confirm that a real person, not a fake image, deepfake, or bot, is in front of the camera.
To prevent deepfakes and forged photos, Google uses several security measures:
- Liveness detection: Users must perform simple head movements while recording.
- Automated comparison: The new recording is matched against the saved reference video.
- Threat monitoring: Google uses its standard security systems to detect suspicious login attempts.
Privacy and protection of biometric data
The collection of biometric data has raised concerns among regulators, but Google says selfie videos are stored only with the user's consent and are used solely for authentication unless the user explicitly authorizes other uses.
All selfie videos are fully encrypted and remain protected even when not in use. Users retain full control over their data and can delete their selfie video from their account at any time.
The feature complements Google's existing security tools, including passkeys and recovery contacts. Users can check whether the feature is available for their account and enable it through Google's dedicated settings page.
