Google adds selfie videos as a fallback for account recovery

Google said Thursday it has added selfie-video verification as a recovery option for Google accounts, a fallback aimed at users who lose access to their devices, email and phone-based recovery methods. No financial terms are involved, but the move matters because more consumer and enterprise identity flows are shifting toward passkeys tied to physical devices.

The new method lets a user record a short video of their face in advance through Google’s selfie video management process. If other recovery options are unavailable later, Google says it may ask the user to record a new video and compare it with the enrolled one before restoring account access.

Google says enrollment requires a device with a camera and asks users to show both a front-facing view and side-to-side head movement. The company says that motion is intended to make abuse harder, particularly against live deepfake-style face replacement, which can struggle when a subject turns to a profile view.

A fallback for passkey failure modes

In response to questions from The Register, Google linked the feature to the rise of passkeys and other device-based authentication methods. The company said it expects many users to prefer passkeys for routine sign-ins, while using selfie recovery in cases such as losing a phone or another device that holds a passkey.

Google also said the selfie flow is not the same product category as Apple’s Face ID or Android face unlock, which are used for local device access. The company described the new feature as an account recovery tool rather than a day-to-day sign-in method.

The company did not present selfie video as a guaranteed way back into an account. Google told The Register that passing the video check may not be enough on its own, and that it evaluates risk using multiple factors. It may still require other sign-in methods before restoring access.

Security and data questions

The security tradeoff is straightforward. Some Apple devices with Face ID and some higher-end Android devices use infrared cameras and depth mapping to compare a user’s face against a stored 3D representation. Google’s account recovery feature, as described, relies on standard video, automated face matching and the difficulty of faking certain head movements in real time.

Google’s bet is that the video check adds a useful recovery path without becoming an easy bypass. The unanswered question is how long the side-profile requirement remains a meaningful obstacle as synthetic video tools improve. Google did not disclose false acceptance rates, false rejection rates or other performance metrics for the system.

The feature also creates a new biometric data decision for users. Google says the selfie scans are encrypted at rest, stored only with user consent and used only to help with sign-in unless the user opts into additional uses.

On its help page, Google says users can choose to let the company use the video and related data to help improve facial recognition, age estimation and other verification methods. That setting, labeled “Improve Google Services” during the selfie enrollment process, is not selected by default, according to Google.

For Google, the product addresses a practical weakness in device-bound authentication: account recovery becomes harder when the trusted device is gone. For users, it trades one risk for another, adding a recovery path while asking them to trust Google with a live recording of their face.

This story draws on original reporting from The Register.