Google launches selfie video authentication for account recovery

Google has introduced a new authentication method that permits users to access their accounts by capturing a short video of their face performing simple head movements. The system verifies identity by comparing the live recording against an encrypted reference video stored in the cloud. This serves as an alternative access method for users who have forgotten passwords or lack access to two-factor authentication devices.

The setup process requires users to look at their device’s camera and follow onscreen prompts to capture multiple angles of their face. Unlike Apple’s Face ID, the system does not require added infrared light. The reference video is recorded and securely stored in the cloud using encryption, making it accessible across devices, not just the one where it was created.

Users can delete the saved selfie video at any time through their account settings. By default, the saved selfie video is used only for sign-in, but Google states users can opt to share it for additional purposes. The specific nature of these additional purposes is not defined in the current release details.

Multiple layers of security are employed to prevent impersonation attempts using photos or deepfake videos. Google applies its standard security practices to prevent suspicious sign-in attempts from succeeding, though the specific technical mechanisms used to prevent deepfake impersonation are not detailed in the source material.

Google is rolling out the feature globally in phases, with users able to check eligibility and set up the feature at g.co/signin-selfie. The exact timeline for the global phased rollout is not specified. The feature is designed to help users regain access to their accounts if they are locked out, forget their password, or do not have access to their phone, computer, or two-factor authentication apps.