Google is introducing a new way to recover account access—a short selfie video. This feature is designed for situations where users can't log in and don't have access to their usual phone or computer. During setup, you'll need to record a video with a few head movements so the system can capture your face from different angles. If your access is blocked in the future, you'll be asked to record a new video, which will be compared to the one previously saved. The rollout of this feature is happening gradually starting July 23. You can check if the option is available for your account at g.co/signin-selfie.

An Additional Recovery Method

The selfie video does not replace your password or access key. It's an extra recovery method that complements existing recovery contacts and other options. It's recommended to set up several ways to recover your account. This feature is not available for Workspace accounts, child accounts, or users enrolled in the Advanced Protection Program. The saved video is encrypted, used only for sign-in by default, and can be deleted at any time. Using your video to improve algorithms is only possible with your consent.

Protection Against Fake Photos and Videos

The system includes multi-layered protection against fake images and videos. The main mechanism is a "liveness" check: users are asked to perform small movements to confirm that a real person—not a photo—is in front of the camera. This approach helps prevent simple attacks, such as using printed photos or old videos.

However, modern deepfakes can mimic blinking, nodding, and head turns on command. The most dangerous type of attack is the so-called "injection," where a fake video is fed directly into the app, simulating a camera signal. Such attacks can bypass movement checks. As early as 2022, it was demonstrated at the USENIX Security conference that commercial liveness verification systems can be bypassed automatically. Standard certification schemes like ISO 30107-3, iBeta, or FIDO only test attacks in front of the camera, not injections. There has been a sharp increase in such attacks over the past two years.

Key Security Considerations

The American NIST security standard states that biometrics should not be used alone, but only in combination with a second factor and a non-biometric alternative. Unlike a password, your face can't be changed easily. In practice, selfie video is useful as one of several recovery options and is considered more secure than SMS recovery, which is vulnerable to SIM swapping. For primary account access, passkeys and hardware keys remain the most reliable choice. Users who are especially valuable targets for attackers are advised not to use face video; for them, this feature is unavailable under the Advanced Protection Program.