Google has added a new method for logging into accounts that relies on recording a short video of the face, providing a backup option for users who lose access to their phones or usual devices.

The feature primarily targets cases where logging in through available means is impossible, as the video can be used to verify the account holder's identity and regain access.

The new feature does not replace passwords, passkeys, or other security measures, but joins the set of recovery options provided by the company. Google recommends that users set up more than one login method, given that accounts may contain photos, emails, documents, and personal data that become difficult to access if the phone is lost or the primary device fails.

Setting up the video

Setting up the feature begins by looking at the device's camera and performing a short series of head movements shown on the screen. These movements aim to capture the face from multiple angles, rather than relying on a single static image, before storing the video as a reference for later verification.

When a user encounters a login problem, the system asks them to record a new face video, then compares this clip with the saved video from the initial setup to verify identity before allowing account recovery. This makes the video a backup method that can be used even when the usual phone or computer is not available.

The availability of the feature does not necessarily mean it reaches all accounts immediately; Google has invited users to check their account eligibility and set up the video through the dedicated account management page, indicating that availability may depend on the account, market, or rollout stages.

The new recovery attempt is compared to the pre-saved reference video to verify the account holder's identity (Adobe)

Countering impersonation

The verification mechanism relies on more than just comparing facial features. Google says it uses multiple layers of protection to limit impersonation attempts using fake images or composite videos, including content known as 'deepfakes'.

The system asks the user to perform simple movements in front of the camera to prove that the clip is being recorded live, not a static image or pre-recorded video. Then, the features of the new video are compared with the saved clip, alongside Google's usual security mechanisms to detect suspicious login attempts.

The company does not provide extensive technical details about verification models or match acceptance criteria, but clarifies that the system combines video matching, liveness tests, and security checks associated with the login attempt. This integration aims to reduce the likelihood of using a fake image or video to access the account.

Data protection

Google confirms that recording the face video is done with user consent, and the clip is stored encrypted when not in use. Users can also delete the video at any time from their account settings, meaning that enabling the method is neither permanent nor mandatory.

According to the company, the video's use is limited to helping with login, unless the user decides to share it for additional purposes. This puts control over recording and deletion in the account holder's hands, while the video remains part of sensitive authentication data that should be protected, like passwords and passkeys.

The importance of this aspect is not limited to protecting the video from unauthorized access, but extends to preventing it from becoming a means of identification used outside its intended purpose. Hence, the company emphasizes prior consent, encryption at rest, and the ability to delete.

Google uses protective layers to counter impersonation attempts with recorded images, fake videos, and deepfakes (Adobe)

Multiple options

The 'video selfie' feature comes within a broader trend to reduce users' reliance on a single method for account access. Google has previously introduced passkeys, which rely on device lock or biometrics instead of traditional passwords, along with the recovery contacts feature that allows using a trusted person when access is lost.

The face video represents an additional path for cases where usual devices or verification codes are unavailable. However, its effectiveness depends on the user setting it up in advance, because the system needs a reference video saved before a login problem occurs.

Thus, Google does not offer the video as a comprehensive alternative to authentication methods, but as another layer within the account recovery system. Setting up more than one login method remains essential to reduce the risk of losing access, especially given that a single account is linked to many services, files, and personal data.