Google adds selfie video as a pre-enrolled account-recovery option

This is a different use of a face from unlocking a phone or approving a passkey with a device’s biometric system. The feature is positioned for the account-level case in which the ordinary device or sign-in path is unavailable; it sits alongside, rather than replaces, passkeys and recovery contacts. Existing recovery channels include trusted devices, registered phone numbers, recovery contacts and two-factor authentication.

The new option carries a data decision

Google says the enrolled video is recorded and stored with consent, encrypted at rest and used only to help with sign-in unless the user opts into additional purposes. It can be deleted in Google Account settings, the launch coverage says.

Deletion does not necessarily mean immediate disappearance from Google’s systems. Android Authority reports that Google notes deleted videos may be retained temporarily for security reasons, or longer for policy enforcement. The same account of the feature says users can separately allow or refuse use of the video and related data to improve facial recognition, age estimation and other identity-verification technology, and can later change that setting.

That makes the privacy choice more than a simple recovery toggle. The security benefit depends on Google holding a reference video that can be compared during a future recovery attempt. Google describes facial matching, liveness prompts and suspicious-sign-in detection, but its announcement does not provide a false-acceptance rate, a false-rejection rate or results of an independent anti-spoofing test for this flow.

Availability keeps the launch from being universal

Google says eligible users can check for the option and enroll now. It is unavailable for Google Workspace accounts, child accounts and accounts enrolled in the Advanced Protection Program, the eligibility report says.

Those exclusions matter because the feature is being introduced as a backup, not as a new default proof of identity. Google recommends multiple sign-in methods. In practice, that leaves account holders with a choice of several recovery routes that can fail for different reasons: an absent device, an unreachable contact, a lost phone number, or a selfie check that the system does not accept.

What would show whether it improves recovery

The important unanswered question is how the flow performs when it is not a clean demonstration: a legitimate user has a changed appearance or difficult camera conditions, or an attacker uses a replayed or synthetic video. The company’s claims establish the intended controls, not their error rates or the circumstances in which an eligible user will be offered and cleared by the method.

Evidence that resolves that question would include Google's eligibility criteria, how rejected recovery attempts are handled, and independently tested acceptance and spoof-resistance results. Until then, selfie video is best understood as an additional pre-arranged recovery route—useful precisely when other routes are gone, but only for users Google permits to enroll and whose future attempt its systems accept.