Google adds selfie video login for account recovery with liveness checks against deepfakes

Google's selfie video feature

Google on July 23, 2026 introduced a selfie video option for signing into accounts and recovering access. The feature lets users record a brief video of their face performing guided head movements, which is compared to a previously saved reference video to verify identity. It is designed as a backup for situations where standard methods like passkeys or two-factor authentication are unavailable, acting like a spare key hidden away.

Setup and process

Users enable selfie video in the How you sign in to Google section of their account's Security settings. The setup captures a short recording with simple instructions: remove glasses and masks, keep the face visible, and follow prompts like slowly lifting the chin or turning the head. If the device lacks a camera, a QR code allows completion via a phone. Wired reported that the process took under five minutes and accepted the video on the first attempt. The stored reference video is encrypted in the cloud and can be accessed from any device, according to Google.

Security and deepfake defenses

Google stated that the feature employs multiple layers of security to detect impersonation attempts, including deepfakes. Liveness detection requires users to perform specific movements, confirming the video is being recorded in real time. The company said the selfie video is "encrypted at rest" and only used for sign-in by default. Users can opt in to share it for additional purposes. Claire Forszt, product manager at Google, noted that the selfie is an extra option, not a guarantee.

We always recommend that you set up more than one option. Selfie is just the newest option in that list available for users. It's designed to help specifically in these vulnerable scenarios around not having access to the device where your passkey might be.

Despite these measures, external security experts pointed to ongoing risks. Ricardo Amper, CEO of Incode Technologies, cautioned that motion alone does not prove liveness, as AI can now generate faces that blink and respond to prompts. He also warned that attackers can inject synthetic video directly into the data stream via virtual cameras.

Account recovery and user control

The feature is primarily aimed at users who have lost a device or forgotten a password. It complements recovery contacts and backup codes. Users can delete the stored reference video at any time through their Google Account settings, and Google confirmed that the video is encrypted even when not in use. Forszt emphasized that a selfie video alone may not always be sufficient for recovery if Google detects suspicious activity.

Current limitations and rollout

Selfie video sign-in is unavailable for Workspace accounts, child accounts, and those enrolled in Google's Advanced Protection Program. The rollout began on July 23 and will reach users gradually. Account holders can check eligibility at g.co/signin-selfie. Google advised setting up the video before being locked out, as it cannot be added during recovery.