Google adds selfie video sign-in with anti-deepfake checks

Getting locked out of your Google Account without your trusted phone is a special kind of nightmare.

Google introduced a new recovery lifeline: selfie video sign-in. It gives users an alternative way to regain access to their accounts when they are locked out or far away from their usual devices.

Just turn your head and look into the lens

Setting it up takes less than a minute. You look at your device camera and follow simple on-screen prompts to move your head, capturing multiple angles of your face.

Down the road, if you ever lose access to your account, you simply record a fresh selfie video. Google compares the new clip against your stored baseline to confirm your identity.

With generative AI making impersonation easier than ever, Google says the system uses multiple layers of security and liveness detection. The verification process requires specific real-time head movements to ensure it is dealing with a living human rather than a still image or deepfake video.

On the privacy side, Google notes that the footage is encrypted at rest and stored only with your consent. It will only be used for account access unless you opt in to share it for other purposes, and you can delete the saved video anytime from your account settings.

Eligible users can already set this up by heading to g.co/signin-selfie.

Why it matters

For everyday users, this solves one of the most frustrating failure points in digital security. Modern two-factor authentication, authenticator apps, and passkeys are fantastic until you physically lose your phone. Tying account recovery back to your physical face means you can walk up to a clean browser anywhere and get back into your digital life.

For the tech industry, this signals where identity recovery is headed. Passkeys are great at killing passwords, but cross-device account recovery has always been an awkward puzzle. By adding video liveness checks to its recovery toolkit, Google is establishing a practical blueprint that competitors like Apple and Microsoft will likely have to match.

We think positioning this specifically as a recovery mechanism rather than an everyday sign-in method is a very smart call. It keeps the daily friction low while keeping a high-assurance escape hatch ready.

That said, the stakes could not be higher. Generative video and real-time deepfakes are advancing at a breakneck pace. Liveness detection that works today might struggle against next-generation real-time video injection tomorrow. Google will need to keep this verification barrier bulletproof to keep attackers from turning recovery into an exploit.