Google now lets you log into your account with a selfie video
Google has added a selfie video option to its account sign-in and recovery tools, giving users a biometric fallback when they lose access to their primary device or password. The feature launched on July 23, 2026, and is rolling out now to eligible personal Google accounts. It won't be available for Workspace, child accounts, or Advanced Protection Program enrollees.
How it works
Setting it up is straightforward. You record a short clip using your phone's front camera — or a webcam on a PC — while following on-screen prompts to turn your head in different directions. Those multiple angles let Google's system build a facial profile used for liveness detection, the technology that distinguishes a real person from a photo, video, or deepfake. If you're later locked out, you record a new clip and the system compares it to the original. A match restores access.
Google says the video is encrypted and stored in the cloud — not on your device — which is what makes cross-device recovery possible. You can delete it at any time via your account dashboard. Separately, Google offers an opt-in for using your facial data to improve its recognition models, but that's a distinct choice from authentication, per 9to5Google launch coverage.
The deepfake angle
The timing isn't accidental. Spoofed selfie attacks — where bad actors use AI-generated faces to fool identity systems — rose 58% globally over the past year. Account takeovers increasingly happen when a victim can't access their recovery phone or email, leaving them with no fallback. A facial liveness check adds another layer that's hard to fake in real time.
Forgot your password? Lost your phone? Can’t get into your account?
— Google (@Google) July 23, 2026
You can now use a selfie video to log into your Google Account.
The new feature is easy to use and lets you sign in — even if you forget your password or don’t have your usual phone or laptop — with a quick… pic.twitter.com/3TbdIKLTM9
That said, security researchers note that injection attacks, where synthetic video is fed directly into a camera feed, aren't fully mitigated by liveness detection alone. The arms race between authentication systems and AI-generated spoofs is ongoing.
Privacy considerations
Storing biometric data in the cloud concentrates sensitive information in one place. Under UK GDPR, biometric data is classified as special category data, meaning it requires a Data Protection Impact Assessment and a clear lawful basis before processing — similar to the scrutiny applied to Clearview AI, per UK GDPR biometric guidance. Google has not published a public compliance statement specific to each market.
To check whether the feature is available on your account, visit Google's video verification page directly from your account settings.
