If you get knocked on the head and get all your devices stolen and have amnesia, Google will let you back in with a selfie
Google has introduced selfie sign-ins for Google accounts, a facial recognition-based recovery option for users who lose access to their devices and cannot use email or phone-based recovery. Announced on Thursday, the feature is designed as a last-resort safety net as more people rely on passkeys and device-based authentication, which can leave them permanently locked out if they lose the device holding their passkey. Google says most users will still prefer passkeys for everyday sign-ins, reserving the selfie option for emergencies such as a lost or stolen phone.
To enrol, users record a video of their face, including turning their head side to side, via Google's help page for selfie video management; this movement is intended to defeat deepfakes, which reportedly struggle to replicate convincing side profiles in real time. If all other recovery methods fail, Google can request a fresh selfie video to compare against the enrolled one before restoring account access, though the company stresses this alone may not be enough and additional verification could be required. Unlike Apple's Face ID or Android's face unlock, which use infrared depth-mapping hardware for stronger security, Google's system relies on standard video and AI analysis, raising questions about its resilience to increasingly sophisticated deepfakes and concerns over Google holding a live recording of users' faces.
In short
- Google adds selfie video sign-in as an account recovery option
- Used only when email and phone recovery fail
- Head-turning check aims to block deepfake spoofing attempts
Steelman: both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Proponents argue this provides an essential safety net for the increasingly common scenario where users lose access to device-based authentication like passkeys, which can otherwise result in permanent account lockout. The recovery system is positioned as an emergency last resort after other methods fail, not everyday authentication, and the movement-based verification requiring head-turning is specifically designed to defeat deepfakes that struggle with real-time side profiles. This approach prevents users from being trapped by secure-but-inflexible authentication methods.
The case against
Critics contend that storing facial video recordings introduces significant privacy risks and potential security vulnerabilities despite stated safeguards. Google's system relies on standard video and AI analysis rather than the hardened infrared depth-mapping used by Apple's Face ID, potentially leaving it susceptible to increasingly sophisticated deepfakes as technology advances. The fundamental concern is asking users to entrust sensitive biometric data to a company with a documented history of expansive data practices, raising serious questions about long-term retention and scope of use—whether the remote risk of account lockout genuinely justifies storing such intimate recordings.
Explained simply
Many people now use passkeys and device-based authentication to sign into their accounts, which is more secure than passwords. However, if someone loses or breaks their device, they may be locked out of their account permanently and unable to use traditional recovery methods like email or phone verification.
Google has introduced the ability to sign in using a facial recognition selfie as a last-resort recovery option for people in this situation. Users record a video of their face turning side to side, which Google stores and can later match against a new selfie if other recovery methods have failed and account access needs to be restored.
The feature provides a safety net for people locked out of all their devices. However, it raises questions about security and privacy: Google's system uses standard video rather than the specialised hardware of other smartphone face recognition systems, and requires storing facial recordings of users.