Google Now Lets Locked-Out Users Recover Accounts With Selfie Videos

Key Findings

• Google introduced selfie video as an account recovery method, requiring users to perform guided head movements to capture their face from multiple angles during setup
• The feature is entirely opt-in and can be deleted at any time, with encrypted storage and liveness detection to prevent deepfake attacks
• Unavailable for Google Workspace accounts, child accounts, and Advanced Protection Program enrollees
• Users cannot set up selfie video while already locked out of their account
• The system compares new video captures against enrolled footage to verify identity and restore access

Background

Account access recovery has long relied on traditional methods like email verification, phone numbers, or security questions. These approaches work until users lose their phone, forget their password, or lack access to their backup devices. Google's new selfie video feature addresses this gap by adding a biometric backup that users can set up in advance and use later if locked out of their account.

How Setup Works

Users must be signed into their Google Account to enroll. The process takes place through a computer webcam or via a QR code scanned on a phone. Users position themselves against a plain background without glasses or face coverings, then complete several brief guided head movements. These movements capture their face from multiple angles and serve as the baseline for future verification attempts.

Recovery Process

When locked out, users can record a fresh selfie video from any available camera. The system automatically compares this new recording against the one saved during enrollment. If the faces match, the user's identity is verified and account access is restored.

Security Against Deepfakes

The system incorporates multiple protective layers to prevent fraud. Most importantly, it requires live movement during verification, meaning static photographs or pre-recorded deepfakes cannot unlock accounts. Users must perform specific head movements in real time to prove they are genuinely present during the sign-in attempt.

Privacy Controls

Selfie videos are encrypted while stored on Google's servers. By default, they are used only for sign-in purposes. Users can opt into additional uses, including helping Google develop facial recognition and age estimation tools. This setting can be toggled on or off at any time through the account's Selfie video page, and users can delete their videos entirely whenever they choose.

Current Limitations

The feature remains unavailable for certain account types. Google Workspace accounts used by businesses and schools cannot use this method. Child accounts and those enrolled in the Advanced Protection Program, which serves high-risk users, are also excluded. Additionally, users cannot add or update their selfie video while already locked out or in active account recovery.

Broader Security Trend

This rollout reflects a shift in how technology companies think about account security. Rather than asking users to remember secrets or possess specific hardware, the approach now emphasizes proof of embodied presence in the moment. The requirement to perform live movements substantially raises the barrier to remote account theft compared to password or SMS-based recovery methods.

Sources

• https://thehackernews.com/2026/07/google-adds-selfie-video-recovery-for.html
• https://securityonline.info/google-selfie-video-sign-in/
• https://en.wikipedia.org/wiki/Google_Search