Google now lets you sign in with a selfie video instead of a password

Google's Selfie Login Bets Your Face Can Outrun a Deepfake

A password you can change. A face, not so much.

Google's new selfie video sign-in, introduced July 23, asks you to bet that distinction does not catch up with you. Eligible users can now regain access to their accounts by recording a short video with guided head movements. Google stores the reference video encrypted and compares future recordings against it to verify identity 1.

The feature targets a specific kind of misery: you are locked out, your phone is gone, and your passkey was on that phone. Claire Forszt, product manager at Google who focuses on identity and engagement, said the selfie option exists for "vulnerable scenarios" where users lack access to the device holding their passkey 2. It works on mobile and desktop 3, is rolling out globally to most personal accounts 2, and is unavailable for Workspace accounts, child accounts, and anyone enrolled in Google's Advanced Protection Program 3. You cannot enroll during a lockout; you have to set up the selfie before you need it 2. This is a recovery tool, not a primary login method. That framing tells you what Google is actually solving: the existing account recovery process is fragile enough that a biometric fallback is worth the risk.

And the risk is genuine. Google is shipping video-based authentication as generative tools make faking someone's face increasingly accessible. The company says it blocks impersonation through liveness detection, which matches live video against the stored reference and requires physical movements to prove you are present, combined with its existing security practices for detecting suspicious sign-in attempts 1. Forszt acknowledged the guardrails have limits: "There might be instances where passing a selfie video alone may not always be sufficient" if risk factors flag a problem 2.

That hedge is the story. Google is betting its liveness detection can outpace deepfake spoofing long enough to make biometric recovery a net gain for security. Reasonable in 2026. The question is whether it holds.

For identity-product builders, the implication is immediate. Liveness detection is no longer a differentiator. It is the minimum. If Google ships video authentication with anti-deepfake layers built in, any identity provider that does not will read as negligent. The bar for what qualifies as secure biometric verification just moved, and it moved because Google moved it.

For investors tracking the passwordless land grab, the detail that matters is not the sign-in itself but the enrollment flow. During setup, Google presents an opt-in checkbox letting it use your selfie video to "develop and improve our facial recognition, age estimation, and other verification methods" across its services 2. This is a security feature that doubles as a consent pipeline for biometric training data. Whoever owns the biometric layer controls the identity infrastructure, and Google is asking users to hand theirs over voluntarily. Earlier in July, Meta auto-enrolled Instagram users into an AI image remixing feature without consent, faced backlash, and killed it within three days 2. Google's opt-in approach stands in sharp contrast.

For users, the convenience is real. Account recovery can feel Kafkaesque 2, and a guided selfie beats desperation. Google lets you delete the stored video anytime 1. But passwords have one property faces do not: replaceability. If your password leaks, you rotate it. If your face becomes the reference credential for your most important account and spoofing techniques outpace detection, you cannot rotate your face. Deleting the stored copy does not undo exposure.

This is the paradox at the core of biometric authentication. The harder you make a credential to steal, the harder you make it to reclaim when it fails. Google's selfie video solves a real problem with a tool that creates a new one. The company does not see a downside yet. Neither do most users who have never been locked out of everything at once. Both positions are subject to revision.