Google has introduced an optional account-recovery method that asks users to enroll a selfie video and stores that reference recording on its servers. If a participating user is later locked out, a newly recorded video can be compared with the stored version as part of the sign-in process.
The feature, described on October 20, is positioned as a backup alongside recovery phone numbers and email addresses for people who lose the device holding their passkeys. Enrollment requires a signed-in user to follow guided head movements so the camera captures the face from several angles. Recovery uses another recording rather than a still photograph.
According to the supplied account, Google applies liveness checks, synthetic-media detection and, on some devices, signals indicating that footage came from a real camera. The matching takes place on Google's infrastructure so that the recovery method can work across devices. There is no described option to keep the reference recording solely on the enrolling phone.
That architecture differs from ordinary on-device biometric unlocking. A passkey can rely on a face or fingerprint check performed locally, after which a cryptographic proof—not the biometric image—is sent to the online service. The selfie recovery option instead requires Google to retain a video that it can use for a later comparison. It is a fallback for account access, not a replacement for passkeys as the primary sign-in method.
Users can delete the enrolled video and make a new one after a significant change in appearance. The report says Google's general deletion process may take about two months to clear active systems and as long as six months for backups, with possible longer retention for security, fraud-prevention or legal reasons. Google says the video is used for sign-in, while participation in improving its verification technology is optional.
The added recovery path creates a clear trade-off. A video showing a face in motion may help distinguish a user from a photograph or simple fake, potentially restoring access when other methods are unavailable. At the same time, the reference has to remain under the provider's control for the feature to function across devices. Unlike a password, a face cannot be replaced after exposure.
The source raising these concerns is privacy-focused service provider Proton, a Google competitor, so its broader predictions about future uses should be treated as advocacy rather than announced Google policy. Google has not, on the evidence supplied for this article, announced that enrolled recovery videos will be used for advertising, general AI training or age estimation.
For users considering enrollment, the immediate decision is narrower: whether the convenience of an additional recovery route is worth storing a reusable facial recording in the cloud. People who decline can continue relying on passkeys and established recovery contacts, while those who opt in should review the retention and improvement settings attached to the feature.
