Google adds selfie videos to account security

Google has updated its account security options, introducing a multi-tiered defense strategy designed to protect sensitive personal and enterprise data across Gmail, Google Docs, Drive, and Android devices. As of August 2026, individual non-company account holders can record a short selfie video—capturing a several-second clip turning their head—to serve as an identity verification failsafe if primary sign-in methods fail.

The updated 12-step framework highlights recent features such as Recovery Contacts, allowing users to designate a trusted contact who can verify identity during lockouts. When initiated, the contact must acknowledge the request within 1 week; during an emergency, they assist by matching a random number on the user’s screen against 3 options sent to their device. Personal accounts can also utilize the Inactive Account Manager to specify inactivity thresholds in months and automate post-inactivity data sharing, whereas Workspace accounts rely on company administrators.

For high-risk individuals—including business leaders, IT admins, activists, and journalists—Google maintains its Advanced Protection Program. This optional tier mandates physical security keys, such as Bluetooth or USB dongles or phone-integrated passkeys, for new device sign-ins. It also restricts third-party app access to services like Gmail and Google Drive, enforcing a multiday recovery process if lockouts occur.

To maintain basic account hygiene, users are urged to audit third-party app access, active hardware on the device activity page, and browser extension permissions via chrome:extensions in Chrome, Edge, or Vivaldi. Originally published in February 2020 and updated in October 2026, the guidance emphasizes combining strong passwords with two-factor authentication to secure modern digital profiles.