Google's selfie video sign-in puts your face on its servers

Google now offers a selfie video sign-in that requires you to film guided head movements once; Google stores that reference clip on its servers and uses a new selfie video later to compare and recover access if you lose passkeys. The enrollment captures several angles and runs liveness, synthetic-media and hardware checks; matching and storage are server-side only, there’s no option to keep the reference video just on your device, and deleting a stored video can take months to clear from active systems and backups.

Storing a permanent reference video raises concrete privacy and legal concerns: Google can decrypt and retain the clip, policies allow optional use to improve verification technology and could extend to broader AI training, and US laws (FISA, the CLOUD Act, NSLs) enable compelled disclosure. Google’s stated safeguards - no face-wide account searches and deletion of the ephemeral sign-in selfie - don’t protect the persistent reference file, which could also enable age checks as regulators require verification. The feature contrasts with Meta’s ephemeral approach and isn’t necessary for recovery: passkeys, on-device biometric checks, backup codes, and synced end-to-end encrypted passkey storage provide alternatives. The recommendation is to limit biometric exposure and consider encrypted, zero-access services that don’t feed user biometrics into AI or advertising ecosystems.