Google Wants Your Face: Security or Privacy Risk?

Google has launched a novel authentication system that utilizes video selfies for account access and recovery. Users upload a "video selfie" which Google's algorithms then compare against future login attempts.

This innovation aims to provide an easier alternative to traditional passwords, which are often weak. However, experts caution that rapidly advancing AI, particularly deepfake technology, presents a significant security risk. Attackers could potentially use AI to create convincing fakes of a user's face for unauthorized access.

Google asserts it has implemented security measures against such hacks and continuously adapts to emerging threats. Yet, privacy concerns persist. Google's help files indicate a potential use of video selfies for training AI in facial recognition and age estimation, if permitted by the user.

Given the evolving landscape of AI and new government-mandated age verification laws, a wait-and-see approach is recommended. Established authentication methods like passkeys offer a secure and low-effort alternative for now.