Google and Meta have begun implementing a new method of identity verification that is generating debate in the tech industry: Video selfie verification to recover compromised accounts. 
The system works simply: Instead of answering security questions or receiving a code via email, users must record a short video of their face. 
Artificial intelligence analyzes facial features and compares the information with biometric data stored in the account to confirm that the applicant is indeed the owner. 
 How does verification work? 
According to reports, the process involves the following steps: 
• User requests to recover their account through the Help Center• Receive a request to record a 3-5 second selfie video• AI analyzes facial features and compares them to existing records• If verification is successful, access to the account is restored.
This technology is already available to some Google and Meta users in several countries, and is expected to expand globally over the next few months.  The promise of safety

Companies argue that this method is more secure than traditional passwords, which can be guessed, stolen, or compromised in data breaches. 
According to a study by digital security firm SpyCloud, more than 30 billion credentials were compromised by 2025, making conventional passwords less and less reliable.

In addition, they point out that facial verification is difficult to fake, as it requires a real-time video of the user, which makes it more complicated to use static photographs or deepfakes to fool the system. 
 The risks of biometric data

However, cybersecurity and privacy experts have expressed serious concerns about this approach. The fundamental problem is that facial biometric data is permanent: unlike a password that can be changed if leaked, your face is the same all your life. 
 If this data ends up in the wrong hands due to a leak or cyberattack, the damage to the user's privacy is irreversible. There is no way to get a new face. According to the Electronic Frontier Foundation's (EFF) annual privacy report, biometric data breaches have increased by 45% in the last two years. 
 In addition, there are concerns that this data could be used for mass surveillance, unauthorized facial recognition, or even to create more accurate deepfakes with users' real information. 
 What do regulators say? In Europe, the General Data Protection Regulation (GDPR) classifies biometric data as sensitive information that requires explicit and specific consent.
In the United States, the California Privacy Act (CCPA) also places restrictions on the use of biometric data. 
However, legal experts point out that Big Tech often includes clauses in their terms of service that allow the use of this data for identity verification, which could complicate users' efforts to control their biometric information. 
The Privacy Debate

The case raises a fundamental question about the balance between security and privacy in the digital age. 
While facial verification may be more effective at preventing unauthorized access, it also poses a significant risk if data is compromised. 
Experts recommend that users carefully assess the risks before opting for this verification method, and suggest that companies offer alternatives that do not involve the use of permanent biometric data. 
 The implementation of this technology by Google and Meta marks a new chapter in the relationship between Big Tech and user privacy, and is likely to generate more debate as its use expands globally. 
Source: SpyCloud, Electronic Frontier Foundation (EFF)