Google is developing a new account recovery method utilizing digital identity credentials to mitigate security vulnerabilities associated with traditional recovery processes when users lose their devices, as first reported by Biometric Update.
The initiative aims to address a critical security gap where weak recovery procedures undermine the benefits of passkeys. By registering a signed digital identity credential, users can generate a unique cryptographic identifier linked to their account. If a device is lost, the user can verify their identity with an issuing authority to regain access to their data, apps and stored passkeys. Google projects that digital IDs could represent 50% of all account recovery methods by 2035. However, the system faces significant hurdles, including the need for near-real-time credential provisioning and improved technical interoperability between digital wallets, operating systems and credential managers. Consequently, legacy recovery methods such as phone numbers, selfie biometric verification and recovery codes are expected to remain in use for the foreseeable future. Google emphasizes that achieving this vision requires public-private partnerships to foster social acceptance and robust infrastructure development. The company continues to refine this approach to ensure users can securely recover their digital lives even if all primary devices are lost.
Source: Biometric Update
