Google Launches Identity Check Feature for Android Devices
Introduction
Google has introduced a new feature called Identity Check for supported Android devices that locks sensitive settings behind biometric authentication when outside of trusted locations.
What is Identity Check?
Identity Check is a feature that requires explicit biometric authentication to access certain sensitive resources when you’re outside of trusted locations. This feature is designed to provide an additional layer of security for users and prevent unauthorized access to sensitive settings.
How Does Identity Check Work?
When you turn on Identity Check, your device will require explicit biometric authentication to access certain sensitive resources when you’re outside of trusted locations. This includes actions such as:
- Accessing saved passwords and passkeys with Google Password Manager
- Autofill passwords in apps from Google Password Manager, except in Chrome
- Changing screen lock, like PIN, pattern, and password
- Changing biometrics, like Fingerprint or Face Unlock
- Running a factory reset
- Turning off Find My Device
- Turning off any theft protection features
- Viewing trusted places
- Turning off Identity Check
- Setting up a new device with your current device
- Adding or removing a Google Account
- Accessing Developer options
Availability and Enablement
Identity Check is currently limited to Google’s own Pixel phones with Android 15 and eligible Samsung Galaxy phones running One UI 7. It can be enabled by navigating to Settings > Google > All services > Theft protection > Identity Check.
Enhanced Protection for Google Accounts
Identity Check is also designed to turn on enhanced protection for Google Accounts to prevent unauthorized individuals from taking control of any Google Account signed in on the device.
Additional Security Features
Google has been adding a steady stream of security features to secure devices against theft, such as Theft Detection Lock, Offline Device Lock, and Remote Lock. The company has also rolled out its artificial intelligence-powered Theft Detection Lock to all Android devices running Android 10 and later across the world.
Supply Chain Attack on Chrome Extensions
A spear-phishing campaign targeting Chrome extension developers was found to have inserted malicious code to harvest sensitive data, such as API keys, session cookies, and other authentication tokens from websites such as ChatGPT and Facebook for Business. The supply chain attack is said to have been active since at least December 2023.
Conclusion
Google’s Identity Check feature provides an additional layer of security for users and prevent unauthorized access to sensitive settings. The company continues to add security features to secure devices against theft and combat mobile device theft by sharing information, tools, and prevention techniques.
Stay Up-to-Date with the Latest Cybersecurity News
Follow us on Twitter and LinkedIn to read more exclusive content we post.