Google Chrome's New Identity Check Feature Enhances Password Security on Android

Google Chrome for Android is working on a new security feature that could enhance protection for password autofill when not operating in trusted locations. This newly introduced feature, known as Identity Check, was revealed recently and intends to require biometric verification before automatically filling in passwords through the Google Password Manager. It is also anticipated that this measure could extend to applications that typically demand a PIN or a passcode for access.

The details surrounding the Identity Check feature have emerged through a collaborative report with insights from a notable tipster. Once enabled, this feature mandates biometric confirmation for accessing applications that are outside of established secure locations. It is important to note that this requirement will also apply to applications that already ask for a passcode or PIN. Furthermore, this capability is expected to carry over to the Google Password Manager as well.

A screenshot shared by the tipster indicates that users will need to authenticate their biometrics, likely using a fingerprint scanner, to retrieve the passwords saved in their Google accounts. Code references relevant to this feature have been identified in a version of Chrome designated for Android.

However, the implementation of this feature is limited to Android devices that are updated to at least the December release of Android 15, known as Android 15 QPR1, or any subsequent versions. It is believed that this functionality will be rolled out as a backend update to the Google Play Settings application. This anticipated software update is expected to become available to Android phones in December.

In addition to this, Google Chrome has recently rolled out enhancements to passkey support, streamlining the sign-in process across various devices. With this update, users can utilize a Google Password Manager PIN on multiple operating systems such as Windows, Linux, macOS, and Android, facilitating the synchronization of their saved passkeys.

While users will still be required to configure a screen lock, the update allows them to either enter a PIN or use a combination of a passcode and pattern for accessing their accounts across diverse devices.