Google wants a look at your hands before it lets you through. The company’s newest reCAPTCHA check, rolling out now as a test, asks you to switch on your camera and wave at it so an algorithm can decide whether you’re a human or a bot.
That wave is less casual than it looks. The system records a short video of your hand and pulls 21 hand-landmark coordinates from it, mapping your finger joints, your palm geometry, and the way you move in real time.
Google describes the purpose as liveness detection, a way for websites to fend off automated account creation, credential-stuffing, and other fraud. But this is still a biometric scan, collected so you can prove you’re a person and still involves turning on your cameras for Google.
Google has lined up the promises you would expect. The company says the footage is deleted once verification finishes, no audio is recorded, and the video is never tied to your identity. Its documentation adds that nothing goes to third parties and the data serves security alone, then points to the Google Privacy Policy for how everything is used and stored, a policy elastic enough to cover almost anything.
For now the feature seems optional. People who cannot perform the gestures still get the older puzzles, with Google saying reCAPTCHA “continues to provide visual and audio challenges” while it develops alternatives.
However, we all know that optional today is rarely optional forever and the older challenges survive partly because the gesture check is still being tested.
The reassurances rest on trust and Google has spent years giving people reasons to hold it back. This is a company whose business runs on gathering and monetizing personal data, now asking to switch on your camera and read your hand.
