Android 16 Identity Check: How to Protect High-Risk Settings with Biometrics

Android Identity Check adds a biometric barrier to sensitive settings and account actions when a phone is outside locations marked as trusted. In those situations, a PIN, pattern or password normally cannot be used instead of an eligible biometric.

Identity Check is optional and is not available on every Android 16 phone. To check a device, open Settings → Google → All services → Theft protection. If Identity Check is not listed, Google says the device does not support it.

What Identity Check Protects

Outside trusted places, Identity Check can require biometrics before a user:

Changes the screen-lock PIN, pattern or password.
Adds, changes or removes fingerprints or Face Unlock data.
Turns off Identity Check or other theft-protection features.
Runs a factory reset or turns off Find My Device.
Accesses Developer options.
Views trusted places.
Sets up a new device with the current phone.
Adds or removes a Google Account.

It can also protect saved passwords and passkeys in Google Password Manager, as well as password autofill in apps. Chrome password and payment autofill, autofill payments in apps, Private Space and multi-user mode retain their normal authentication behavior.

For Google Accounts signed in on the phone, Identity Check can require biometrics to change the account password or add or change account-recovery information.

Why It Matters If Someone Knows Your PIN

A thief who sees or learns the screen-lock PIN may otherwise be able to change the lock, replace enrolled biometrics, disable tracking or access saved credentials. Identity Check separates ordinary phone access from these higher-risk actions.

It is useful for people who use their phones for mobile banking, digital payments, work accounts and password managers. However, it does not lock the entire unlocked phone behind biometrics, and it does not guarantee recovery or prevent every type of data exposure.

How to Set Up Identity Check

Open the phone’s Settings app.
Tap Google, then All services.
Open Theft protection and select Identity Check.
Sign in to a Google Account if prompted.
Add or confirm a secure screen lock.
Enroll a supported biometric, such as a fingerprint or qualifying Face Unlock.
Add trusted places, such as Home or Work.
Tap Done to complete setup.

On some Pixel phones, the setting may appear under Settings → Security & privacy → Device unlock → Theft protection → Identity Check. Searching Settings for “Identity Check” can also help locate it.

Google recommends a strong screen lock, such as a unique password or a PIN of at least six digits. Do not reuse a banking, ATM or other important service PIN.

How Trusted Places Work

Trusted places are locations where Identity Check’s additional biometric requirement is not normally applied to protected actions. Adding Home or Work can make everyday use more convenient.

Choose these locations carefully. Avoid adding unnecessarily broad areas. If the phone is stolen or accessed inside a designated trusted place, the extra Identity Check requirement may not immediately apply to every protected action. Trusted places are a convenience setting, not a guaranteed security boundary.

Why a Strong Biometric Is Required

Android 16 defines Identity Check as an authentication category that requires a Class 3, or BIOMETRIC_STRONG, biometric in a high-risk situation. When the conditions are met, Android removes PIN, pattern and password fallback for the protected authentication request.

Not every face-recognition system qualifies. A phone may support Face Unlock for ordinary screen unlocking while lacking a Class 3 biometric suitable for Identity Check. Fingerprint support also depends on the device’s hardware and software implementation.

Enroll at least one reliable biometric and keep the sensor clean. If authentication repeatedly fails outside a trusted place, the usual device credential may not be accepted for the protected action.

Android 16 Support and App Protection

Identity Check first appeared on supported Pixel devices running Android 15 and eligible Samsung Galaxy devices using One UI 7. Google later said supported devices from additional manufacturers would receive the feature through Android updates.

On supported Android 16 updates, the protection can also apply to apps that use Android’s Biometric Prompt, including supported third-party banking apps and Google Password Manager. This is not guaranteed for every banking app: the app must use the supported system prompt, and the device must support Identity Check.

Android 16 alone does not prove that the feature is available. Manufacturer software, hardware and rollout timing matter. The most reliable test is whether Identity Check appears under the phone’s Theft protection settings.

Identity Check Compared with Other Protections

Feature	Main purpose	Relationship to Identity Check
Identity Check	Protects sensitive settings, accounts, credentials and supported app prompts	Requires a strong biometric outside trusted places
Theft Detection Lock	Detects possible snatch-and-run theft	Automatically locks the screen when theft is suspected
Offline Device Lock	Responds when a phone remains offline	Addresses attempts to avoid network-based protection
Remote Lock	Locks a lost or stolen phone remotely	Useful after loss; it does not replace advance setup
Private Space	Separately hides and locks selected apps	Protects selected apps rather than high-risk system settings

Limitations to Keep in Mind

Identity Check is not a universal app lock. It does not automatically protect every app, notification, widget or item visible on an unlocked phone. Third-party protection depends on the app using Android’s supported biometric prompt.

The feature is not available on every Android 16 device. Android Go phones, tablets and wearables are excluded from the broader theft-protection feature set described by Google, and support can vary by manufacturer.

Biometrics are not infallible, even when a sensor meets Android’s strong-biometric requirements. Identity Check should be treated as an additional barrier rather than a guarantee that a phone or account cannot be compromised.

How to Turn Identity Check Off

Go to Settings → Google → All services → Theft protection → Identity Check, then turn off the feature.

Outside a trusted place, Google requires biometric verification or a Google Account recovery route. The account option requires an internet connection and may also require two-step verification.

What Bangladeshi Users Should Do

Google describes Identity Check as rolling out globally to supported devices, but no reliable Bangladesh-specific model list, carrier requirement or rollout schedule is confirmed here.

The practical approach is device-based: install available Android and manufacturer updates, then check Settings → Google → All services → Theft protection. If Identity Check is missing, do not assume that Android 16 branding guarantees support.

Enable Theft Detection Lock, Offline Device Lock and Remote Lock where available. These features address different situations and complement Identity Check rather than replacing it. Keep regular backups, because no theft-protection feature guarantees recovery or prevents every type of data exposure.

Frequently Asked Questions

Does Android 16 enable Identity Check automatically?

No. Identity Check is optional, and support varies by device, manufacturer and software version. Users generally need to activate it manually.

Can I use my PIN instead of a fingerprint?

Outside trusted places, protected Identity Check actions require an eligible biometric and normally do not accept the PIN, pattern or password as fallback.

Will every face-unlock system work?

No. Android requires a strong, Class 3 biometric for Identity Check. Some face-unlock systems may be suitable only for ordinary device unlocking.

Does Identity Check protect banking apps?

On supported Android 16 updates, apps using Android’s Biometric Prompt can receive biometric-only enforcement outside trusted places. This is not guaranteed for every banking app.

What happens if biometric authentication fails?

The protected action may not accept the device PIN or password. The user may need to move to a trusted place or use the supported Google Account recovery process to disable Identity Check.

Does it lock the entire phone behind biometrics?

No. It protects defined sensitive actions and supported biometric-prompt flows. Other theft-protection features handle automatic screen locking and remote or offline responses.

Conclusion

Identity Check is designed to protect the settings, accounts and credentials that could help someone take control of a stolen phone. Outside trusted places, it can stop a person who knows the screen PIN from changing the lock, replacing biometrics, disabling tracking or accessing supported credentials.

Its protection depends on device support, a qualifying strong biometric and careful trusted-place settings. For Bangladeshi users, the decisive step is to check the Theft protection menu rather than assuming that Android 16 alone guarantees availability.

Search This Blog

TechBD Daily