Google changes the way 2-step verification is set up on user accounts

Google just made some changes to how users can set up 2-step verification (2SV) on their Google accounts. The search giant said the change is intended to "simplify the way users enable 2-Step Verification (2SV), thereby streamlining the process and helping admins enforce 2SV policies in their organizational environments." organizations and businesses easier".

Users who want to add "second step security" to their accounts will previously have to activate 2SV with a phone number. But with the new changes in place, they can directly add second-step methods like Google Authenticator or security keys before enabling 2SV on their accounts.

Google currently offers two options for users who want to add a hardware security key to their account as a second layer of security. Users can register FIDO1 credentials on the security key or store Passkey on it.

The company notes that users with Workspace accounts may still have to use a password in addition to a passcode if their organization requires it. Organizations can use the "Allow users to bypass passwords when logging in by using passkey" admin policy to provide passwordless logins to users.

Google introduces Passkeys to Android and Chrome in the second half of 2022. This authentication technology was launched for all Google Accounts last year and has been used more than a billion times across 400 million accounts to date. Google accounts worldwide.

Another change that Google has made is that all second authentication factors, including backup codes, phone numbers or Google Authenticator, will not be automatically removed from the Google account even in case the user decided to deactivate 2SV.

However, note that the second authentication factor will be removed if the administrator disables 2SV for the user from the admin-specific management, to "ensure that the user's initial workflow is not compromised." affect". All of these changes are available to all Workspace customers and users with personal Google accounts, according to the company, adding that the rollout will be complete in about three days.

Samuel Daniel

Update 08 May 2024