Secure your Google Ads account: Manager Account Security Mandates

What are “Manager account Security Mandates”?

Manager account security mandates are minimum security settings enforced on all current and future sub-accounts that a manager account has administrative ownership over. These security settings are available to admin users of manager accounts and can be applied to all current and future sub-accounts owned by the manager.

Sub-accounts can decide to have stricter security settings. Manager account security mandates only ensure that no sub-account has weaker security settings.

When a manager account security mandate is applied, admin users of owned sub-accounts will receive an email and will notice a banner notification in Google Ads that informs them of the change.

Authentication strength

Using the Authentication setting, admin users of manager accounts can require that users of owned sub-accounts enable 2-Step Verification or Advanced Protection on their accounts to login.

When 2-Step Verification is configured, users can specify a date for it to take effect. This date is relative to this manager account’s time zone and defaults to 7 days in the future. If today’s date is selected, the setting will be effective immediately.

Update your authentication settings

Note: The instructions below are part of the new design for the Google Ads user experience. To use the previous design, click the "Appearance" icon, and select Use previous design. If you're using the previous version of Google Ads, review the Quick reference map or use the Search bar in the top navigation panel of Google Ads to find the page you’re searching for.

1. Sign in to your Google Ads manager account.
2. Click the Admin icon , then click Access and security.
3. Click the "Security" tab.
4. Click Authentication, and select 2-Step Verification.
5. Choose whether the setting is set for "This manager account" or "This manager account and all accounts it owns".
6. Next to "Required as of," select the date (relative to the manager account’s time zone) on which accounts owned by this manager will require 2-Step Verification.
7. Click Save.

Allowed Domains

The allowed domains security setting allows admin users of manager accounts to restrict which email domains are allowed to be invited to access the manager account and the sub-accounts it has administrative ownership over. This helps reduce the likelihood of unauthorized users accessing your accounts.

Add an allowed domain

Note: The instructions below are part of the new design for the Google Ads user experience. To use the previous design, click the "Appearance" icon, and select Use previous design. If you're using the previous version of Google Ads, review the Quick reference map or use the Search bar in the top navigation panel of Google Ads to find the page you’re searching for.

1. Sign in to your Google Ads manager account.
2. Click the Admin icon , then click Access and security.
3. Click the "Security" tab.
4. Click Allowed domains, and click Add domain.
5. Enter the domain name you’d like to allow.
6. Choose whether the setting is set for "This manager account" or "This manager account and all accounts it owns."
7. Click Save.

Related links

Security hub

• Secure your Google Ads account
• Secure your Google Ads account: Best Practices
• Secure your Google Ads account: The importance of HTTPS
• Secure your Google Ads account: Suspicious emails or calls claiming to be from Google Ads

Your security options

• Secure your Google Ads account: 2-Step Verification
• Secure your Google Ads account: Confirm it’s you
• Secure your Google Ads account: Allowed Email Domains