Protecting your admins with 2-Step Verification

Important: Google will soon require all admin accounts associated with a reseller domain to have 2-Step Verification (2SV) enabled.

2SV puts an extra barrier between your admins and the malicious actors who try to compromise Google accounts. Enabling 2SV on admin accounts is the single most important action you can take to protect your business and the data of our mutual customers. 

How is this requirement being enforced?

Google will create a security group that will be used to enforce the requirement for 2SV. This new group will include all users that have admin privileges. Whenever you grant privileges to new admins, you'll need to add them to this group. 

This enforcement is being rolled out to resellers over several days. When you sign into your admin account, we'll remind you to enable 2SV, and the prompt will include the date on which 2SV becomes mandatory for admins in your domain. 

Frequently asked questions

Where can I learn more about 2SV?

We have an overview that describes how 2SV works.

What if a new admin joins our team?

Be sure to add them to the new security group.

What if an admin can't use 2SV?

You can remove the admin's account from the group, but we strongly encourage you to remove admin privileges from the account until the user's 2SV issues are resolved. 

What if I delete or rename the new security group?

Google might automatically recreate the group if we detect the existence of admin accounts that don't have 2SV enabled.