Keep your account secure

Keeping your data safe is a top priority. While we take a lot of steps to keep your Google Ads Account secure, here are a few more ways you can protect your account:

Enable security-related settings in your Google Ads Account

  • Require 2-Step Verification: Account administrators can require that all users of their Google Ads Account need to enable 2-Step Verification to access the Google Ads Account. 2-Step Verification means that, in addition to entering their password, a user now also needs to submit a code sent by text message or a phone alert to be able to sign in. 2-Step Verification can help keep the bad guys out, even if they have your password.

    When Google Ads Accounts require 2-Step Verification, all account users must enable 2-Step Verification or Advanced Protection to be able to access the Google Ads Account.

    Account users who are trying to access a Google Ads Account without first enabling 2-Step Verification will be prompted to change their settings.
     

    Change authentication settings of Google Ads Accounts

    1. Sign in to your Google Ads Account.
    2. Click the tools icon  in the top right corner of the page.
    3. Under “Setup,” click Account access.
    4. Along the top of the page, click Security settings.
    5. Click the “Authentication method” drop down arrow, then select “2-Step Verification” option from the menu.
    6. If the “2-Step Verification” option is disabled, click the blue hyperlink next to it to set up 2-Step Verification.
      1. Follow prompts on the screen to add your phone number, confirm that it works, and click Turn On to finish the setup. Once complete, you’ll see “2-Step Verification is ON”. You can now close this page. 
    7. Navigate back to your Google Ads Account window and refresh the page to unlock the setting.
    8. Select “2-Step Verification” option from the menu.
    9. Click Save.

    Note

    From a Google Ads manager account, you can enable 2-Step Verification or Advanced Protection on your own manager account or on an individual child account for which you have admin permissions.

    To change authentication settings of Google Ads manager accounts, click Accounts, and then click Management along the top. Then, navigate into the account(s) you want to change authentication settings for and follow the steps 3 to 9 above.

  • Limit the email domains that can receive invitations to manage your account: By adding a list of allowed email domains, you can ensure that only users with emails registered under those domains can be invited to access your Google Ads Account. Administrators on your account can update the list of domains that newly invited emails should use. For instance, if you set “example.com” as the allowed email domain for your account, administrators on your account could invite user@example.com to the account, but not user@gmail.com.
     

    Set up allowed domains in your account

    1. Sign in to your Google Ads Account.
    2. Click the tools icon  in the top right corner of the page.
    3. Under “Setup,” click Account access.
    4. Along the top of the page, click Security settings.
    5. Click the “Allowed domains” drop down arrow.
    6. In the box that expands, add the domain of email addresses that can be invited to this account.
    7. To add more domains, click Add domain.
    8. Once done, click Save

Protect your personal Google account

Remember that anyone with access to your Google account can open Google Ads and look up your advertising data. To avoid unauthorized access, take steps to protect your personal Google account as well.

  • Choose a strong, unique password: A strong password contains a combination of numbers, characters, and case-sensitive letters, so it can't be guessed easily. Don't use the same password for different websites. 
  • Update your account recovery options: Check that your account recovery options are up-to-date to prevent getting locked out of your account.

Routinely monitor your account and computer system

  • Check for unauthorized changes: Sign in to your Google Ads Account regularly to check for any unexpected or unauthorized activity such as changes to your ads or budget. If you think someone may have accessed your billing information, check your bank or credit card statements as well for any unauthorized activity. Report unauthorized Google Ads activity. 
  • Scan your computer for malware: Make sure your computer's antivirus protection is up to date and that you periodically run a full system scan. Someone can steal your personal information by spreading malware onto your system, so run full system scans on a regular basis to help ensure that your system is free of malware. Protect yourself from malware.

Protect multi-user accounts

  • Create new user profiles: If many people need to use your Google Ads Account, don't have them share the same username and password. Instead, create a new user profile for each person. Each Google account can have direct access to up to 20 Google Ads Accounts. Learn how to grant access to new users.
  • Grant the minimum access needed for each user: When you invite a new user, that user is assigned a specific access level. With different access levels, you can give users selective access to various tasks and features. For example, users with Admin access can invite new users into the account to make changes, while users with Standard access can't. Similarly, you can assign a “Read only” access or “Email only” access to users who don't need to make changes to your account. Learn more about access levels in your Google Ads Account.
  • Remove inactive users: Remove access for users who have left your company or no longer work with your Google Ads Account. Unless you remove these inactive users, they can still sign in to your account and make changes. Learn how to remove users from your account.
Was this article helpful?
How can we improve it?