Keep your account secure

Keeping your data safe is a top priority. While we take a lot of steps to keep your Google Ads account secure, here are a few more ways you can protect your account.

Note: To ensure your Google Ads account remains protected over time, Google may periodically suggest tailored recommendations through email updates and notifications in your account.

Protect your Google account

Keep in mind that anyone with access to your Google account can access your Google Ads account and look up your advertising data. To avoid unauthorized access, take steps to protect your Google account.

Enable 2-Step Verification

2-Step Verification is a simple way to protect your account against password theft. When you set up 2-Step Verification, you’ll sign into your account using a password and a second verification step. The second verification step can involve a text message (SMS) or call, security key, or a Google prompt on a compatible mobile device, and ensures potential attackers can’t access your account even if they have your password.

If you don’t want to enter a 2-Step Verification code or use your Security Key every time you sign in to your Google Account, you can mark your computer or mobile device as trusted and not be asked again.

Choose a strong, unique password

A strong password contains a combination of numbers, characters, and case-sensitive letters, so it can't be guessed easily. Don't use the same password for different websites.

Keep your account recovery options up-to-date

Check that your account recovery options are up-to-date to prevent getting locked out of your account.

Scan your computer for malware

Make sure your computer's antivirus protection is up to date and that you periodically run a full system scan. Someone can steal your personal information by spreading malware onto your system, so run full system scans on a regular basis to help ensure that your system is free of malware. Learn more about protecting yourself from malware

Protect your Google Ads account

Below are a few best practices that can reduce the risk of your Google Ads accounts being compromised by unauthorized users.

Require your users to enable 2-Step Verification

Account administrators can require all users of their Google Ads accounts to enable 2-Step Verification, as described above. When you set up 2-Step Verification, you’ll sign into your account using a password and a second verification step. The second verification step can involve a text message (SMS) or call, security key, or a Google prompt on a compatible mobile device, and ensures potential attackers can’t access your account even if they have your password.

Users who try to access your Google Ads account without first enabling 2-Step Verification will see a message prompting them to set up 2-Step Verification.

Change authentication settings in your Google Ads account

1. Sign in to your Google Ads account.
2. Click the tools icon in the top right corner of the page.
3. Under “Setup,” click Access and security.
4. Along the top of the page, click Security settings.
5. Click the Authentication method to expand the panel.
6. You’ll have to do one of the following:
   • Select 2-Step Verification.
   • If the “2-Step Verification” option is disabled:
     • Click the link to set up 2-Step Verification.
     • Follow prompts on the screen to add your phone number, confirm that it works, and click Turn On to finish the setup. Once complete, you’ll see “2-Step Verification is ON”. You can now close this page.
     • Navigate back to your Google Ads Account and refresh the page to unlock the setting.
     • Select 2-Step Verification.
7. Select the date you want the setting to become effective for your account’s users.
8. Click Save.

Google may automatically enable this setting on your account. When this happens, users will be notified by email and via a product notification. Keep the following in mind:

• These changes appear as done by the “Google Ads System” on the "Change History" page.
• Account administrators can disable this setting at any point.

Change authentication settings across your managed accounts

From a Google Ads manager account, you can enable authentication settings on your own manager account, as well as on individual client accounts for which you are an administrative owner.

To change the authentication setting across your child accounts, you can either navigate to these individual accounts or update the setting in bulk.

1. Sign in to your Google Ads manager account.
2. From the page menu on the left, click Accounts, then click Management at the top of the page.
3. Select the accounts you want to edit.
4. Click Edit, hover over “Change security settings”, and select Change authentication method.
   • Select 2-Step Verification.
   • If the “2-Step Verification” option is disabled:
     1. Click the link to set up 2-Step Verification.
     2. Follow prompts on the screen to add your phone number, confirm that it works, and click Turn On to finish the setup. Once complete, you’ll see “2-Step Verification is ON”. You can now close this page.
     3. Navigate back to your Google Ads Account and refresh the page to unlock the setting.
     4. Select 2-Step Verification.
5. Select the date you want the setting to become effective for existing users.
6. Click Save.

“Confirm it’s you” security challenges

To help protect your account, you may need to prove it’s you when you try to complete sensitive actions like the following:

• Inviting Standard or Admin users
• Performing out-of-the-ordinary budget changes
• Creating Ads with URL domains not previously used in your account

When attempting these actions, you may be asked to confirm it’s really you by completing a security challenge such as receiving a security code on your phone. Ensure that your account recovery options are up-to-date to prevent getting blocked from completing sensitive actions in your account. For more information on completing these challenges, learn how to verify it’s you when accessing your account.

Note: Disabling 2-Step Verification in Google Ads or your Google account does not disable “Confirm it’s you” security challenges.

Restrict the email domains your users can use

By adding allowed email domains in your security settings, you can ensure that users from outside your organization don’t get invited to access your Google Ads account. For instance, if you set “example.com” as the allowed email domain for your account, you will only be able to invite [e-mail] to the account, but not [e-mail]. Note that only users with admin access can add allowed email domains to accounts.

1. Sign in to your Google Ads account.
2. Click the tools iconin the top right corner of the page.
3. Under “Setup,” click Access and security.
4. Along the top of the page, click Security settings.
5. Click Allowed domains to expand the panel.
6. Click Add Domain to add a domain to the list.
7. Click the "x" symbol to the right of a domain to remove it.
8. Click Save.

Avoid sharing login credentials among multiple users

If many people need to use your Google Ads Account, don't have them share the same username and password. Instead, grant each person access to the Google Ads account, using their individual Google account. Each Google account can have direct access to up to 20 Google Ads Accounts. Also keep in mind that if you're managing multiple Google Ads accounts, a manager account might be a better option for you. You can then give different users access to the manager account, and allow them to access multiple accounts from that single manager account.

Manager account security mandates

Manager account security mandates are minimum security settings enforced on all current and future sub-accounts that a manager account has administrative ownership over. These security settings are available to admin users of manager accounts and can be applied to all current and future sub-accounts owned by the manager.

Sub-accounts can decide to have stricter security settings. Manager account security mandates only ensure that no sub-account has weaker security settings.

When a manager account security mandate is applied, admin users of owned sub-accounts will receive an email and will see a banner notification in Google Ads that informs them of the change.

Authentication strength

Using the Authentication setting, admin users of manager accounts can require that users of owned sub-accounts enable 2-Step Verification or Advanced Protection on their accounts to login.

When 2-Step Verification is configured, users can specify a date for it to take effect. This date is relative to this manager account’s time zone and defaults to 7 days in the future. If today’s date is selected, the setting will be effective immediately.

Update your authentication settings

1. Sign in to your Google Ads manager account.
2. Click the tools icon .
3. Click Setup, and select Access and security.
4. Click the "Security" tab.
5. Click Authentication, and select 2-Step Verification.
6. Choose whether the setting is set for "This manager account" or "This manager account and all accounts it owns."
7. Next to "Required as of," select the date (relative to the manager account’s time zone) on which accounts owned by this manager will require 2-Step Verification.
8. Click Save.

Allowed domain

The Allowed domains security setting allows admin users of manager accounts to restrict which email domains are allowed to be invited to access the manager account and the sub-accounts it has administrative ownership over. This helps reduce the likelihood of unauthorized users accessing your accounts.

Add an allowed domain

1. Sign in to your Google Ads manager account.
2. Click the tools icon .
3. Click Setup, and select Access and security.
4. Click the "Security" tab.
5. Click Allowed domains, and click Add domain.
6. Enter the domain name you’d like to allow.
7. Choose whether the setting is set for "This manager account" or "This manager account and all accounts it owns."
8. Click Save.

Review who has access to your Google ads account

Last but not least, you should regularly check on user access and permissions across your Google Ads accounts.

Check for unauthorized changes

Sign in to your Google Ads Account regularly to check for any unexpected or unauthorized activity such as changes to your ads or budget. If you think someone may have accessed your billing information, check your bank or credit card statements as well for any unauthorized activity. Report unauthorized Google Ads activity.

Remove inactive users

Remove access for users who have left your company or no longer work with your Google Ads account. Unless you remove these inactive users, they can still sign in to your account and make changes. Learn how to remove users from your account.

Grant the minimum access needed for each user

When you invite a new user, that user is assigned a specific access level. With different access levels, you can give users selective access to various tasks and features. For example, users with Admin access can invite new users into the account to make changes, while users with Standard access can't. Similarly, you can assign a “Read only” access or “Email only” access to users who don't need to make changes to your account. Learn more about access levels in your Google Ads Account

Review related manager accounts

If you have client accounts under a manager account, you can check if they’re linked to any managers outside of your MCC hierarchy in the “Related managers” tab. Learn more about the Related managers tab

Opt out of 2-Step Verification

Google strongly encourages all advertisers to use 2-Step Verification to log into their accounts. Using 2-Step Verification protects your account and sensitive data from attackers, even if they have your password. If you’d prefer not to protect your account, follow the instructions below.

Opt out of 2-Step verification

Step 1: Disable the 2-Step Verification requirement in Google Ads

Note: You must have administrative access to make this change.

1. Sign in to your Google Ads account.
   • Note: If you see a message saying you must set up 2-Step Verification to log in, follow the instructions to set up 2-step verification on your Google account. (This can be disabled later)
2. Click the tools icon in the top right corner of the page.
3. Under “Setup” click Access and security.
4. Along the top of the page, click Security settings.
5. Click Authentication method to expand the panel.
6. Set the authentication method to Standard.

Step 2: Disable 2-Step Verification on your Google account

1. Go to your Google account.
2. On the left navigation panel, click Security.
3. On the "Signing in to Google" panel, click 2-Step Verification.
4. Click Turn Off.