Keeping your data safe is a top priority. While we take a lot of steps to keep your Google Ads account secure, here are a few more ways you can protect your account.
Protect your Google account
Keep in mind that anyone with access to your Google account can access your Google Ads account and look up your advertising data. To avoid unauthorized access, take steps to protect your Google account.
Enable 2-Step Verification
2-Step Verification is a simple way to protect your account against password theft. When you set up 2-Step Verification, you’ll sign into your account using a password and a second verification step. The second verification step can involve a text message (SMS) or call, security key, or a Google prompt on a compatible mobile device, and ensures potential attackers can’t access your account even if they have your password.
If you don’t want to enter a 2-Step Verification code or use your Security Key every time you sign in to your Google Account, you can mark your computer or mobile device as trusted and not be asked again.
Choose a strong, unique password
Keep your account recovery options up-to-date
Scan your computer for malware
Protect your Google Ads account
Below are a few best practices that can reduce the risk of your Google Ads accounts being compromised by unauthorized users.
Account administrators can require all users of their Google Ads accounts to enable 2-Step Verification, as described above. When you set up 2-Step Verification, you’ll sign into your account using a password and a second verification step. The second verification step can involve a text message (SMS) or call, security key, or a Google prompt on a compatible mobile device, and ensures potential attackers can’t access your account even if they have your password.
Users who try to access your Google Ads account without first enabling 2-Step Verification will see this message prompting them to set up 2-Step Verification.
- Sign in to your Google Ads account.
- Click the tools icon
in the top right corner of the page.
- Under “Setup,” click Access and security.
- Along the top of the page, click Security settings.
- Click Authentication method to expand the panel.
- You’ll have to do one of the following:
- Select 2-Step Verification.
- If the “2-Step Verification” option is disabled:
- Click the link to set up 2-Step Verification.
- Follow prompts on the screen to add your phone number, confirm that it works, and click Turn On to finish the setup. Once complete, you’ll see “2-Step Verification is ON”. You can now close this page.
- Navigate back to your Google Ads Account and refresh the page to unlock the setting.
- Select 2-Step Verification.
- Select the date you want the setting to become effective for your account’s users.
- Click Save.
- These changes appear as done by “Google Ads System” on the "Change History" page
- Account administrators can disable this setting at any point
How to change authentication settings across your managed accounts
From a Google Ads manager account, you can enable authentication settings on your own manager account, as well as on individual client accounts for which you are an administrative owner.
To change the authentication setting across your child accounts, you can either navigate to these individual accounts or update the setting in bulk.
- Sign in to your Google Ads manager account.
- From the page menu on the left, click Accounts, then click Management at the top of the page.
- Select the accounts you want to edit.
- Click Edit, hover over “Change security settings”, and select Change authentication method.
- Select 2-Step Verification.
- If the “2-Step Verification” option is disabled:
- Click the link to set up 2-Step Verification.
- Follow prompts on the screen to add your phone number, confirm that it works, and click Turn On to finish the setup. Once complete, you’ll see “2-Step Verification is ON”. You can now close this page.
- Navigate back to your Google Ads Account and refresh the page to unlock the setting.
- Select 2-Step Verification.
- Select the date you want the setting to become effective for existing users.
- Click Save.
- Inviting Standard or Admin users
- Performing out-of-the-ordinary budget changes
- Creating Ads with URL domains not previously used in your account
Restrict the email domains your users can use
By adding allowed email domains in your security settings, you can ensure that users from outside your organization don’t get invited to access your Google Ads account. For instance, if you set “example.com” as the allowed email domain for your account, you will only be able to invite user@example.com to the account, but not user@gmail.com. Note that only users with admin access can add allowed email domains to accounts.
- Sign in to your Google Ads account.
- Click the tools icon
in the top right corner of the page.
- Under “Setup,” click Access and security.
- Along the top of the page, click Security settings.
- Click Allowed domains to expand the panel.
- Click Add Domain to add a domain to the list.
- Click the "x" symbol to the right of a domain to remove it.
- Click Save.
Avoid sharing login credentials among multiple users
If many people need to use your Google Ads Account, don't have them share the same username and password. Instead, grant each person access to the Google Ads account, using their individual Google account. Each Google account can have direct access to up to 20 Google Ads Accounts. Also keep in mind that if you're managing multiple Google Ads accounts, a manager account might be a better option for you. You can then give different users access to the manager account, and allow them to access multiple accounts from that single manager account.
Review who has access to your Google ads account
Last but not least, you should regularly check on user access and permissions across your Google Ads accounts.
Check for unauthorized changes
Sign in to your Google Ads Account regularly to check for any unexpected or unauthorized activity such as changes to your ads or budget. If you think someone may have accessed your billing information, check your bank or credit card statements as well for any unauthorized activity. Report unauthorized Google Ads activity.
Remove inactive users
Remove access for users who have left your company or no longer work with your Google Ads account. Unless you remove these inactive users, they can still sign in to your account and make changes. Learn how to remove users from your account.
Grant the minimum access needed for each user
When you invite a new user, that user is assigned a specific access level. With different access levels, you can give users selective access to various tasks and features. For example, users with Admin access can invite new users into the account to make changes, while users with Standard access can't. Similarly, you can assign a “Read only” access or “Email only” access to users who don't need to make changes to your account. Learn more about access levels in your Google Ads Account.
Review related manager accounts
If you have client accounts under a manager account, you can check if they’re linked to any managers outside of your MCC hierarchy in the “Related managers” tab. Learn more about the Related managers tab.
Opt out of 2-step verification
Google strongly encourages all advertisers to use 2-step verification to log in to their accounts. Using 2-step verification protects your account and sensitive data from attackers, even if they have your password. If you’d prefer not to protect your account, follow the instructions below.
Step 1: Disable the 2-step verification requirement in Google Ads
Note: You must have administrative access to make this change.
- Sign in to your Google Ads account.
- Note: If you see a message saying you must set up 2-step verification to log in, follow the instructions to set up 2-step verification on your Google account. (This can be disabled later.)
- Click the tools icon
in the top right corner of the page.
- Under “Setup,” click Access and security.
- Along the top of the page, click Security settings.
- Click Authentication method to expand the panel.
- Set the authentication method to Standard.
Step 2: Disable 2-step verification on your Google account
- Go to your Google account.
- On the left navigation panel, click Security.
- On the "Signing in to Google" panel, click 2-Step Verification.
- Click Turn Off.