Client Alert: Google Ads New Security Requirement: Passkeys

​You may have noticed a yellow banner at the top of the Google Ads interface that reads "A passkey will soon be required to authorize sensitive actions." That banner is legitimate, and it means your account is now part of Google's rollout of passkeys as a required security layer.

A passkey is a device-based credential that uses your fingerprint, Face ID, or PIN rather than a password. It's tied to a specific person and a specific device, which means it can't be phished, shared, or stolen the way a password can.

What does this change mean for Google Ads accounts?

• Sensitive actions, like adding or removing users and linking accounts, will soon require a passkey to complete.
• Each person who accesses the account will need their own login and their own passkey. PASSKEYS CANNOT BE SHARED.
• New passkeys take up to 48 hours to activate; they should be set up before they’re urgently needed, not on the day of.

What’s not changing?

• Day-to-day campaign management is not affected by this change.
• Nothing needs to change about how an account is currently accessed until a sensitive action is required.

When Will This Happen?

The banner appearing now is Google's advance notice. Implementation will begin rolling out on August 5th and will be enabled for all users over the next several weeks. However, accounts showing the banner should not wait to set up their passkeys.

What is Good2bSocial doing to prepare?

Our team is already working to prepare accounts for this transition:

• Auditing our accounts and yours for any shared logins that will need to move to individual access
• Setting up our own passkeys this week, so we're not caught off guard
• Reaching out directly to flag this for account owners who may dismiss the banner without acting on it

If you have questions about your firm’s Google Ads account or would like assistance setting up your passkeys, don’t hesitate to reach out.