Google Ads has introduced passkey support to strengthen account security, aiming to reduce the risk of hacks and phishing attempts. Passkeys provide a more secure alternative to passwords as they can’t be shared, copied, or phished, and they are now required for sensitive actions such as linking accounts or changing access permissions.
Key changes for advertisers:
- Sensitive actions in Google Ads now prompt for passkey verification, adding an additional layer of protection.
- Users who have passkeys disabled are flagged directly in the Access and Security panel.
- Creating a new passkey involves a mandatory seven-day delay before using it for sensitive changes, giving Google time for identity checks.
The rollout is in a limited pilot phase, with selected advertisers notified via email and in account. Passkeys can be set up in any Google account using devices on Windows 10+, macOS Ventura+, iOS 16+, and major browsers. Advertisers should be aware that autogenerated passkeys from Android do not work for sensitive action verification in Google Ads.
This update was spotted by Thomas Eccel.