Beginning August 5, 2026, the Google Ads API will implement a new passkey authentication requirement.
This change applies to users generating new OAuth 2.0 refresh tokens, who will need to use a passkey for authentication. Other methods like password-only or two-factor authentication will no longer be allowed.

The update affects various Google services using the Google Ads API, including Google Ads Editor, Ads scripts, BigQuery Data Transfer Service, and Data Studio. Users must create a passkey to authorize sensitive actions, ensuring enhanced security for their accounts. Existing OAuth refresh tokens will remain functional without requiring reauthorization.
Read the official help page: Passkey authentication requirement for the Google Ads API.