Multi-factor authentication (MFA) will be mandatory for all Google Cloud accounts by the end of 2025.
Google Cloud is used by many businesses, developers, and IT teams to build, deploy, and manage applications and infrastructure in the cloud. That's why account security is of utmost importance.
According to a announcement , MFA will be mandatory for both administrators and regular users who access Google Cloud services, but not for general consumer Google accounts.
See also: WordPress will require 2FA from plugin developers
The company said it will be phased in and will affect all users globally by the end of 2025. The company added that to ensure a smooth transition, Google Cloud will provide a notification to businesses and users throughout the “journey.”
The change will be made in three phases to ease the transition:
- Starting this month, users who don't use MFA on their accounts will be encouraged to do so, via a reminder on their console screen.
- The second phase will begin in early 2025, where all existing and new Google Cloud users will receive notifications to enable MFA in the Google Cloud Console, Firebase Console, gCloud, and other platforms.
- In the final phase (by the end of 2025) the MFA requirement will become mandatory for all Google Cloud users, who will be able to either use their identity provider's MFA or add an additional layer of MFA through Google.
See also: How does two-factor authentication (2FA) enhance security?
Google says that requiring MFA for Google Cloud users is to strengthen the security of their accounts. The company cites CISA research that shows that with MFA, users are 99% less likely to be hacked.
To enable MFA on your Google Cloud account, go to “security.google.com.” Under “How you sign in to Google,” select “2-Step Verification” and follow the on-screen instructions.
Cloud Identity-managed account holders who don't see the “2-Step Verification” option may be subject to restrictions imposed by their administrator.
For more information about setting up MFA on Google Cloud, see Google's official guide
This move comes in response to the growing number of threats and data breaches targeting cloud. By enforcing MFA, Google aims to provide an additional layer of security, making it much more difficult for unauthorized users to gain access to sensitive information. Users will be required to verify their identity through multiple methods beyond a password. They will also be required to use SMS codes, authenticator apps, or biometric methods.
See also: Microsoft Entra security defaults make MFA mandatory
Without multi-factor authentication, accounts a are vulnerable to identity theft and phishing. user's personal data by stealing their password.
🔑 Secure your passwords with Proton Pass
Password manager from Proton — end-to-end encryption, passkeys, built-in 2FA, and monitoring for leaks of your credentials.
- ✔ Encrypted storage of passwords & passkeys
- ✔ Notification if any of your passwords are leaked (Dark Web Monitoring)
- ✔ Free version — on all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
This change not only protects user data, but also aligns with industry best practices, encouraging more organizations to adopt similar security measures.
Source: www.bleepingcomputer.com
