Google has made some changes to how users can set up two-step verification (2SV) on their Google Accounts. The search giant said it is “simplifying how users enable two-step verification (2SV), which will streamline the process and make it easier for administrators to enforce 2SV policies in their organizations.”

Users who wanted to add “second stage methods” to their accounts were previously required to activate 2SV with a phone number first. with the New changes Instead, they can directly add second-step methods such as Google Authenticator or Security Key before activating 2SV on their account.

Google now offers two options for users who want to add a hardware security key to their account as a second layer of security. They can write a FIDO1 certificate to the security key or store a password key in it.

The company notes that users with Workspace accounts may still need to use their password along with their key if their organization requires it. Organizations can use the “Allow users to skip passwords at login using password keys” management policy to offer passwordless logins to users.

Google introduced Keys for Android and Chrome in the second half of 2022. The authentication technology launched for Google Accounts last year, and has since been used more than a billion times across 400 million accounts.

Another change that Google has made is that all second factors, including backup codes, second-party phones, or Google Authenticator, will not be automatically removed from your account if you decide to disable 2SV from settings.

However, the second factors will be removed if an administrator turns off 2SV for a user from the management console “to ensure logout workflows are not affected.” All of these changes are available to all Workspace customers and users with personal Google accounts, according to the company, adding that the rollout will be completed in about three days.

picture through Pixabay