Google’s two-factor authentication will be easier

Google is releasing an update to its two-factor authentication (2FA) system, available now for Workspace users and personal accounts, and aims to simplify the setup process and improve overall security.

The previous version allowed users to enable two-factor authentication (2FA), but did not allow users to choose a secondary verification method in advance. The new update addresses this issue by allowing users to choose a second method – such as the Google Authenticator app or a similar app that generates one-time passwords (OTP) – before activating 2FA. This replaces the less secure SMS verification method that was previously used by many users as their primary secondary method.

As part of the update, two options have been introduced for connecting hardware security keys in the “Passwords and Security Keys” section: using a security key and creating a passcode. Users who choose this method must use the security key PIN for verification , which adds an additional level of security.

Another significant improvement concerns changes in behavior when 2FA is disabled. Previously, disabling 2FA automatically removed all secondary factors associated with the account. The updated system gives the user more control. Disabling 2FA no longer automatically removes pre-configured secondary factors, providing continued protection even when users temporarily disable 2FA.