Multi-factor authentication required for Google Ads API user-authentication flows from April 21, 2026

Users generating new OAuth 2.0 refresh tokens for the Google Ads API are always challenged for a second factor from April 21, 2026 (rolling out over several weeks); existing refresh tokens and service-account workflows are unaffected. Google Ads Editor, Google Ads scripts, BigQuery Data Transfer Service and Data Studio users are also challenged.