Passkeys to be required for sensitive Google Ads account actions starting July 15, 2026

Google Ads will require passkey verification for sensitive actions such as changing user access, adding users, updating account links and changing billing details. Administrators can set an enforcement date; users without a passkey can still sign in and manage campaigns but are blocked from those actions.

Framed as a response to rising account-hijacking incidents. A related pilot restricts sensitive actions for users on free consumer email domains (see August entry).