Passkeys required for Google Ads API user-authentication flows from August 5, 2026

Users generating new OAuth 2.0 refresh tokens must authenticate with a passkey; password-only and TOTP/SMS 2FA are disallowed, with a possible 7-day delay before a new passkey is trusted. Service accounts and existing refresh tokens are unaffected; Google Ads Editor, scripts, BigQuery Data Transfer Service and Data Studio are also subject to the requirement.