Google Cloud Changes: The Password Era Will End in 2025

Man

Professional
Messages
3,066
Reaction score
593
Points
113
Google Cloud makes MFA mandatory for all users.

Google Cloud has announced the introduction of mandatory multi-factor authentication (MFA) for all users in 2025. The measure is aimed at strengthening the protection of accounts, especially in the face of growing threats of phishing and compromised credentials. Google explained that MFA helps protect user data without complicating the authorization process.

The implementation process will take place in stages:
  • In the first phase (starting in November 2024), the company will encourage users to switch to MFA by providing reminders and instructions in the Google Cloud console.
  • In the second phase (early 2025), MFA will become mandatory for all users who log in with a password. They'll need to enable MFA to continue using Google Cloud tools, including Google Cloud Console, Firebase Console, and gCloud.
  • The third phase (late 2025) involves the introduction of MFA for all users using federated authentication with Google Cloud.

Google began implementing multi-factor authentication for consumers back in 2011 with the launch of 2-Step Verification. This approach quickly became widespread due to its simplicity and effectiveness in combating password compromise.

However, with the emergence of more sophisticated attacks, the company introduced new protection methods, including phishing-resistant security keys and passkeys, which greatly simplify the authentication process through the use of biometrics.

The transition to mandatory MFA in Google Cloud is dictated by the recommendations of information security specialists and the CISA agency, which confirmed that users with activated multi-factor authentication are 99% less likely to become victims of attacks.

Users who want to set up MFA can now enable free two-step verification for their Google Accounts. To do this, go to the security settings on the security.google.com website and activate two-step verification in the "How do you sign in to Google" section).

Source
 
Top