Google Cloud is making multi-factor authentication mandatory for all users

A padlock resting on a keyboard.
(Image credit: Passwork)

  • Google is encouraging Cloud customers to enable MFA now
  • All users will need to enable MFA by the end of 2025
  • 30% of Google users don’t use MFA yet

Google Cloud has confirmed its users will need to enforce multi-factor authentication within the next few months as part of a major security push.

After quietly announcing the change in an October document, Google Cloud VP of Engineering and Distinguished Engineer Mayank Upadhyay revealed the rollout will be in phases, with mandatory MFA for all Google Cloud customers set to arrive by the end of 2025.

Google has promised to smoothen the rollout of the MFA requirement by dropping notifications on enterprise users ahead of time, so that they can enact the change with their employees.

Google Cloud now mandates the use of MFA

“We’ve been strong advocates for our MFA system for over a decade," noted Upadhyay, highlighting how the company will now begin encouraging users to enable MFA through reminders and other information popups in the Google Cloud console.

From 2025, new and existing customers using password logins will need to turn on MFA in their accounts, and by the end of the year, all users who federate authentication into Google Cloud (via third parties) will also need to enable the additional security step.

The company revealed around one in three (30%) Google users still rely on just passwords, highlighting the scale of the work required to drive wider MFA adoption.

Given the recent surge in high-profile data breaches and the amplification of attacks thanks to generative AI, adding MFA to accounts will make it more difficult for hackers to force entry via phishing scams.

Research from the Cybersecurity and Infrastructure Security Agency (CISA) suggests MFA can make users 99% less likely to be hacked.

In the blog post, Upadhyay proudly proclaimed Google led the consumer-scale MFA drive more than a decade ago in 2011, when it implemented 2-step Verification.

Despite the looming deadline, Google Cloud customers can begin to adopt MFA already, so they won’t need to wait for a specific part of the phased rollout.

You might also like

TOPICS
Craig Hale

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!

Read more
Security padlock in circuit board, digital encryption concept
MFA alone won’t protect you in 2025: the new cybersecurity imperative
Isometric demonstrating multi-factor authentication using a mobile device.
Google is ditching SMS - and will now use QR codes for Gmail account authentication
An abstract image of a lock against a digital background, denoting cybersecurity.
Building a resilient workforce security strategy
A phone sitting on a laptop keyboard with the Microsoft Outlook logo on the screen.
Microsoft is changing the way logins work: here’s what that means for you
A hand laying out a password
Security attacks on password managers have soared
A hand reaching out to touch a futuristic rendering of an AI processor.
Google Cloud unveils new AI Protection security tools, no matter which model you use
Latest in Security
Data leak
Top home hardware firm data leak could see millions of customers affected
Representational image depecting cybersecurity protection
Third-party security issues could be the biggest threat facing your business
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Android Logo
Devious new Android malware uses a Microsoft tool to avoid being spotted
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Latest in News
Hisense U8 series TV on wall in living room
Hisense announces 2025 mini-LED TV lineup, with screen sizes up to 100 inches – and a surprising smart TV switch
Nintendo Music teaser art
Nintendo Music expands its library with songs from Kirby and the Forgotten Land and Tetris
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
The iPhone 16 Pro on a grey background
iPhone 17 Pro tipped to get 8K video recording – but I want these 3 video features instead
EA Sports F1 25 promotional image featuring drivers Oscar Piastri, Carlos Sainz and Oliver Bearman.
F1 25 has been officially announced, with this year's entry marking a return for Braking Point and a 'significant overhaul' for My Team mode
Garmin clippd integration
Garmin's golf watches just got a big software integration upgrade to help you improve your game