Google Cloud users will soon be required to use multi-factor authentication, as Google announces the mandate for MFA. The transition will be phased to facilitate users.
Google Cloud MFA Becomes Mandatory Starting in 2025
According to a recent announcement by Google, multi-factor authentication (MFA) will be a mandatory login feature for Google Cloud users.
Mayank Upadhyay, VP of Engineering and Distinguished Engineer at Google Cloud, explained that starting in 2025, all users will be required to use MFA for account logins.
The rollout of this feature will occur in phases, with Phase 1 beginning in November 2024. During this phase, users will receive reminders and information about adopting MFA in their Google Cloud Console.
Phase 2, set to start in early 2025, will require all Google Cloud users to enable MFA for their accounts. Failure to do so may result in restricted access to Google Cloud Console, Firebase Console, gCloud, and other tools.
In the final phase, Phase 3, scheduled for the end of 2025, MFA adoption will be extended to federated users as an optional feature.
Google cited the rise in phishing attacks and credential theft as the main reasons for implementing mandatory MFA. Reports from US CISA also suggest that users with MFA enabled are 99% less likely to be hacked, reinforcing the importance of this security measure.
Users can access the relevant settings in their Google Account profile under the “Security” menu to enable MFA. Enabling 2-Step Verification will prompt users to set up an additional authentication method to enhance account security.
Share your thoughts in the comments below.
