Google Warns Gmail Users Of New Critical Security Alerts—Set Up 2FA Now

Google is urging Gmail users to set up two-factor authentication (2FA) as it introduces a new security alert system. The system aims to protect Gmail users when “sensitive actions” are taken that impact their account. These sensitive actions include creating, editing, or importing a filter, adding a new forwarding address, and enabling IMAP access. If a user performs one of these actions and it is deemed risky by Google, a prompt for further verification will be displayed. This verification will require a “second and trusted factor” such as a 2FA code from an authenticator app, text message, or phone call. If the verification is not completed, a critical security alert will be sent to all trusted devices. Gmail users are advised to enable 2FA if they haven’t already done so in order to be prepared for these prompts. The new security alert system is being rolled out gradually and may take a week or two before users start seeing the prompts. Administrators of Workspace accounts are also advised to visit the help center to learn about their options, including the ability to temporarily turn off login challenge prompts.