Google Ads · Status at source date: Newsletter archive
Google Ads API requires multi-factor authentication for new OAuth tokens from April 21
Google has announced that the Google Ads API will require MFA for all new OAuth 2.0 refresh tokens starting April 21, 2026, with enforcement rolling out over the following weeks. Existing OAuth refresh tokens continue to work without interruption.
What changed
Service account workflows are not affected. Users without 2-step verification enabled will be prompted to set it up before generating new tokens.
Why it matters for advertisers
For you, this means ensuring all developer and agency team members who generate Google Ads API credentials have 2-step verification enabled before April 21: any new token generation after that date without MFA will be blocked.
Perspective from the original PMC newsletter.Sources & contributor credit
- Newsletter coverage · Paid Media Collective newsletter
Original newsletter text, contributor labels and media for this update.
- Source referenced in newsletterGoogle Ads Developer Blog
Linked from the original newsletter. The source publication date has not been independently confirmed.
- Source referenced in newsletterCory Liseno
Linked from the original newsletter. The source publication date has not been independently confirmed.
Original creator unverified
The names below are source credits. The original creator and first-reporting priority have not yet been independently verified.
Attribution evidence and limitations
Full attribution review pending.
A source link alone does not establish original authorship.
Original image and video creators have not yet been verified.
- Published on this site
This update reflects the dated source reporting. Availability may have changed. Further coverage of this same development will be added to this page.
Original newsletter text and archive evidence
Google Ads API requires multi-factor authentication for new OAuth tokens from April 21
Google has announced that the Google Ads API will require MFA for all new OAuth 2.0 refresh tokens starting April 21, 2026, with enforcement rolling out over the following weeks. Existing OAuth refresh tokens continue to work without interruption. Service account workflows are not affected. Users without 2-step verification enabled will be prompted to set it up before generating new tokens.
For you, this means ensuring all developer and agency team members who generate Google Ads API credentials have 2-step verification enabled before April 21: any new token generation after that date without MFA will be blocked.
Source captured . No explicit first-contributor label was provided for this update.
