Google Workspace

Turn On 2-Step Verification for Google Workspace

Let your team turn on 2-Step Verification, then enforce it. Who can turn it on, which methods an admin can allow, and the enrollment window for new users.

Last reviewed October 20, 2026 · 3 min read

On this page
  1. 1. Allow it
  2. 2. Require it after people are enrolled
  3. 3. Admin accounts
  4. Common mistakes
The admin can allow 2-Step Verification and later require it. Each person turns it on from their own account. Diagram: Sac Business Launch.

The admin can allow 2-Step Verification and later require it. Each person turns it on from their own account. Diagram: Sac Business Launch.

What you'll need

  • A super admin account

  • A phone, security key, or authenticator app for each person

  • A plan for the owner and anyone else who is an admin

1. Allow it

Google's admin article for this was last updated October 13, 2026. We read it on October 20, 2026.

Sign in as a super admin. Go to Security, then Authentication, then 2-step verification. Check Allow users to turn on 2-Step Verification. Leave Enforcement set to Off. Save.

Tell each person to turn it on from their own account. Methods Google names include a security key, a Google prompt, a text message, a phone call, an authenticator app, and backup codes. An admin cannot flip the switch for them.

2. Require it after people are enrolled

Enforcement On starts right away. A future date starts within 24 to 48 hours. New users can have 1 day to 6 months. Diagram: Sac Business Launch.

Enforcement On starts right away. A future date starts within 24 to 48 hours. New users can have 1 day to 6 months. Diagram: Sac Business Launch.

When you are ready, set Enforcement to On. That is immediate. Or choose Turn on enforcement from date. Google says that starts within 24 to 48 hours of the date you pick.

Set the new-user enrollment period anywhere from 1 day to 6 months, so a new hire is not locked out on the first morning.

You can limit methods to Any, Any except text message or voice call, or Only security key. Google's page says the security-key option now includes passkeys.

3. Admin accounts

Google's help says Google is enforcing 2-Step Verification for admin accounts. Turn the owner's account on first, and keep backup codes somewhere that is not only inside that account. The details of Google's rollout are on the help page. We are not repeating an older timeline.

Common mistakes

  • Enforcing 2-Step Verification before anyone has enrolled.

  • The only admin has no backup codes.

  • Allowing text-message codes when you meant to require a security key.

Questions people ask

Can an admin turn on 2-Step Verification for a user?

No. Google says only the user can turn it on. The admin allows it, and can require it after people have enrolled.

How soon does enforcement start?

Enforcement On starts immediately. If you pick a future date, enforcement starts within 24 to 48 hours of that date.

How long can new users wait?

The new-user enrollment period can be set from 1 day to 6 months.

We can walk through the email and tools setup with you on a free call.

Book a Business Boost Call
Words to know

  • 2-Step Verification: A second check after the password, such as a phone prompt or a security key.

  • Enforcement: A setting that requires people to use 2-Step Verification.

  • Security key: A physical key, or a passkey, that proves it is you.

  • Enrollment period: How long a new user has before enforcement applies to them.

Sources

  1. Deploy 2-Step Verification - Google Workspace Admin Help · support.google.com
  2. Only a user can turn on 2-Step Verification - Google Workspace Admin Help · support.google.com
  3. Google is enforcing 2-Step Verification for admin accounts - Google Workspace Admin Help · support.google.com

This is general information for Sacramento and Northern California businesses. We are not attorneys or tax advisors, and this is not legal or tax advice. Check the official sources, and a local pro, before you act.

More guides