Google Cloud to Enforce Mandatory Multi-Factor Authentication by 2025

The phased rollout aims to enhance security for all users by requiring additional authentication measures.

Google Cloud will implement mandatory multi-factor authentication (MFA) for all users by the end of 2025.
The initiative will be rolled out in three phases, starting with reminders for users to adopt MFA voluntarily.
By early 2025, all new and existing users who log in with a password must enable MFA across Google Cloud services.
Federated users will also need to comply with MFA requirements by the end of 2025, with flexible options available.
Google cites increased security threats and research showing MFA significantly reduces the risk of account breaches.