Enforce two step verification for your Google Workspace domain

Two-factor authentication (2FA) is an important way to secure your Google Workspace data. Many insurance policies are now requiring organizations to enable two-step verification to minimize the risk of phishing and ransomware attacks.
Let's review the settings for two-step verification in the Google Admin console and identify best practices for enforcing this policy for users.
Table of contents:
0:00 Intro
0:30 security settings
0:53 Setup 2FA via OU or Group
1:59 Basic two-factor setup
3:35 Two-factor authentication methods
7:10 Requiring two-factor for employees
8:05 Two-factor security reports
9:15 Advanced two-factor configuration
Additional Resources:
* Creating security groups: • The genius ways smart ...
* Google Support on 2FA: support.google.com/a/answer/1...
* Google Admin Bootcamp: HTTP://gEducator.com/gab
---------------------------
John R. Sowash is a former HS biology teacher and principal who accidentally became a Google Admin. John now serves as an independent technology consultant, helping teachers and IT admins navigate Google Workspace for Education.
💼 Google Admin Course: http//GoogleAdminBootcamp.com
✏️ Admin Resources: Chrmbook.com
📕 Podcast: Chrmbook.com/podcast
🤝 Speaking and Consulting: SowashVentures.com/contact

[@user-tg1hd4hz4y]

Great job on the video!

[@dnlmarostegan]

Hi, in my case it's not possible to use Google Authenticator, just sms, Google prompt and security key. But in admin panel, is not possible to select the options for methods.

[@dnlmarostegan]

After turning on the sms option, the option for using Google Authenticator was shown.

[@JenWestrick]

When the employee leaves and you need that email to stay active because it is used for loging it to several applications and you need to log into that email on a different computer the released employee will be getting that code no longer allowing the adminstrator to get into email. If I change the password that code to change that password goes to released emoyee. How do you get around this

[@googleadminbootcamp]

You will need to disable 2FA for that account temporarily.

[@rajiabubaker3675]

Hello, how are u , see i have some issue with, when I am trying to take Data export they're asking me to make You must have 2-step verification enabled on your account, so what i will do can you help me I am as admin

[@googleadminbootcamp]

You need to talk with your IT admin.

[@explore-lo4wq]

hi, can workspace admin force my 2 step verification off & will i being notified?. and even i turn 2 step verification on, does admin still accsess my files using google vault & will i being notifed if admin accsess my file? thanks.

[@googleadminbootcamp]

Yes, admins have full access to your workspace data through vault.

[@alyssa0411]

Why am I all of a sudden being forced to open up RUclips to match a number code to prove I am who I am when I simply want to check my gmail? This started a couple days ago. EVERY time I need to check my email, I have to go through multiple steps. It’s really annoying.

[@googleadminbootcamp]

This usually happens when there is something unusual about your login, such as a new device. Once you verify your account, it should go away.

[@user-dv1jr3nc9h]

Is it possible to turn on 2FA of only 1 user in the workspace?

[@joshuasmith4979]

Yes, i think you can create a specific group under an OU and enable it their.

[@googleadminbootcamp]

Yes, like Josh said, just put them into their own OU.

[@jorgeguillermoforero8553]

What is OU?

[@spseale]

organizational unit @@jorgeguillermoforero8553