Tag Archives: Accounts

Improved phone prompts for 2-Step Verification

In June 2016, we introduced phone prompts for 2-Step Verification, giving users another option to keep their accounts safe. Starting this week, users who have opted into receiving phone prompts for 2-SV will notice improvements to the notifications they get when trying to sign in. For instance, when available, they’ll see additional details about the sign-in request, like when and where it was made. These improved prompts will appear on both Android and iOS devices.


Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Editions:
Available to all G Suite editions

Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More Information
Help Center: Sign in faster with 2-Step Verification phone prompts


Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Helping users recover their password with recovery email addresses

If your domain has enabled non-admin user password recovery from the Admin console, then you may have decreased your help desk tickets by giving users an automated way to reset their password. Starting October 25, 2016, we’re extending non-admin user password recovery to include email addresses, an extension to our phone numbers launchfrom last year.
Getting Started

  • Non-admin user password recovery launchedover a year ago as default OFF for new G Suite domains, and you can enable the feature by Organizational Unit from the Admin console under Security settings.
  • If you’ve already enabled the feature, then users will be prompted to add a secondary email address.

Security Best Practices
If you’ve enabled this feature for your domain, we’d like to remind you of the following resources for administrators we’ve updated with this launch:


Note: For G Suite for Education domains that are Primary/Secondary institutions, only administrators will be shown the prompt for email address and phone number.



Launch Details
Release track:
Launching to both Rapid release and Scheduled release on October 25, 2016

Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

More information

Notifying Android users natively when devices are added to their account to keep them secure

Google offers useful and simple-to-use security features such as 2-Step Verification and Single Sign-On in order to protect users who connect to their accounts on multiple devices. One equally important component in keeping users secure is educating them on what’s happening with their accounts in real-time.

That’s why today, we’re pleased to release a new feature that notifies Android users of security events on their account: Android notifications for newly added devices.

Here’s how it works

When users add a new device to their account, native Android notifications will tell the user about the newly added device or security event.
If the activity looks suspicious, the user can choose to “Review Account Activity,” and find out what device was added, from what location, and other important information. If the activity is expected, the user can dismiss it as any other notification.
Benefits

Now users are quickly notified on multiple devices when a new device has been added. This increases transparency to the user of what actions they've performed and allows them to flag any suspicious activity they may be seeing on the device. We’ve also found that with Android notifications, users are up to four times as likely to review the information as compared to email notifications.

We hope you find this security feature as useful as we do!


Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Rollout pace:
Gradual rollout (potentially longer than 14 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI


Note: all launches are applicable to all Google Apps editions unless otherwise noted

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

New settings for 2-Step Verification

We know that security is one of your top concerns as a Google Apps admin and that many of you require your employees to turn on 2-Step Verification (2SV) to keep their accounts safe. There are multiple ways your end users can approve sign-in requests via 2SV—by tapping a Security Key, by entering a verification code sent to their phone or, starting today, by approving a prompt like the one below that will pop up on their phone.


Your employees can now choose any of these options in the Sign-in & Security > Signing in to Google > 2-Step Verification section of My Account. The Help Center will be updated with detailed instructions soon; check back here for links to the relevant articles.


Notes:

  • Currently, you can't have Security Keys and Google prompt enabled at the same time.
  • A data connection is required to use Google prompt.
  • Android users will need updated Google Play Services to use Google prompt.
  • iOS users will need the Google Search app installed on their phone to use Google prompt.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Rollout pace:
Gradual rollout (potentially longer than 3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

Note: all launches are applicable to all Google Apps editions unless otherwise noted

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

Change to default avatar for Google account owners without Google+

In September, we announced some changes to the default avatar that Google account owners with Google+ enabled see when logged into their accounts. We’re now making those same changes for Google account owners who don’t have Google+ enabled. Starting today, if a Google account owner has not added a photo to his or her account, we’ll show a custom avatar with that account owner’s given-name initial (two-character given names will be fully displayed). In some cases where initials are not available, a plain colored avatar will be used instead.

This change will be visible* in the Google Bar soon and will be gradually reflected across all Google products over the course of the coming months.

*NOTE: Users with initials in scripts other than Latin, Cyrillic, Greek, Chinese, Japanese, and Korean will see this change later this year.

Launch Details
Release track:
Launching to both Rapid release and Scheduled release

Rollout pace:
Full rollout (1–3 days for feature visibility)

Impact:
All end users

Action:
Change management suggested/FYI

Note: all launches are applicable to all Google Apps editions unless otherwise noted

Launch release calendar
Launch detail categories
Get these product update alerts by email
Subscribe to the RSS feed of these updates

New privacy and security tools for Google accounts

We recognize that people today are constantly connected, making control over their digital privacy and security even more important. We want to help them better use tools and settings to safeguard their data, protect their privacy, and decide what information is used to make Google services work better for them. With this in mind, we recently launched a single hub where people can manage their Google account data. My Account, which replaces the previous Google Account settings page, features sections dedicated to managing one’s sign-in and security settings, personal info and privacy settings, and account preferences. Below are just some of the things a person can do with My Account:
  • Take the Privacy Checkup and Security Checkup, two simple, step-by-step guides for reviewing and editing one’s personal privacy and security settings.
  • Manage the information that can be used from Search, Maps, YouTube, and other products to enhance one’s experience on Google.
  • Control which apps and sites are connected to one’s account.
In addition, starting on June 15th, Google for Work account owners will receive an email when we’re unable to determine if they’ve previously used a particular browser or device with their account. This could happen when someone signs in to a Google for Work account for the first time on a new computer, phone, or browser, when someone uses their browser’s incognito or private browsing mode or clears their cookies, or when someone besides that account owner accesses their account. Individuals will also be able to view a list of recently used devices and recent new sign-ins on their Sign-in & security page and, if something looks suspicious, take action quickly. Check out My Account at myaccount.google.com.

Along with My Account, we’ve rolled out a new site at privacy.google.com, where we answer common questions about privacy and security on Google (e.g. “What data does Google collect?” and “What does Google do with the data it collects?”). We also explain how encryption and spam filtering help keep individuals’ data safe and how personal information helps customize an individual’s experience on Google. Explore the new site at privacy.google.com.


Release track:
New My Account pages and Privacy and Security Checkups available now for both Rapid release and Scheduled release; Sign-in Alerts coming June 15th for both Rapid release and Scheduled release

Note: all launches are applicable to all Google Apps editions unless otherwise noted

Launch release calendar
Get these product update alerts by email
Subscribe to the RSS feed of these updates