What changed
Time to bail on Google Cloud console sign-in without SSO? Act. You can stay. From October 20, 2026, these accounts need 2-Step Verification to open the Cloud and Firebase consoles.
On our scale this is Act: change a setting or plan before the date. You can stay.
Some company accounts must turn on 2-Step Verification. Without it, they cannot open the Google Cloud and Firebase consoles. This hits accounts that sign in with a password, not single sign-on. Admins can get one 90-day extension.
Here are the facts we checked:
- Required on or after: October 20, 2026 (Google Cloud)
- Who: Enterprise Cloud Identity accounts without SSO, in orgs created before August 3, 2026 (Google Cloud)
- Orgs created on or after August 3, 2026: 2SV is required 30 days after the org was created (Google Cloud)
- Where it applies: The Google Cloud console and the Firebase console (Google Cloud)
- Not affected: Workspace apps like Gmail and Drive, YouTube, and your apps and workloads (Google Cloud)
- More time: A one-time 90-day extension for the whole org (Google Cloud)
- Who can extend: An Organization Administrator, on the Organizations page (Google Cloud)
- Accounts that use SSO: Date to be announced; the 2SV of your identity provider counts (Google Cloud)
- Personal Google Accounts: Required since May 12, 2025 (Google Cloud)
- Current company accounts without SSO: Need 2SV to open the consoles from October 20, 2026 (Google Cloud)
You can stay on Google Cloud. You have to change a setting or plan before the date.
Leaving is a choice here, not a must.
Google Cloud is the main source for this page. Google Cloud has not said more than what is listed here. If a fact is not on this page, we do not know it yet.
Who is affected
Current company accounts without SSO: Need 2SV to open the consoles from October 20, 2026.
The date to remember is October 20, 2026. Make the change before then.
What to do before October 20
- Find who signs in with a password. List the Cloud and Firebase users who do not use single sign-on. Admins can see who meets the rule in Logs Explorer.
- Turn on 2-Step Verification. Workspace and Cloud Identity admins can roll out 2SV for their users. Google Cloud accepts it.
- Need more time? Extend once. An org admin can click "Extend by 90 days" on the Organizations page. The rule comes back when the extension ends.
A few tips:
- Make the change yourself before the date. Do not wait for the last reminder email.
- Write down your current plan or settings first, so you can compare after the change.
- After the change, open your settings again and check that it worked.
How to tell your users
If the change affects your members or team, send one short email. Say what changes for them and when. Put the most important line first.
If there is a date, send a short reminder a few days before it. Keep a copy of the list you sent it to.
Options people mention
Listed for convenience. Not ranked. Not paid. These names come up in threads and reviews; that does not show where people moved.
Before you pay, check the price page of each tool yourself. Prices change, and we only list what our sources say.
Questions people ask
No questions collected yet.
Sources