Gmail now requires authentication to change ‘sensitive’ settings

Gmail will switch require additional verification to change certain types of settings in the accountis considered sensitive. The change aims to strengthen users’ security against intruders and was announced by Google on Wednesday (23).

According to Google, the extra protection will apply to these attempts: Create, edit or import filters and add a new forwarding address in forwarding and POP/IMAP settings. Enabling IMAP access via settings will also turn on the email service alert signal.

When any of these operations is performed, the system will make an instant evaluation. If he thinks this is a risky situation, he will ask the user to prove that he is the owner of that account via the “Verify that it’s you” notification.

In this case, Gmail will request recognition on a second device through two-step verification, so that the user can complete the requested action by proving his identity. This may include, for example, sending an SMS to the mobile phone registered in the profile.

Authentication failed

If the verification required by Gmail fails to complete successfully, changes made to settings will not be published. In addition, the account holder will receive a “Critical Security Alert” on their trusted device informing them of possible suspicious activity.

The extra protection is useful when access to Gmail is compromised for any reason. Thus, it is possible to prevent unauthorized persons from using filters, among other things, to hide messages about purchases and confidential changes or to forward messages to third parties.

Gmail’s new security feature is gradually being rolled out. It may take up to 15 days to reach all free users. The tool will be available from September 6 for those with a Google Workspace subscription and will be available in a maximum of three days.