Easy Tech TutsHow to Enable Two Step Verification in Google Workspace, Enforce to all users Easily 2026
By Impran M N
Two-step verification adds a critical layer of security to Google Workspace by requiring a second identity check beyond just a password. This guide covers turning on 2SV through the Admin Console's Security settings and enforcing it across all users, either immediately or after a grace period. It's meant for IT admins, school administrators, and business owners who need to protect Gmail, Drive, and other Workspace services from unauthorized access.
01Open the Security settings in Admin Console
Log in as an admin and navigate to the Security section where two-step verification controls live.
02Turn on two-step verification for your domain
Enable 2SV as an option so users in your organization can start setting it up on their accounts.
03Set an enforcement policy
Choose whether to require 2SV immediately or allow a grace period so users have time to set up their second verification method.
04Guide users through setting up their devices
Let users know they'll need to register a phone or authentication method, since this is required once enforcement takes effect.
05Plan for recovery options
Set up backup codes and recovery paths in advance for users who might lose access to their second verification method.
Frequently asked questions
What happens if a user loses their two-step verification device?
Admins can help them regain access using backup codes or by resetting their 2SV enrollment from the Admin Console.
Can I enforce two-step verification gradually instead of all at once?
Yes, Google Workspace lets you set a grace period so users have time to enroll before enforcement becomes mandatory.
Does two-step verification protect all Workspace apps or just Gmail?
It protects the entire Google Workspace login, which covers Gmail, Drive, Calendar, and other connected services under one sign-in.
Are backup codes required for two-step verification?
They're not strictly required to enable 2SV, but Google recommends setting them up as a recovery option in case a user's primary method is unavailable.
Watch the full walkthrough
The same steps, demonstrated on screen from start to finish.
