Skip to main content

Enforce MFA Enrollment Grace Period in Google Workspace

How to limit how long new users can skip multi-factor authentication setup in Google Workspace.

Written by Kavi Harshawat
Updated over 2 weeks ago

Overview

When MFA is required in Google Workspace, new users are given a grace period to enroll before it's enforced. Limiting this to one day ensures new accounts aren't left unprotected for long after they're created.

Prerequisites

  • Super Admin access to the Google Admin console

Instructions

  1. Sign in to the Google Admin console

  2. Navigate to Security > 2-Step Verification

  3. Set New User Enrollment Period to 1 day

  4. Click Save

Note: This setting only affects how long new users can defer MFA enrollment. It does not change enforcement for existing users.

Did this answer your question?