Overview
Google Advanced Protection enforces the strongest account security settings available, requiring phishing-resistant MFA methods such as hardware security keys or passkeys. Enabling this ensures users can't fall back to less secure verification methods like SMS codes.
Prerequisites
Super Admin access to the Google Admin console
Advanced Protection enabled for your organization
2-Step Verification enabled for your organization (required by Advanced Protection)
Security keys or passkeys provisioned for enrolled users
Instructions
Sign in to the Google Admin console
Navigate to Security > Authentication > Advanced Protection Program
Select the organizational unit containing the users you want to enable
Ensure Enable user enrollment is selected
Under security codes, select Allow security codes without remote access
Click Save
Note: For full details on deploying Advanced Protection across your organization, refer to Google's official documentation on enabling user enrollment in the Advanced Protection Program.