Google has documented a security change reshaping who can touch a Google Ads account. A new help article confirms the company is piloting a block on sensitive actions for users signed into free webmail addresses like Gmail or Yahoo, per Search Engine Land.
Under the pilot, users on free addresses keep report access and routine campaign edits based on permission level. Tasks like altering account access or changing linked accounts now demand a corporate email tied to a private company domain, splitting account work into a low-risk tier and a gated administrative one.
Advertisers needing that access must switch to a Google Account registered under a business domain and get an administrator to grant it. Accounts carrying three or more admins face an extra step: adding a corporate user or adjusting admin rights can trigger Multi-Party Approval, requiring a second administrator’s sign-off. Anyone moving to a corporate login must also generate a fresh passkey, since passkeys stay tied to one account.
For freelancers, small businesses and agency contacts running client accounts from a free email domain, being swept into the pilot could mean losing the power to make key account changes until they migrate to a verified corporate address.
Search Engine Land, reported by Anu Adegbola, published August 6, 2026.