Starting August 5, 2026, users generating new OAuth 2.0 refresh tokens for the Google Ads API must authenticate with a passkey.
Existing refresh tokens will continue to work, while password-only and traditional two-factor authentication will no longer be accepted for new authorizations.
The change also affects services such as Google Ads Editor, Ads scripts, BigQuery Data Transfer Service, and Data Studio.
