Confirmation of administrative changes (passkey or phone)

Every administrative change (creating people, changing access, revoking sessions, editing policies and settings) asks for a recent confirmation. Under «Manage» › «Security», the «How an administrative change is confirmed» section decides with what.

Which options are there?

Careful with «Require phone approval»

• It is available only when the service advertises a usable approver and your account has an active approver phone or Presence device.
• The console warns: «With “Require phone approval”, a passkey is no longer enough for administrative changes and can no longer undo this setting.» Only a phone or Presence approval can change it again.
• Before turning it on, make sure at least two administrators have an active approver phone. If everyone loses their phone, nobody can administer.

How do I confirm a change?

When the last confirmation is older than five minutes, the console opens «Confirm this change». Choose your passkey or «Approve on my phone» and confirm. The phone shows «Approve the browser sign-in».

Messages