The Google Search Console security update improves ownership token management

[ad_1]

Google Search Console has released a security update around user rights management and controls to help you better manage ownership tokens. Ownership tokens are used when people verify your site in Search Console, Merchant Center, and other Google products, and sometimes people who had access to your profiles in the past should no longer do so.

This update makes it easier to manage such access and remove those tokens and permissions when they are no longer needed.

What Google said. Googling wrote:

We are making further improvements for Search Console user and rights management, with capabilities for managing unused ownership tokens. Tokens are the codes used to verify website ownership in Search Console, Merchant Center, and other Google products. We have seen cases where these were accidentally left behind after the owners moved out. We rolled out in February 2023 improvements to the user and permission management report. The latest changes will improve accuracy and reflect the true status of unused ownership tokens.

How it looks. In the user and permissions interface, under the “unused ownership tokens” you will see a screen like this where you can click “remove” to remove access to those ownership tokens:

Search Console token managementSearch Console token management

How it works. Here are the steps you need to take to manage these ownership tokens:

  1. Visit the User and authorization interface
  2. Click on ‘Unused Ownership Tokens’
  3. Choose the tokens you want to delete and click “Delete” (see screenshot below)
  4. Click ‘Verify Deletion’ to get an update for the unused property token

Why we care. It’s always a good idea to make sure the right people have access to your data and Search Console properties, and more importantly, that the wrong people don’t have access to them. As Google’s Nir Kalush wrote, “With the update rolled out today, you can verify the deletion of the unused authentication token so that deleted owners can no longer access the property.”

So check your tokens and remove the ones that should not have access.

[ad_2]

Leave a Reply

Your email address will not be published. Required fields are marked *