Google Ads API Now Requires MFA. Your Plugin Will Reconnect.
The Google Ads API now requires multi-factor authentication on every new OAuth 2.0 refresh token from April 21, 2026 (Google Ads Developer Blog, 2026). Existing tokens keep working — but the next time a WooCommerce tracking plugin reconnects, the Google account holder needs 2-Step Verification enabled. Five scenarios force a re-auth: plugin reinstall, account migration, agency rotation, employee offboarding, and token revocation. Service account workflows are not affected. Stores running Conversios, Google for WooCommerce, FunnelKit Pro, or Pixel Manager Pro on shared or unaudited Google logins have lurking maintenance debt with a calendar trigger.