For subtitles in your language, turn on YouTube captions. Select the Settings icon found in the video player, then select Subtitles/CC and choose your language.
Security Agent is an automated service that helps protect your Google Ads account by moving from manual checks to active monitoring. Unlike traditional security systems that only react to known issues, the Security Agent uses advanced reasoning to review your account activity in real time.
This tool uses AI to learn what is normal for your account, which helps it tell the difference between a real business change and suspicious activity. It also helps address "security debt" issues like accounts that aren't being used or users who have too much access to your account.
How the Security Agent works
While most security tools follow simple rules and logic, the Security Agent dynamically looks for activity in your account that doesn’t align with historical behavior. This behavior is flagged by the Security Agent so you can make necessary changes to help prevent unauthorized activity.
The agent uses the following to help secure your account:
- Checking email domains: The agent looks at the email domain used on your account. It helps tell if they are from real partners or potential hackers, even if they use public email services.
- Spotting unusual users: The agent flags users who do things they don't normally do. For example, it watches for people who try to make big changes to how your account is set up.
- Review suggestions: Remember to review and accept the recommendation or, when necessary, change the recommendation when you feel a domain or user shouldn't be flagged.
Address security debt in your account
Security debt refers to issues like accounts that aren't being used or users who have too much access to your account. Fixing these security problems makes it much harder for unauthorized users to access your account.
The Security Agent helps you address security debt in your account using the following:
- Monitoring login activity: Most security issues happen because of stolen passwords from phishing. The Security Agent finds these threats by watching for login attempts and activity that are different from what’s normal for your account.
- Assessing account access levels: The Security Agent helps you make sure everyone has the right access level for the work they do in the account. For example, if a user with the “Admin” role in your account never performs actions that require administrative access, Security Agent may suggest downgrading their access to “Standard”. This limits the impact to your account if it’s ever compromised.
- Automating security checks: Checking accounts for security concerns manually takes a long time and may result in errors or overlooked issues. The Security Agent keeps an eye on your accounts and users for you, so you can focus on your advertising goals.
Review Security Agent suggestions
When the Security Agent gives you a suggestion, it’s best to act quickly to resolve the issue. To review Security Agent suggestions in your Google Ads account:
- Select Access and security in the Admin menu.
- Select the Security tab.
Suggestions from the Security Agent will be available in the “Security insights” section. These suggestions will provide the best next steps to optimize your account security, like removing risky users and restricting domain access in your Google Ads account.
Tips for keeping your account safe
- Remove accounts that aren't being used: Review your dormant accounts list and deactivate any that are no longer in use. Check any "Suspicious users" alerts to find and remove any accounts that no longer need access to your account.
- Check who has access: Only give people the access they need for their role. If the Security Agent flags that a user may have too much access to your account, review the suggestion and decide if their access should be downgraded.
- Secure your email domains: Watch for email domains that don't look right. If the agent flags an email domain that doesn't belong, check it out. Removing unknown email domains is a key step to keeping hackers away.
- Check your dashboard every month: Make it a habit to look at the Security Agent’s tips and suggestions at least once a month.
- Use passkeys and 2-step verification: This is the best way to secure your account. The Security Agent will ask for a passkey when you make big changes to your account. Learn more about how to Use a passkey to complete sensitive actions.
- Review suggestions: Remember to review and accept the recommendation or, when necessary, change the recommendation when you feel a domain or user shouldn't be flagged.
