---
title: Alert when 2FA is disabled for any user in your google domain with GAT+
description: "## Introduction Two-factor authentication (2FA) is a form of authentication that requires only two authentication factors. The first factor is your username and password and the second factor is another method that you choose. [GAT+](https://gatlabs.com/knowledge/tech-tips/gat-overview/) Alert Rules functionality can be…"
url: "https://gatlabs.com/knowledge/tech-tips/alert-when-2fa-is-disabled-for-any-user-in-your-google-domain/"
updated: "2025-08-20"
category: DLP (Data Loss Prevention)
tags:
  - GAT+
---

# Alert when 2FA is disabled for any user in your google domain with GAT+

## Introduction

Two-factor authentication (2FA) is a form of authentication that requires only two authentication factors. The first factor is your username and password and the second factor is another method that you choose.

[GAT+](https://gatlabs.com/knowledge/tech-tips/gat-overview/) Alert Rules functionality can be configured by a [Google Workspace](https://workspace.google.com/) Super Admin when these alerts are triggered by end-users the recipients of the rule get notified.

**There are multiple types of Alert options:**

- Applications
- Emails
- Drive
- YouTube
- Mobile Devices
- Users
- Users Security
- User Logins

## Users Alert

**For U****sers,** you can set up different alerts and be notified of different actions.

- Notify on **Two-Factor Authentication (2FA**) backup codes used
- **Notify on 2FA disabled**
- Notify when an account has not been used for a period of time
- Notify when an account is used again after x days of inactivity
- Notify when storage exceeded

### Configure Users Alert Rule

Navigate to **GAT+ → Configuration → Alert Rules **

![2FA](https://gatlabs.com/wp-content/uploads/2020/02/screenshot-gs.generalaudittool.com-2021.02.16-17_16_07.png)

Click on the "+ sign" and a new window will be displayed, fill in the details.

![2FA](https://gatlabs.com/wp-content/uploads/2020/02/screenshot-gs.generalaudittool.com-2021.02.17-11_43_52.png)

- Name - enter the name of the Alert.
- Enabled - checkmark to enable or disable the Alert.
- Type - **Users**.
- Scope - select what users for which alert will be triggered.
- Recipients - Add a user email or group email for Email notifications, or leave as blank ( this will show alerts only in the alerts section).
- Select - **Notify on 2FA disabled.**
- Click on the **Save **button to save the rule.

### Result

The rule can be viewed, edited, or removed in **Alert rules**

![Two-Factor Authentication (2FA)](https://gatlabs.com/wp-content/uploads/2020/02/screenshot-gs.generalaudittool.com-2021.02.17-11_52_23.png)

When the Alert is triggered they will be generated and displayed in**Audit & Management → Alerts **

![](https://gatlabs.com/wp-content/uploads/2021/02/screenshot-gs.generalaudittool.com-2021.02.17-12_48_02.png)

### Video How-to: Two-Factor Authentication (2FA) Alert

[https://www.youtube.com/embed/kDq7hcUGccc?feature=oembed&color=red&rel=0&controls=1&start=&end=&fs=0&iv_load_policy=0&autoplay=0&mute=0&modestbranding=0&cc_load_policy=1&playsinline=1](https://www.youtube.com/embed/kDq7hcUGccc?feature=oembed&color=red&rel=0&controls=1&start=&end=&fs=0&iv_load_policy=0&autoplay=0&mute=0&modestbranding=0&cc_load_policy=1&playsinline=1)

##  Users Security Alert

Under the **Users Security** alert type, you can also set up the alert that notifies you when 2FA is disabled by the user under the selected scope of this alert.

### Configure Users Security Alert Rule

Navigate to **GAT+ → Configuration → Alert Rules **

![2FA](https://gatlabs.com/wp-content/uploads/2020/02/screenshot-gs.generalaudittool.com-2021.02.16-17_16_07.png)

Click on the "+ sign" and a new window will be displayed that allows you to add the rule, fill in the details.

![](https://gatlabs.com/knowledge/wp-content/uploads/2022/01/Users-security.png)

- Name - enter the name of the Alert.
- Enabled - checkmark to enable or disable the Alert.
- Type - **Users Security**
- Scope - select what users for which alert will be triggered.
- Recipients - Add a user email or group email for Email notifications, or leave as blank ( this will show alerts only in the alerts section).
- Select - **Notify on 2FA disabled.**
- Click on the **Save **button to save the rule.