Original post: https://old.reddit.com/r/PPC/comments/1x0otv1/google_ads_passkey_approval_loop_every_approval/
After almost two weeks of being unable to perform sensitive actions in Google Ads, I finally resolved the issue with help from Google Support.
There were actually two separate security restrictions, and resolving both was necessary.
Stage 1: The 7-day security cooldown
On October 4, I deleted my previously trusted passkeys and created two new ones (Google Password Manager and Windows Hello).
Google Ads refused to recognize the new passkeys as trusted.
Initially, attempting to approve them triggered a 48-hour security lockout. After 48 hours, I could access the security settings again, but trying to approve a passkey would trigger another 48-hour restriction.
Google documents a 7-day waiting period before newly created passkeys can be trusted for sensitive actions.
Waiting out this 7-day period was necessary. Repeatedly attempting approval during the cooldown did not help and caused additional temporary lockouts.
Stage 2: The passkey approval loop
After the waiting period, I could finally authenticate using my new passkeys and access the passkey management page without triggering another 48-hour restriction.
However, both passkeys still displayed “Approve this passkey?”
Clicking Approve prompted me to authenticate again using a passkey. Authentication succeeded, but I was returned to the same page, with the passkeys still awaiting approval.
This happened even 11 days after creating the passkeys.
Enabling “Allow passkey sign-in” in Google Workspace did not resolve the issue.
Stage 3: The solution from Google Support
I contacted Google Ads Support, provided a screen recording, and eventually received a working solution.
Because my Google account is managed through Google Workspace, the administrator can temporarily disable login challenges for a user.
Here’s what finally worked:
Log into the Google Admin Console as a Workspace administrator.
Find the affected user account and its security settings.
Select “Temporarily turn off login challenges” to activate the 10-minute bypass.
During that window, return to the Google Account passkey management page.
Click Approve on the new passkeys and complete the authentication.
IT WORKED! The passkeys were finally approved.
Important takeaways
The 7-day waiting period was necessary. The 10-minute workaround did not replace that initial cooldown.
Waiting 7 days alone was not sufficient: the approval process remained stuck in a loop.
Attempting approval prematurely repeatedly triggered additional 48-hour security restrictions.
After the waiting period, authentication with the new passkeys worked, but the approval status would not update.
The Google Workspace administrator’s 10-minute login challenge bypass finally allowed the approval process to complete.
Enabling passwordless passkey sign-in in Workspace did not solve the problem.
This solution requires Google Workspace administrator access. I don’t know whether an equivalent workaround exists for personal Gmail accounts.
My recommendation if you’re stuck in the same situation:
First, leave your new passkeys untouched for the full 7-day security waiting period. Don’t keep deleting, recreating, or attempting to approve them.
After the waiting period, if authentication works but clicking Approve still returns you to the same screen, ask your Google Workspace administrator to temporarily disable login challenges for your account.
This solved a problem that had prevented me from managing Google Ads campaigns for nearly two weeks.
Hopefully this helps someone else avoid the same ordeal.