G Suite can detect unusual login attempts to user accounts; you can enable additional Login challenges that the system will use on these cases to reduce the risk of unauthorized access using compromised login credentials. The Login challenges settings are as follows:

There are three types of login challenges in G Suite:

• Mobile device challenges: These use a physical mobile device that the user has registered as their own as a source of truth for confirming the login attempt. If the user has a registered device verification, it can be done in one of three possible ways:
  • A prompt that will show up on the mobile device for the user to confirm the login attempt. I find this to be the most practical option.
  • A text message with a verification code that the user must type as proof.
  • A phone call with a verification code on a voice message that the user must type as proof.
• Employee ID login challenge: The user will be asked to type their employee ID to confirm their identity.
• Recovery email challenge: The user will be asked to type their recovery email address to confirm their identity.

You just learned how to set up the login challenges; these will be very useful for your users to be able to quickly fix many security issues without requiring the aid of an administrator, saving both time and frustration.

Let's continue to the next section to learn when to enable API access and learn about the Admin SDK.