Security advisor: Turn on recommended settings

As an administrator, you can get insights into your organization’s security risks with Security advisor. You can review recommended settings and take action to improve security. You also get a periodic email with security recommendations tailored to your organization.

 Open Security advisor settings

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2.  In the Admin console, go to Menu  SecuritySecurity advisor.
3. Review the insights and turn on the recommended settings. 

What are the settings?

After Security advisor checks your organization’s security settings, you can turn on the following settings to protect your organization’s data:

Phishing and malware protection

	Business Starter	Business Standard	Business Plus
Enhanced Safe Browsing for Chrome browser	✔	✔	✔
Scan all email attachments in Security Sandbox		✔	✔
Enhanced Safe Browsing for Gmail		✔	✔

Data protection

	Business Starter	Business Standard	Business Plus
Limit external file sharing in Drive	✔	✔	✔
Prevent users from sharing sensitive data outside your organization			✔
Prevent app access from unsafe mobile devices			✔

Account protection

	Business Starter	Business Standard	Business Plus
Require users to have strong passwords	✔	✔	✔
Allow users to sign in using passkeys	✔	✔	✔
Turn on 2-Step Verification (2SV)	✔	✔	✔

Upgrade your Google Workspace edition

To turn on some of the recommended settings, you might need to upgrade your Google Workspace edition. To upgrade: 

1. Click Upgrade and follow the instructions. 
2. Refresh the page to see the upgrade.

Changes can take up to 24 hours but typically happen more quickly. Learn more

After you upgrade your edition, sensitive data protection and app access protection are turned on. If you downgrade later, settings that are not available for your new edition are turned off.