Last week we reported that some users were receiving many new user verification emails from Google Search Console, for users previously added to the account as a result of Google re-running verification checks. It was described as an issue on Google’s end, but it seems it could also have some unintended consequences.
It seems that when some users were removed, but if the site owner still left up the verification when they removed that user, then that user might have become reauthorized once Google ran the verification check.
@elizheleva When you remove them, make sure to remove the verification token too (otherwise they're essentially still verified).
— John Mueller (@JohnMu) July 9, 2016
I am not sure if this is a legacy issue for users removed a long time ago because Google normally requires the site owner to remove the verification method when removing someone.
It is also a good reminder to site owners to go and clean house with who they have added to their Google Search Console accounts. Many former agencies, consultants and auditors with access to previous clients use that information for competitive analysis and market trends regularly when the client fails to remove their access.
Jennifer Slegg
Latest posts by Jennifer Slegg (see all)
- 2022 Update for Google Quality Rater Guidelines – Big YMYL Updates - August 1, 2022
- Google Quality Rater Guidelines: The Low Quality 2021 Update - October 19, 2021
- Rethinking Affiliate Sites With Google’s Product Review Update - April 23, 2021
- New Google Quality Rater Guidelines, Update Adds Emphasis on Needs Met - October 16, 2020
- Google Updates Experiment Statistics for Quality Raters - October 6, 2020