Last week we reported that some users were receiving many new user verification emails from Google Search Console, for users previously added to the account as a result of Google re-running verification checks. It was described as an issue on Google’s end, but it seems it could also have some unintended consequences.
It seems that when some users were removed, but if the site owner still left up the verification when they removed that user, then that user might have become reauthorized once Google ran the verification check.
@elizheleva When you remove them, make sure to remove the verification token too (otherwise they're essentially still verified).
— John Mueller (@JohnMu) July 9, 2016
I am not sure if this is a legacy issue for users removed a long time ago because Google normally requires the site owner to remove the verification method when removing someone.
It is also a good reminder to site owners to go and clean house with who they have added to their Google Search Console accounts. Many former agencies, consultants and auditors with access to previous clients use that information for competitive analysis and market trends regularly when the client fails to remove their access.
Latest posts by Jennifer Slegg (see all)
- Google Updates Quality Rater Guidelines Targeting E-A-T, Page Quality & Interstitials - May 17, 2019
- Google Local Service Ads Display Pricing Estimates for Specific Locations - August 31, 2018
- Google Testing “Relevant History” Section in Mobile Search Results - August 31, 2018
- Google Converts PDFs, DOCs, XLS etc into HTML for Indexing - August 30, 2018
- Why Google Shows Featured Snippets With Images from Another Site - August 29, 2018