Last week we reported that some users were receiving many new user verification emails from Google Search Console, for users previously added to the account as a result of Google re-running verification checks. It was described as an issue on Google’s end, but it seems it could also have some unintended consequences.
It seems that when some users were removed, but if the site owner still left up the verification when they removed that user, then that user might have become reauthorized once Google ran the verification check.
@elizheleva When you remove them, make sure to remove the verification token too (otherwise they're essentially still verified).
— John Mueller (@JohnMu) July 9, 2016
I am not sure if this is a legacy issue for users removed a long time ago because Google normally requires the site owner to remove the verification method when removing someone.
It is also a good reminder to site owners to go and clean house with who they have added to their Google Search Console accounts. Many former agencies, consultants and auditors with access to previous clients use that information for competitive analysis and market trends regularly when the client fails to remove their access.
Latest posts by Jennifer Slegg (see all)
- Google: Why Featured Snippets Rankings are Volatile - November 14, 2017
- Google Home Services Ads Now Local Services Ads; Expanded Categories - November 13, 2017
- Google Adding More Structured Data Search Features to Search Results - November 10, 2017
- Adding Structured Data Helps Google Understand & Rank Webpages Better - November 10, 2017
- Google: How to Handle Expired Content on a Site - November 3, 2017