Google brand vs Google owner accounts?

MajorFoley · February 23, 2021

So i've had a youtube account for a good while and i only just noticed something in my settings. My brand account itself doesnt have the option to let me change passwords nor does it have 2FA on. BUT if i go to the default or owner account it has 2FA active and also lets me change my password. When i log into youtube it does ask me for 2FA thankfully (Text but im thinking of changing it) so i guess its taking most of the settings from the default account but why has google got a system like this? I'm asking because someone has just recently attempted to log into my account (and is still trying to continue doing it) and i keep getting notifications to enter a code to log in. I have changed my password just in case so im hoping its the last of it but it has gotten me curious about Brand and Default accounts.

Hon Leung · February 23, 2021

According to what I know, brand accounts are subsidiaries of a Google account, or essentially "virtual" accounts that allow you to have different identities only. This feature is only available in some services, including YouTube in order to allow you to make more Channels on one Google account.

MajorFoley · February 23, 2021

37 minutes ago, McPlayerTeam said:

According to what I know, brand accounts are subsidiaries of a Google account, or essentially "virtual" accounts that allow you to have different identities only. This feature is only available in some services, including YouTube in order to allow you to make more Channels on one Google account.

Just seems weird. If a brand account is a part of a main account it should have similar settings. Just surprised it says it doesn't have 2Fa but always asks me to enter 2FA because of the account its connected to. Least the notifications have stopped guess whoever tried to log in gave up. Still changed password for safety precautions and good to know that the 2FA worked.

Hon Leung · February 23, 2021

3 hours ago, MajorFoley said:

Just seems weird. If a brand account is a part of a main account it should have similar settings. Just surprised it says it doesn't have 2Fa but always asks me to enter 2FA because of the account its connected to. Least the notifications have stopped guess whoever tried to log in gave up. Still changed password for safety precautions and good to know that the 2FA worked.

Well you know how you used to be able to set up a Facebook account just for a Facebook Page? They changed that so that to manage a page you have to do it from the account that owns it. Brand accounts are only manageable by the owner's account cos they are fake, and because only real accounts can be used to log in, the 2FA feature would only be present in the owner's account.

Brand accounts cannot be used to log in, but if the hacker has the remnants of the log in state cookies for your brand account, but not enough verification (possibly due to IP etc.), Google might try to verify the identity for the log in session to be restored on his/her side; and because of the 2FA sent to your device and that you denied it, it could be said that 2FA worked to protect your account.