How to turn on two-factor authentication for Google

Short answer

Where the setting is

In your Google Account, the setting is Security & sign-in, then 2-Step Verification, then Set up authenticator.

Google calls it 2-Step Verification. Its help page says: “If you choose not to sign in with a passkey, we recommend you use Google prompts as your second step.” An authenticator app is one of the other methods the page describes, and Google describes it as an option for times when you have no internet connection or mobile service.

Google also warns: “Never share your verification codes with anyone, as scammers may try to take over your account. You won’t receive a call from Google to verify a code.” See why you should never share your 6-digit code.

More guides: what two-factor authentication is, and which apps and websites work with an authenticator app.

Steps

Steps

  1. Open your Google Account.
  2. Tap Security & sign-in.
  3. Under “How you sign in to Google,” select Turn on 2-Step Verification.
  4. Follow the on-screen steps.
  5. Go to your 2-Step Verification settings for your Google Account.
  6. Tap Set up authenticator. On some devices, tap Get Started.
  7. Follow the on-screen steps.

Steps 1 to 4 are from Google’s page for a computer, and steps 5 to 7 from its page for Android phones and tablets. Google’s page also says: “Although any form of 2-Step Verification adds account security, verification codes sent by texts or calls can be vulnerable to phone number-based hacks.”

Backup

Save your backup codes

Google says: “If you lose your phone, you can use a backup code for the second step. You can print or download a set of 8-digit backup codes to keep in a safe place.” And: “Do not give out your backup codes to anyone.” If you ever lose the phone, see our guide on what to do if you lose your phone.

Source

Source

Google Account Help: Turn on 2-Step Verification (opens in a new tab) and Get verification codes with an authenticator app (Google Account Help) (opens in a new tab). Read on 29 October 2026.

Our turn

Tested by MELKEM

Tested by MELKEM on : worked first time.

Tested means we set up MELKEM Authenticator on that service and it worked. It doesn’t mean the service endorses MELKEM.

We used MELKEM Authenticator, one example of an authenticator app, to test these steps.

Ask MELKEM