Before you start
- Your Google account password
- Your phone
Method 1 Turn on 2-Step Verification
-
Step 1: Open Security settings
Go to myaccount.google.com and select Security (or Security & sign-in). In the Gmail app: profile picture > Manage your Google Account > Security.
-
Step 2: Start setup
Click 2-Step Verification > Turn on 2-Step Verification and sign in again.
-
Step 3: Add a phone
Add your phone number for text or call codes as a backup option.
-
Step 4: Confirm
Follow the prompts until 2-Step Verification shows as On.
Method 2 Add stronger second steps
-
Step 1: Google prompts
On phones signed in to your account, you’ll get a “Is it you trying to sign in?” prompt. Tap Yes to approve.
-
Step 2: Authenticator app
Under Authenticator, click Set up authenticator and scan the QR code with Google Authenticator or another authenticator app.
-
Step 3: Passkeys and security keys
Under Passkeys and security keys, create a passkey on your phone or add a hardware security key. These are phishing-resistant.
Method 3 Save backup codes
-
Step 1: Get codes
In 2-Step Verification > Backup codes, click Get backup codes.
-
Step 2: Store them safely
Print them or save them in a password manager. Each code works once, and they let you in if you lose your phone.
Troubleshooting
I lost my phone
Use a backup code, another signed-in device, or a security key. Otherwise use account recovery at g.co/recover.
No prompt appears
Make sure the phone is online and signed in to the same Google account, or choose Try another way.
Frequently asked questions
Is SMS 2FA safe?
Better than nothing, but SIM-swap attacks exist. Google prompts, authenticator apps and passkeys are stronger.
Will I need a code every time?
No. On trusted devices, you can tick “Don’t ask again on this device”.
Summary
Turn on 2-Step Verification in myaccount.google.com > Security, add Google prompts, an authenticator app or a passkey, and save your backup codes.
