Google Authenticator App for Android Guide

Get Google Authenticator for Android

Open the Google Play Store on your Android phone and search for “Google Authenticator.” Confirm that the app name is Google Authenticator and that the listed developer is Google LLC. Avoid download buttons in ads, messages, or unofficial app stores.

Install the app from its Play Store listing, then open it. Android may ask for camera permission later so the app can scan a QR code. Camera access is not needed if you enter a setup key instead.

The Google Authenticator app for Android creates short-lived verification codes. It can generate them without cellular service or an internet connection after an account has been added. Protect the phone with a screen lock, and consider enabling Privacy Screen in the app’s settings.

Set Up an Account in the App

Start on the website or app for the account you want to protect. Sign in, open its security settings, and look for “Two-Step Verification,” “Two-Factor Authentication,” or “Authenticator app.” The exact wording varies by provider.

The provider will normally display a QR code and may also offer a setup key. Keep both private. Anyone who obtains this information may be able to generate the same verification codes.

1. In Google Authenticator, tap the option to add a code.
2. Choose “Scan a QR code” and point the phone’s camera at the QR code displayed on another trusted screen.
3. If scanning is not possible, choose “Enter a setup key.” Carefully type the account name and secret key supplied by the provider.
4. Return to the provider’s setup screen and enter the current code from Authenticator to confirm the connection.
5. Save any backup codes offered by the provider in a secure place separate from the phone.

Do not send the QR code, setup key, backup codes, or screenshots of them through email or messaging. A QR code should normally be scanned from a second screen, not shared with another person.

Use a Verification Code to Sign In

Enter your username and password on the account provider’s official sign-in screen. When it asks for an authenticator code, open Google Authenticator and find the entry matching that account and username.

Type the displayed code into the sign-in prompt before it changes. A timer beside the code shows how much time remains. If only a few seconds are left, wait for the next code rather than rushing.

Each account has its own code. When several entries have similar names, check the username or label carefully. Never give a current code to someone who contacts you. A legitimate sign-in uses the code only in the provider’s own app or sign-in page.

Transfer Codes to a New Android Phone

Keep the old phone available, unlocked, and unchanged until you confirm that every important account works on the new phone. Installing the app or copying ordinary phone data does not by itself guarantee that locally stored Authenticator entries will move.

If your Authenticator codes were synchronized with a Google Account, install the official app on the new phone and sign in inside Authenticator with that same Google Account. Check that the expected entries appear.

For a manual transfer, have both phones with you and update Authenticator on the old phone first:

1. Install and open Google Authenticator on the new phone.
2. On the old phone, open the app menu, choose “Transfer accounts,” and then “Export accounts.”
3. Unlock the old phone when prompted, select the accounts, and continue. The app will display one or more transfer QR codes.
4. On the new phone, open “Transfer accounts,” choose “Import accounts,” and scan every QR code shown on the old phone.
5. Confirm that the transferred entries appear, then test sign-in to important accounts.

Treat transfer QR codes like passwords. Do not photograph, save, print, or share them. Do not erase the old phone or delete its Authenticator entries until the new phone has been tested and you have another recovery method. If synced entries are deleted, that deletion may also affect other synchronized devices.

Restore Access When Codes Do Not Work

If a code is rejected, wait for a fresh code and enter it promptly. Confirm that you selected the correct account entry and typed every digit correctly. A code cannot be reused after it expires.

Authenticator depends on the phone’s clock. Open Android’s date and time settings and enable automatic date, time, and time zone. Restart the app and try a newly generated code. Current versions use Android’s time settings rather than a separate time-correction control inside Authenticator.

If codes seem to have disappeared, tap the profile icon in Authenticator. Check whether you are signed in with the Google Account that previously stored them, or whether the entries were saved under another Google Account or in “Use without an account” mode.

If the phone is lost, use a synchronized copy on another device if available. Otherwise, use a backup code, passkey, security key, trusted signed-in device, or another recovery method previously registered with the account provider. Secure a lost device through Android’s official device-management tools when possible.

Without a synchronized copy or backup method, follow each account provider’s recovery process. Google Authenticator cannot bypass that process or prove ownership by itself. For a work or school account, contact the organization’s administrator.

Get Official Help

For instructions about the google authenticator app android users should open Google Account Help and search for “Get verification codes with Google Authenticator.” Choose the Android version of the article.

For a locked Google Account, use the official Google Account recovery flow linked from Google Account Help. Follow the prompts on a familiar device and provide only information you know. Google does not publish a guaranteed recovery result or completion time for every case.

If Authenticator works but another company rejects its code, use that company’s official Help or Support section. Look for its account recovery or two-step verification article. Only that account provider can reset or change its sign-in requirements.