Google Two-Factor Authentication Help

Sign In to Your Google Account Security Settings

Open Google’s official website or app and choose your profile picture, then select the option to manage your Google Account. If you are signed out, use the sign-in option on the official site and enter your account email and password.

Open the Security section. Look for a heading about how you sign in to Google, then select 2-Step Verification. Google may ask you to confirm your password or complete another identity check before showing the controls.

Check the account name and email before making changes, especially on a shared phone or computer. If you cannot sign in, do not create a new account just to reach these settings. Start with the recovery steps in the final section below.

Turn On Google Two-Factor Authentication

Google calls its extra sign-in protection 2-Step Verification. People also search for it as Google two factor authentication or two factor authentication for Google Account. To begin Google two factor authentication setup, have your password and a trusted device available.

1. Open 2-Step Verification in your Google Account security settings.
2. Select the option to begin or turn on the feature.
3. Confirm your identity when Google asks.
4. Review the second-step choices currently offered for your account.
5. Select an available method and follow the instructions shown on screen.
6. Complete the test verification, then confirm that 2-Step Verification is on.

The choices can depend on the account, device, and security settings. They may include a prompt on a signed-in device, an authenticator code, a security key, or another method displayed by Google. Follow only the options shown in the official account controls.

After setup, a Google two factor authentication login normally requires your password and an approved second step. Never approve a prompt you did not initiate, and never give a Google two factor authentication code to someone who contacts you.

Use an Authentication App With Google

A Google two factor authentication app creates temporary codes on your device. To connect a compatible authenticator, open 2-Step Verification and look for the Authenticator option among the available second steps.

1. Select the option to set up or change an authenticator.
2. Follow Google’s instructions until a QR code or setup key appears.
3. Open your compatible authenticator app and choose its option to add an account.
4. Scan the QR code. If scanning is unavailable, choose manual entry and carefully enter the setup key shown by Google.
5. Enter the temporary code generated by the app into Google’s confirmation box.
6. Finish setup only after Google accepts the code.

During Google two factor authentication app setup, keep the setup key private. Treat it like a password because another person could use it to generate valid codes. Do not photograph or send the QR code.

Before replacing or erasing an old phone, connect and test the authenticator on the new device using the official transfer or account setup instructions available to you. Do not remove the working method until another sign-in method has been confirmed.

Manage Backup and Sign-In Methods

Return to 2-Step Verification whenever you need to review Google Account two factor authentication. The page lists the verification methods attached to the account and provides the controls currently available for adding, changing, or removing them.

• Add another method before removing one you still depend on.
• Update methods when you replace a phone, security key, or other trusted device.
• Remove devices or methods you no longer control.
• Test a new method before signing out everywhere.
• Review backup codes if Google offers them for your account.

Backup codes are single-use sign-in codes. Store them somewhere private and separate from the device you normally use. Do not leave them in an unlocked note, email them to yourself, or share them with anyone. If you generate a replacement set, previously generated codes may no longer work, so keep only the current set.

Having more than one verified method can prevent a lost phone from becoming a lockout. It does not weaken security if every method remains under your control.

Fix Missing or Rejected Verification Codes

If Google two factor authentication is not working, first select Try another way on the verification screen. A prompt, backup code, authenticator code, or another enrolled method may be available.

• For a missing prompt, make sure the trusted device is powered on, connected, signed in to the correct account, and able to receive notifications. Open the Google sign-in screen on that device if the notification did not appear.
• For a delayed message code, check the destination shown on screen, the device’s signal, and blocked or filtered messages. Avoid requesting many codes in quick succession. Use the newest code received because an earlier one may have expired.
• For a rejected authenticator code, confirm that you selected the correct account entry and typed the current code before it changed.
• Set the phone’s date, time, and time zone to update automatically. Incorrect device time can cause temporary authenticator codes to fail.
• If a prompt shows a sign-in you do not recognize, deny it and review the account’s security activity.

Do not repeatedly guess codes. Return to the sign-in screen and choose another verified method when possible. If you still control a signed-in device, use it to review your methods before signing out.

Recover an Account When Two-Factor Authentication Fails

Use Google two factor authentication recovery when you cannot provide the password or any available second step. Begin on Google’s official sign-in page. Enter the account email, continue, and select Forgot password or Try another way when the appropriate option appears.

Answer each question as accurately as possible. Use a familiar device, browser, and location if available. Enter the most recent password you remember rather than guessing unrelated passwords. If Google offers a verification method you cannot access, keep choosing the official option to try another method.

For Google Account two factor authentication recovery, provide only information requested by Google on its own recovery screens. No legitimate helper needs your password, authenticator setup key, backup code, or temporary verification code.

If the account belongs to an employer, school, or other organization, its administrator may control recovery options. Contact that organization through a contact method you already trust. For a personal account, continue through Google’s official account recovery process and follow the result shown on screen.