Enable 2-Step Verification
- Open myaccount.google.com and sign in.
- Go to Security & sign-in (in the left menu, or under Security).
- Under How you sign in to Google, choose 2-Step Verification / Turn on 2-Step Verification.
- Re-enter your password if asked, then follow the prompts.
Add Google to Sign In
For verification codes on iPhone, we recommend Sign In, our authenticator app. It generates codes on your device, so you can get a code even when you’re offline.
- Return to your Google Account’s 2-Step Verification settings. Find Authenticator and choose Set up authenticator. Sign in again if asked.
- Keep Google’s setup page open on another screen. In Sign In, tap Add → Scan QR Code and scan the setup QR code.
- Review the account details in Sign In, then tap Add Account.
- Return to Google, enter the current six-digit code for that account from Sign In, and finish the confirmation steps.
Setting up on one iPhone? If Google offers a setup key, copy it and choose Add → Enter Setup Key in Sign In. Enter Google as the service, your account email, and the key, then tap Add Account. Return to Google to confirm with the generated code.
Pick a second step
Sign In provides the authenticator-code option. Google also offers other ways to verify a sign-in; a passkey or security key provides stronger protection against phishing.
| Method | What to know |
|---|---|
| Security key / passkey | Strongest protection against phishing. Use a physical key or a passkey unlocked with your device’s screen lock, fingerprint, or face. |
| Google Prompt | Approve a sign-in on a signed-in phone. Easy and safer than SMS. Only approve sign-ins you started. |
| Authenticator app | Enter the code shown for your Google account in Sign In. Code generation works offline. |
| Text / call | Less secure because of risks such as SIM swapping. Prefer another method as your main option. |
Google recommends prompts over SMS if you’re not using a passkey.
After it’s on (don’t skip)
- Save backup codes. On the same 2-Step Verification page, choose Backup codes, generate them, and store them somewhere safe—not only on your phone.
- Add a second method. For example, use an authenticator and a prompt. Keep a backup you can access if your phone is lost; two methods on the same phone may both become unavailable.
- Check older apps. If an older app stops working after you enable 2FA, you may need an App Password from your Google Account security settings, if available for your account.
Work / school accounts
If it’s a Google Workspace account and the option is missing or blocked, your admin must allow 2-Step Verification first. You still turn it on at myaccount.google.com, not in the Admin console.
Quick tips
- If a code is rejected, wait for a fresh code and check that you selected the right Google account in Sign In.
- Keep backup codes printed in a safe place or in a password manager you can access without your phone.
- You can change or add methods anytime on the same 2-Step Verification page.