How to Set Up 2FA on Google Account

Enable 2-Step Verification

1. Open your Google Account.
2. Open Security & sign-in.
3. Under How you sign in to Google, choose 2-Step Verification.
4. Follow the on-screen setup.
5. Add the strongest practical method available, such as a passkey, security key or Authenticator.

Add recovery

• Generate backup codes.
• Keep a current recovery phone and email.
• Keep another trusted device signed in where appropriate.
• Review Google prompts and registered security keys.

Test

Use a private browser or second device to complete a test sign-in. Never remove the old method until the new method and a backup route both work.

Protect prompts and codes

Deny unexpected sign-in prompts. Google support should not need you to read a one-time code to a caller. Check the location and device shown before approving.

Register a strong method and a separate fallback

Google 2-Step Verification supports several methods, but the setup is resilient only when the loss of one phone does not remove all of them.

• Add a passkey, security key or Authenticator where suitable rather than relying only on SMS.
• Generate backup codes and store them outside the phone.
• Review Google prompts, recovery email, trusted devices and registered keys.
• Complete a test sign-in in a private browser before removing an older method.

Deny unexpected prompts and inspect the device and location shown. A caller claiming to be Google support does not need you to read out a verification code.