Turn on 2-Step Verification

With 2-Step Verification, or two-factor authentication, you can add an extra layer of security to your account in case your password is stolen.

After you set up 2-Step Verification, you can sign in to your account with:

• Your password and a second step
• Your passkey

Tips:

• By default, when you create a passkey you opt in to a passkey-first, password-less sign in experience.
• If you always want to use your password first, you can change this default preference in your account settings.

Allow 2-Step Verification

1. Open your Google Account.
2. In the navigation panel, select Security.
3. Under “How you sign in to Google,” select Turn on 2-Step Verification.
4. Follow the on-screen steps.

Tip: If you use an account through your work, school, or other group, these steps might not work. If you can’t set up 2-Step Verification, contact your administrator for help.

Turn on 2-Step Verification

Verify it’s you with a second step

Important:

• When you sign in with a passkey, it bypasses your second authentication step, since it verifies that you have possession of your device. Unlike passwords, passkeys only exist on your devices. They can’t be written down or accidentally given to a bad actor.

After you turn on 2-Step Verification, you need to complete a second step to verify it’s you if you choose to sign in with a password. To help protect your account, Google will ask you to complete a specific second step.

Computer AndroidiPhone & iPad

Use Google prompts

If you choose not to sign in with a passkey, we recommend you use Google prompts as your second step. It's easier to tap a prompt than enter a verification code. Prompts can also help protect against SIM swap and other phone number-based hacks.

You’ll receive Google prompts as push notifications on:

• Android phones that are signed in to your Google Account.
• iPhones with the Gmail app , the Google Photos app , the YouTube app , or the Google app signed in to your Google Account.

Based on the device and location info in the notification, you can:

• Allow the sign-in if you requested it by tapping Yes.
• Block the sign-in if you didn’t request it by tapping No.

For added security, Google may ask you for your PIN or other confirmation.

Use other verification methods

You can set up other verification methods in case you:

• Want increased protection against phishing
• Can’t get Google prompts
• Lose your phone

Use passkeys & hardware security keys to increase phishing protectionUse Google Authenticator or other verification code appsUse a verification code from a text message or callUse backup codes

Skip a second step on trusted devices

If you don't want to provide a second verification step each time you sign in on your computer or phone, check the box next to "Don't ask again on this computer" or "Don't ask again on this device."Important: Only check this box on devices you regularly use and don't share with anyone else.