How to Set Up Two-Factor Authentication on Gmail
Add an extra layer of protection to your Gmail account so that only you can sign in, even if someone steals your password.
4 min read · 5 steps · Checked May 2026
Step 1. Go to your Google Account settings
Open a web browser (Chrome, Edge, Safari, or Firefox) and go to myaccount.google.com. If you are not already signed in, enter your Gmail address and password. Once you are in, look for the section labeled "Security" in the left-hand menu and click it.
Quick Tip
If you cannot find myaccount.google.com, you can also click your profile picture in the top-right corner of Gmail and select "Manage your Google Account."
Step 2. Find the two-step verification setting
On the Security page, scroll down until you see a section called "How you sign in to Google." Look for the option that says "2-Step Verification" and click on it. You may be asked to enter your password again to confirm your identity — this is normal and expected.
Quick Tip
The page may look slightly different depending on whether you are using a phone or a computer, but the option name is the same.
Step 3. Choose how you want to receive your second step
Google will walk you through a short setup. The recommended option is "Google Prompt" — this sends a notification to your Android or iPhone. And you tap "Yes, it is me" to approve the sign-in. If you prefer, you can choose "Text message (SMS)" instead, which sends a six-digit code to your phone number. Enter your phone number, then tap "Send" to receive a test code.
Quick Tip
Google Prompt is the most convenient option if you have a smartphone. Text message codes work fine if you have any phone that can receive texts.
Step 4. Enter the confirmation code
If you chose text message, check your phone for a message from Google with a six-digit code. Type that code into the box on the screen and click "Next." If you chose Google Prompt, watch for a notification on your phone and tap "Yes." Google will confirm that the test worked.
Warning
Do not share this code with anyone, even someone claiming to be from Google. Google will never call you and ask for this code.
Step 5. Turn on two-step verification
After the test succeeds, Google will show you a confirmation screen. Click the blue button that says "Turn On" to activate two-step verification. From this point on, your Gmail account has that extra layer of protection.
Quick Tip
Consider printing your backup codes right away. On the same Security page, look for "Backup codes" under the 2-Step Verification section. These codes let you get into your account if you ever cannot access your phone.
Your Gmail password is the key to your email — and your email is often the key to everything else online, from your bank account to your social media. If someone gets hold of your password, two-factor authentication (2FA) stops them cold.
Two-factor authentication — sometimes called 2FA or two-step verification — means that logging in requires two things: something you know (your password) and something you have (usually your phone). Even if a scammer guesses or steals your password, they cannot get into your account without also having your phone.
Google offers several ways to confirm it is really you. The most convenient for most people is Google Prompt, which sends a tap-to-approve notification to your phone. If you do not have a smartphone, you can use a six-digit code texted to your phone number instead.
Setting this up takes about five to ten minutes. And you only have to do it once. After that, Gmail will remember your trusted devices so you are not asked to confirm every single time you log in from your own computer.
Here is what you will need before you start:
- Your Google account email address and password
- Your smartphone or a basic phone that can receive text messages
- A few minutes of uninterrupted time
Once 2FA is turned on, you will see a second prompt the next time you sign in on a new device or browser. On your personal computer at home, you can check the box that says "Trust this device" so you are not asked again on that machine.
If you ever lose your phone, Google provides backup codes — a set of one-time-use codes you can print out and keep somewhere safe, like a desk drawer. We will cover that in the steps below.
Taking this one step today can prevent a great deal of heartache later. Scammers often target email accounts because resetting passwords for other services — banks, shopping sites, medical portals — often goes through email. Protecting your Gmail protects much more than just your messages.
Official sources
- Google Help Center — support.google.com
- Android Help — support.google.com
- Google Account help — support.google.com
Still stuck?
A real person can walk you through it over the phone.
Get help from a person