How to Set Up Two-Factor Authentication (2FA)

Add a second layer of security to your most important accounts. This one change stops most account takeovers cold.

3 min read · 6 steps · Checked March 2026

1. Step 1. What is two-factor authentication?

   Two-factor authentication (2FA) means you need two things to log in: your password AND a second code. Even if someone steals your password, they still can't get into your account without that second code. It's like a deadbolt in addition to a normal door lock.

   Quick Tip

   Enable 2FA on your email, bank, and social media accounts first — these are the most valuable to protect.

2. Step 2. Option 1: SMS (text message) codes

   The simplest option. When you log in, the site sends a 6-digit code to your phone by text message. You enter it to complete login. To set this up: go to the account's Security Settings, find "Two-Factor Authentication" or "Login Verification", choose "Text Message", and enter your phone number.

   Quick Tip

   SMS codes are convenient and much better than no 2FA — but if you can, use an authenticator app (see below) for even stronger protection.

3. Step 3. Option 2: Authenticator app (recommended)

   An authenticator app generates a fresh 6-digit code every 30 seconds without needing a mobile signal. Download Google Authenticator or Microsoft Authenticator (both free) from the App Store or Google Play. Then in your account's 2FA settings, choose "Authenticator App" — you'll be shown a QR code to scan with the app.

   Quick Tip

   Google Authenticator and Microsoft Authenticator both work on iPhone and Android. Many people find Microsoft Authenticator slightly easier as it includes cloud backup.

4. Step 4. Setting up 2FA on Gmail / Google

   Go to myaccount.google.com → Security → 2-Step VerificationGet Started. Choose your preferred method (Google prompt on your phone is the easiest). Follow the on-screen steps. Once set up, you'll get a prompt on your phone whenever someone tries to log into your Google account.

5. Step 5. Setting up 2FA on Facebook / Instagram

   Facebook: SettingsSecurity and LoginTwo-Factor AuthenticationEdit. Instagram: ProfileMenu () → SettingsSecurityTwo-Factor Authentication. Both support SMS codes or an authenticator app.

6. Step 6. Save your backup codes

   When you set up 2FA, most services give you a set of one-time backup codes. These let you get back into your account if you lose your phone. Download and print these — store them somewhere safe like a locked drawer. Do not save them on your phone.

   Warning

   If you lose your phone AND your backup codes, getting back into an account with 2FA can be very difficult. Always save backup codes.