Google Authenticator generates six-digit codes that change about every 30 seconds. When an account asks for a code after your password, the app provides the second proof.
Does this affect you?
Use this for iPhone or Android when adding two-factor authentication to a Google Account or any service that supports authenticator apps.
Set it up for your Google Account
Protect your main Google Account first if you rely on Gmail or Android.
- Install Google Authenticator from the App Store or Google Play.
- Go to myaccount.google.com and sign in.
- Open Security.
- Under How you sign in to Google, choose 2-Step Verification and turn it on if needed.
- Find Authenticator app and choose Set up.
- Open Google Authenticator, tap the plus button, and scan the QR code shown by Google.
- Enter the current six-digit code from the app on the Google page to verify setup.
Add another account
Google Authenticator works with many services beyond Google.
- Open the security settings of the account you want to protect.
- Choose Two-Factor Authentication, 2-Step Verification, or authenticator app.
- When the service shows a QR code, open Google Authenticator and tap the plus button.
- Scan the QR code, or choose Enter a setup key and type the backup setup code.
- Enter the current six-digit code on the service’s setup page to confirm.
- Repeat for each account you want to protect.
More control
Save backup codes
Most services provide one-time backup codes when you enable 2FA. Store them outside your email, such as in a password manager or printed copy.
Check Authenticator sync
Newer Google Authenticator versions can sync codes to your Google Account. Tap the profile icon in the app to see whether backup is enabled. Without sync, moving phones requires transfer or backup codes.
Other apps are fine too
Microsoft Authenticator, Authy, and password managers with code support offer similar protection. Any reputable authenticator app is usually safer than SMS because it is not tied to your phone number.
Sources
- Google Account Help – Get verification codes with Google Authenticator
- Google Account Help – Turn on 2-Step Verification
- CISA – More than a password: multi-factor authentication