How to Set Up 2-Step Verification on Gmail (7 Easy Steps)

A password alone is not enough to protect your inbox. 2-Step Verification adds a second check, such as a code on your phone, so a stolen password cannot be used on its own. Setting it up takes about five minutes. Follow these seven steps on a computer, and keep your phone nearby.

1. Open Your Google Account Security Settings

myaccount.google.com1Open SecuritysettingsFind 2-StepVerificationSecurityHow you sign in to Google2-Step VerificationOffPasswordLast changed
Step 1: select 2-Step Verification under How you sign in.

Go to myaccount.google.com and sign in. Select Security from the menu, then scroll to the section called How you sign in to Google. Look for 2-Step Verification. If it says Off, you are ready to begin. Menu labels change from time to time, so look for the closest match.

2. Click Get Started

myaccount.google.com2Click Get startedConfirm yourpassword if askedProtect your accountAdd a second check when you sign inGet started
Step 2: click Get started and confirm your password if asked.

Select 2-Step Verification, then click Get started. Google may ask you to confirm your password again. This is normal, and it makes sure no one else can change these settings if you left your account open.

3. Add Your Phone Number

myaccount.google.com3Add your phonenumberText or phone callAdd a phone number+1 555 010 0123Text messagePhone callNext
Step 3: enter your mobile number and choose how to get codes.

Enter the mobile number you want to use and choose how to receive codes, by text message or phone call. Use a number you will keep for a long time. Click Next. Google will send a verification code to that number straight away.

4. Enter the Verification Code

4Enter the codeType it on your computerMessagesGoogleYour verification codeis 482916MomSee you tonight
Step 4: read the six-digit code from your text message.

Open the message on your phone, type the six-digit code into the box on your computer, and click Next. If the code does not arrive within a minute, choose Resend. Codes expire quickly, so enter it right away.

5. Turn On 2-Step Verification

myaccount.google.com5Click Turn onThis finishes thebasic setupIt workedTurn on 2-Step Verification?Turn on
Step 5: confirm by clicking Turn on.

After the code is accepted, Google shows a confirmation screen. Click Turn on to finish. From now on, signing in on a new device will need both your password and a second check, such as a code or a prompt on your phone.

6. Save Your Backup Codes

6Save backup codesEach code works only onceBackup codesUse one if you lose your phone0000 00000000 00000000 00000000 0000DownloadPrint
Step 6: download or print your backup codes and store them safely.

Backup codes let you sign in if you lose your phone. In the 2-Step Verification settings, choose Backup codes, then click Get backup codes. Download or print the list and store it somewhere safe, away from your computer. Each code works only once.

7. Add a Second Method

7Add an authenticatorA second method keeps you safeAuthenticator appScan the QR codeCode shown in your app482 916Next
Step 7: scan the QR code and enter the code your app shows.

Do not rely on one phone alone. Add an authenticator app, a passkey or a security key as another option. In Google Authenticator, scan the QR code shown on your screen, then enter the six-digit code the app displays. Having two methods means a lost phone will not lock you out.

Keep Your Account Protected

Update your recovery phone number and email whenever they change, and never share verification codes with anyone. If a code stops working, see our guide on Gmail verification code not working. If you are locked out, read our Gmail password reset guide.

How to Sign Out of Gmail on All Devices (Step by Step)

Lost your phone, used a shared computer, or noticed something suspicious? Signing out of Gmail everywhere is the fastest way to protect your inbox. You can do it from a computer or from your phone, and it takes only a couple of minutes. This guide covers every method, plus the follow-up steps that keep your account safe.

1. Scroll to Last Account Activity

mail.google.com1Scroll to thebottomFind Last accountactivitySearch mailLast account activity: 5 minutes agoDetails
Step 1: find the Details link at the bottom right of your inbox.

Open Gmail on a computer and scroll to the very bottom of your inbox. In the lower right corner you will see a line that says Last account activity, followed by a Details link. This footer shows when your account was last used, which helps you spot unfamiliar sessions.

2. Sign Out All Other Web Sessions

mail.google.com2Sign out all otherweb sessionsKeeps this onesigned inActivity informationAccess typeTimeBrowser (Chrome) – this oneNowBrowser (Safari)2 hours agoMobile appYesterdaySign out all other web sessions
Step 2: click Sign out all other web sessions.

Click Details. A window opens listing recent sign-ins with the browser and time. Choose Sign out all other web sessions. This closes Gmail on every other browser and computer while keeping you signed in on the one you are using now.

3. Open Your Google Account Security Page

myaccount.google.com3Open the accountsecurity pageFind Your devicesSecurityYour devices3 devices signed inManage all devicesHow you sign inPassword and 2-Step Verification
Step 3: open Security, then Manage all devices.

For a fuller sweep, go to myaccount.google.com and select Security. Scroll to Your devices and choose Manage all devices. This lists the phones, tablets and computers that have recently used your account, including ones you may have forgotten about.

4. Sign Out of a Specific Device

myaccount.google.com4Sign out of adeviceRemove any youdo not recognizeYour devicesWindows laptopThis deviceiPhoneActive 2 days agoUnknown tabletActive 3 weeks agoSign out
Step 4: select Sign out on any device you do not recognize.

Click a device to see more details, such as when it was last active. If you do not recognize it, or you no longer use it, select Sign out and confirm. Repeat this for every device you want to remove. Signing out an old device does not delete any emails.

5. Open Your Account From the Phone App

5Use your phoneProfile picture, then Manage accountYYyou@gmail.comManage your Google AccountAdd another account
Step 5: tap Manage your Google Account in the Gmail app.

On a phone, open the Gmail app and tap your profile picture. Choose Manage your Google Account. A page opens with your account settings. This is the quickest route if you do not have a computer nearby.

6. Manage All Devices on Your Phone

6Open Your devicesSecurity tab, then Manage all devicesGoogle AccountHomeDataSecurityYour devices3 devices signed inManage all devicesHow you sign inPassword, 2-Step
Step 6: open Manage all devices and tap any device to sign it out.

Swipe the top tabs to Security, scroll to Your devices, and tap Manage all devices. Tap any device you want to remove and choose Sign out. The steps match the computer version, though button names vary slightly by app version.

7. Change Your Password and Turn On 2-Step Verification

7Change your passwordThen switch on 2-Step VerificationSecurity2-StepVerificationPasswordTap to change itRecovery phoneAdded
Step 7: choose a new, unique password and keep 2-Step Verification on.

If you lost a device or saw activity you do not recognize, change your password straight away. Open Security, tap Password, and choose a new, unique one. Then turn on 2-Step Verification so a stolen password alone is not enough. A password change may also sign out other sessions.

Stay Protected

Check your device list every few months and remove anything unfamiliar. Avoid signing in on a shared computer without a private window, and always sign out when you finish. If you cannot get back in after a reset, see our guides on Gmail login not working and Gmail password reset.