A password alone is not enough to protect your inbox. 2-Step Verification adds a second check, such as a code on your phone, so a stolen password cannot be used on its own. Setting it up takes about five minutes. Follow these seven steps on a computer, and keep your phone nearby.
1. Open Your Google Account Security Settings
Go to myaccount.google.com and sign in. Select Security from the menu, then scroll to the section called How you sign in to Google. Look for 2-Step Verification. If it says Off, you are ready to begin. Menu labels change from time to time, so look for the closest match.
2. Click Get Started
Select 2-Step Verification, then click Get started. Google may ask you to confirm your password again. This is normal, and it makes sure no one else can change these settings if you left your account open.
3. Add Your Phone Number
Enter the mobile number you want to use and choose how to receive codes, by text message or phone call. Use a number you will keep for a long time. Click Next. Google will send a verification code to that number straight away.
4. Enter the Verification Code
Open the message on your phone, type the six-digit code into the box on your computer, and click Next. If the code does not arrive within a minute, choose Resend. Codes expire quickly, so enter it right away.
5. Turn On 2-Step Verification
After the code is accepted, Google shows a confirmation screen. Click Turn on to finish. From now on, signing in on a new device will need both your password and a second check, such as a code or a prompt on your phone.
6. Save Your Backup Codes
Backup codes let you sign in if you lose your phone. In the 2-Step Verification settings, choose Backup codes, then click Get backup codes. Download or print the list and store it somewhere safe, away from your computer. Each code works only once.
7. Add a Second Method
Do not rely on one phone alone. Add an authenticator app, a passkey or a security key as another option. In Google Authenticator, scan the QR code shown on your screen, then enter the six-digit code the app displays. Having two methods means a lost phone will not lock you out.
Keep Your Account Protected
Update your recovery phone number and email whenever they change, and never share verification codes with anyone. If a code stops working, see our guide on Gmail verification code not working. If you are locked out, read our Gmail password reset guide.