How to Enable 2FA on Google Account
Your Google account is the master key to Gmail, YouTube, Drive, Photos, and every site where you sign in with Google. 2-Step Verification with an authenticator app stops password-only attacks cold — and unlike SMS, TOTP codes can't be intercepted by SIM swapping.
Quick path: myaccount.google.com → Security → 2-Step Verification → Authenticator app
Step-by-step: 2FA setup on Google Account
- 1
Open Google Account security settings
Go to https://myaccount.google.com/security and sign in. Find the 'How you sign in to Google' section.
- 2
Turn on 2-Step Verification
Click '2-Step Verification' and follow the prompts. Google may ask you to confirm your password and add a phone number as the initial method.
- 3
Add an Authenticator app
Back on the 2-Step Verification page, scroll to 'Authenticator app' and click 'Set up authenticator'. Google displays a QR code.
- 4
Scan the QR code with 2FAA
Open 2FAA's authenticator and scan the QR code (or click 'Can't scan it?' to copy the setup key and paste it into 2FAA). A 6-digit Google code starts rotating every 30 seconds.
- 5
Verify with the current code
Enter the active code from 2FAA into Google and click 'Verify'. The authenticator is now linked to your account.
- 6
Download backup codes
On the 2-Step Verification page, open 'Backup codes' and generate them. Google gives you 10 eight-digit codes — each works once. Store them offline.
Generate Google Account 2FA codes with 2FAA
You don't need a separate authenticator app. 2FAA is a free, browser-based TOTP generator — your secret never leaves your device, and it works offline as a PWA. The same secret can be used in parallel with Google Authenticator or Authy if you prefer redundancy.
Frequently asked questions
Does Google 2FA cover Gmail, YouTube, and Drive?
Yes. Gmail, YouTube, Drive, Photos, Play, and every Google service share one Google account — enabling 2-Step Verification once protects all of them, plus any third-party site where you use 'Sign in with Google'.
Can I use 2FAA instead of the Google Authenticator app?
Yes. Google's 'Authenticator app' option follows the standard TOTP spec — 2FAA generates exactly the same codes as Google Authenticator, just in your browser without an app install.
Where do I find my Google backup codes?
myaccount.google.com/security → 2-Step Verification → 'Backup codes'. You can view remaining codes or generate a fresh set of 10 at any time (generating new codes invalidates the old ones).
What happens if I lose my authenticator?
Use a backup code to sign in, or any other second step you've kept (phone prompt, SMS). Then re-add a new authenticator from the 2-Step Verification page. If you lose every method, Google's account recovery can take days — set up backup codes now.
Should I use a passkey instead of 2FA on Google?
Passkeys are phishing-resistant and Google supports them well. Best practice: add both. The TOTP authenticator remains a reliable fallback on devices that can't use your passkey.