How to Set Up Two-Factor Authentication (2FA) in Email

Detailed step-by-step (with helpful tips)

1. Visit https://myaccount.google.com/security → sign in. Under "How you sign in to Google" click 2-Step Verification → Get started.

2. Set a phone (if asked) — Google may request a phone number to send prompts or to verify setup. Prefer Google Prompt or an authenticator app instead of SMS when possible.

3. Enable Google Prompt (recommended): when prompted, select your device and tap Yes on the push notification to confirm. Google Prompt protects better against SIM-swap attacks than SMS.

4. Set up an Authenticator app (if you prefer OTP codes):

   • Install Google Authenticator or Authy on your phone.

   • On the 2-Step Verification page choose Authenticator app → show QR code.

   • In the app tap + → Scan QR code (or enter the code manually).

   • Enter the 6-digit code from the app into Google to confirm.

   • Tip: Authenticator apps now may offer cloud sync (if you enable it) so you can recover codes if you lose your phone. 

5. Add backup methods immediately:

   • Backup codes: Generate and save them (print or store securely). Each code works once — use if you lose your phone.

   • Add a secondary phone or another authenticator app on a second device.

   • Register a security key if available.

6. App passwords (if needed): If you use older apps or mail clients that don’t support 2FA, create an App password from your Google Account > Security > App passwords (after 2FA is on). Use each app-password once per app/device.

7. Verify and test: Sign out and sign back in to Gmail to confirm you’re prompted correctly (push, code, or key).

8. Keep recovery info up to date: Check your recovery phone and email under Account > Personal info & Privacy. If you lose access, Google’s recovery process can take time.