How to turn on 2-Step Verification for your Google account
Add a second check to your Google sign-in so a stolen password alone cannot open your Gmail, Play Store or backups. Steps for Android phones.
2-Step Verification means signing in needs your password plus a second proof, such as a prompt on your phone. It stops most account takeovers where only the password leaked. It takes a few minutes to set up. Menu names differ slightly on Samsung, Xiaomi, Vivo, Oppo, Realme and OnePlus phones.
Steps
- Open Security in your Google account. Open Settings, tap Google, then Manage your Google Account, then the Security tab. You can also open the Google app and tap your profile picture. Find the 2-Step Verification option.
- Start the setup. Tap 2-Step Verification, then Get started. Sign in again if asked. Google will offer a prompt on your phone as the default second step. Confirm the phone shown is yours.
- Add a backup method. Add a backup such as a phone number or backup codes. Download or write backup codes and keep them offline in a safe place. They help if you lose the phone.
- Prefer prompts or an authenticator over SMS. Where offered, choose a Google prompt, passkey or authenticator app rather than SMS codes. SMS codes can be taken by SIM swap fraud or read by a malicious app.
- Test and check devices. Sign out and in on a browser to check the prompt works. Then review devices and trusted browsers in the Security page and remove old ones. Keep recovery email and phone current.
Menu names differ a little between phone makers and Android versions. If you cannot find a setting, open Settings and use the search box.
Why it matters
Passwords leak in data breaches and are guessed or tricked out of people every day. With a second step, a criminal who has your password still cannot enter without your phone. It protects Gmail, which is the reset point for many of your other accounts, and your Play Store purchases.
Watch out for
- Never read a verification code to someone who calls you.
- A prompt you did not start means someone has your password, so change it at once.
- SMS codes can be seen on a locked screen, so hide sensitive content.
- Keep backup codes offline, not in a photo on the same phone.
How Safeavio helps
Safeavio's Scam check and Link check help you spot phishing messages that try to collect your code or password, and the password-exposure check shows only the date and a rough result. SIM-change alerts in anti-theft can warn you if your SIM changes. None replaces the second step itself.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions
Will I need a code every time I sign in?
Not on devices you mark as trusted. New devices and browsers will ask for the second step. That is the point, because it makes stolen passwords far less useful.
Which second step is the strongest?
A passkey or security key is strongest, then a Google prompt or authenticator app. SMS is better than nothing, but it can be intercepted, so use it as a backup.