How to Secure Your Google Account With 2-Step Verification

Overview

A comprehensive guide to locking down your Google account with security keys, authenticator apps, and recovery options.

Quick takeaway: Start with standard verified settings, make one controlled adjustment at a time, and confirm the result before proceeding.

1. Run the Google Security Checkup
Visit myaccount.google.com/security-checkup to get automated recommendations for passwords, 2FA, and third-party app permissions.
2. Turn on 2-Step Verification (2FA)
Under the 'How you sign in to Google' section, click 2-Step Verification and follow the prompts to activate prompts on your phone.
3. Set up Google Authenticator or Security Key
App-based authenticators and hardware FIDO keys offer greater security against SIM-swapping compared to plain SMS text verification.
4. Download and store backup codes
Generate a set of 10 emergency 8-digit backup codes. Print or record them in a secure physical location away from your primary computer.

Applying multiple configuration changes at once without noting what was changed.
Entering credentials or authorizing permissions without verifying the authentic destination.
Ignoring official software updates that patch active security vulnerabilities.
Relying on unverified third-party software for functions already provided natively.

What if I lose my phone with 2FA turned on?

You can use your printed emergency backup codes or access your account from a previously trusted computer to sign in and update your number.

Do third-party apps connected to Google pose risks?

Yes. Review 'Third-party apps with account access' regularly and revoke access from services you no longer use.