Setting up Google Authenticator on your phone requires only a few steps and about 10 minutes. It has become the standard way to use 2-factor authentication (2FA) to secure your online accounts, and we’re going to walk step-by-step through the setup process.
In this Google Authenticator setup tutorial, you have the choice of either watching the video and following along…
…or scrolling through the written instructions step by step.
IMPORTANT NOTICE!
Google Authenticator adds protection beyond a password, but your phone security and recovery plan matter. Turn on Privacy Screen and keep a way back into your accounts if you lose your phone. Our guide to Google Authenticator security and alternatives explains the settings and other free options.
In 10 minutes or less, you will install and be properly using Google Authenticator on your mobile phone.
Quick setup: Install Google Authenticator, open the security settings of the account you want to protect, and choose its authenticator-app option. Scan that service’s QR code or enter its setup key, then return to the service to confirm the code from the app. Repeat this for each account you want to secure.
Jump to:
Getting Started with Google Authenticator
Getting started with Google Authenticator is a straightforward process that requires just a few simple steps. First, download and install the Google Authenticator app on your mobile device. The app is available for both Android and iOS devices, making it accessible no matter which platform you use.
You will have the option to sign into your Google account when you open the authenticator app. This is not required.
Signing in lets you sync your saved entries across devices. That makes recovery easier, but it also means protecting the Google account that holds them. If you prefer to keep entries on your phone, choose “Use without an account” and plan a separate backup. The choice is yours.
Where do I find my QR code or setup key?
Get it from the website or app you want to protect. Sign in there, open its security settings, and look for two-factor authentication, two-step verification or an authenticator-app option. Google Authenticator does not issue one universal key for all your accounts. Signing into Google inside the app is for syncing entries; it does not enroll your Facebook, email or other accounts for you.
Google Authenticator does not issue one universal key for all your accounts.
If you are doing everything on one phone, look for a manual setup option beside the QR code. The service may call it a setup key, secret key or “Can’t scan?” option. Copy that secret into Authenticator’s “Your key” field. Never use a sample key from a tutorial to protect a real account.
Once installed, open the app and click on the “+” button to add a new account.
You will be prompted to either scan a QR code or enter a secret key manually. If you choose to scan a QR code, ensure your device’s camera is enabled and pointed at the QR code displayed on your computer screen. This method is quick and minimizes the risk of errors.
If you prefer to enter a secret key manually, make sure to type the key accurately to avoid any setup issues. This secret key is crucial for generating the correct Google Authenticator codes for your accounts. See below for a more detailed explanation with visuals.
Google Authenticator Setup (Video Tutorial)
If you prefer to see this process in action, the following video on the All Things Secured YouTube channel is part of our Tech Tips Tuesday segment where we cover important changes you should start making in your online security.
Give it a quick watch:
Be sure to subscribe to the All Things Secured YouTube channel!
How to Use Google Authenticator to Secure Online Accounts
Time needed: 10 minutes
In order to use Google Authenticator as a form of 2-factor authentication, take note of the following steps as a google authenticator key example. Multi-factor authentication is an essential feature for securing accounts and plays a crucial role in establishing robust security measures.
- Download the Authenticator App
As we mentioned above, Google Authenticator is available on both the iOS App Store as well as the Google Play store for your Android device. It’s free to download and use, so there’s no need to pay any subscription fee. I recommend you download the app on your phone instead of a tablet, since you’ll need to have the device always with you when a code is required.
- Locate 2-Factor Authentication Settings
Within the security settings of many online accounts, you’ll find an option for 2-factor authentication (2FA). Most major social platforms (Facebook, Instagram, Twitter), email providers and investment accounts will offer 2FA, but not all of them do. In the example here, you’ll see the 2-Factor Authentication settings from within Facebook.
- Scan the QR Code or Enter Code Manually
When you set up Google Authenticator for 2-factor authentication, the account security settings will either display a QR code or a setup key made up of letters and numbers (or both).
Tap the “+” button in the authenticator app and choose “Scan a QR code”. If you only have one device, you can manually enter your setup key. Choose “Enter a setup key,” use a recognizable account name, and put the service’s secret in “Your key.” For the usual time-based setup, leave the type set to time-based unless the service tells you otherwise. This is the service’s enrollment key, not your password or a code from a search result.
- Confirm 2FA Code
After you scan the QR code or add the setup key, you’ll see the new account on the app’s home screen. In the account settings where you’re attempting to set up 2-factor authentication, click “Next” or “Continue” where you’ll usually be asked to enter the current six-digit code from the app. Finish this confirmation in the service’s settings; adding an entry to Authenticator alone does not enable 2FA on the account.
- Use the Google Authenticator 6-digit code to Sign In
At this point, your 2-factor authentication has been configured and the app has been set up properly. Depending on your settings, you may be required to enter this 6-digit code every time you log in, every time you set up a new device or even just once every set period of days/weeks.
Before you finish: Save the recovery codes supplied by the service and check that you have another way to sign in. Your Authenticator setup key, the changing code in the app and the service’s recovery codes serve different purposes.
Managing Your Authenticator App Codes
Managing your authenticator codes is an essential part of using Google Authenticator effectively. Open the app to edit, delete or reorder entries using the gestures below.
To edit a code, simply swipe left on the code and click on the edit option. This lets you change the username label or the Google account where the entry is saved.
To delete a code, swipe right on the code and click on the delete option. BE CAREFUL! If the entry is synced, deleting it also removes it from your other synced devices. Deleting an entry does not turn off 2FA at the service, so make sure you can still sign in before removing it. This is useful if you no longer need the code for a particular account. If you want to reorder your codes for better organization, touch and hold on a code and drag it to the desired location.
Additionally, you can use the search bar at the top of the screen to quickly find a specific code, making it easier to manage multiple accounts.
Troubleshooting and Recovery
Troubleshooting and recovery are essential parts of using Google Authenticator, especially if you encounter any issues. Before your phone is lost or stolen, choose how you will keep access to your codes. You can transfer entries while you still have your old phone, or sync them with your Google account:
- Backup Export: You can export your entries as QR codes to transfer Google Authenticator codes safely to another device. On your old phone, open the menu, choose “Transfer accounts,” then “Export accounts.” Unlock the device, select the accounts and continue. On the new phone, choose “Transfer accounts,” then “Import accounts,” and scan each QR code. There may be more than one. Treat exported QR codes like passwords: anyone with a copy may be able to generate your sign-in codes. If you keep a backup copy, protect it from access by anyone else.
- Google Account Backup: You can also opt to connect your app directly to your Google account (the same one you use for Gmail, YouTube, etc.). This is simple and easy, but you are trusting that account with your saved authenticator entries. Google encrypts synced data in transit and at rest. Protect the Google account with a separate sign-in option, such as a passkey or security key, so losing this phone does not also lock you out of your synced entries. Check the selected account and cloud status on the home screen.
In the example above, the app is NOT backing up to the Google cloud.
To restore synced entries, open Google Authenticator on the new device and sign in to the same Google account you used for sync. Your saved entries should appear automatically. If they are missing, check that you selected the right Google account. Entries stored only on a lost phone will not appear just because you sign in.
Lost your phone without a backup? An export needs access to the old device. If your entries were not synced and you have no saved setup key or other copy, you will need each service’s recovery process. Try a previously saved recovery code or another sign-in method, then set up Authenticator again after you regain access. Google cannot recover the secrets for an unrelated service just because you use its authenticator app.
If a code is not working, check that you selected the right service and account, then try a fresh code before it expires. You can also restart the app and check that your phone’s date and time are set automatically. Time discrepancies can cause codes to be invalid. If setup is still in progress, check the key you entered or re-scan the QR code shown by the service. Do not delete a working entry or reset 2FA until you know you have another way to sign in.
Advanced Features and Customization
Google Authenticator offers several advanced features and customization options to enhance your security and user experience. One of the standout features is the ability to generate codes without an internet connection or mobile service. This is particularly useful if you need to access your accounts in areas with limited or no internet connectivity.
Another useful setting is your phone’s automatic date and time. Google Authenticator no longer has an in-app time correction setting in version 7.0 and later; it uses the device’s time instead. For easier organization, give each entry a recognizable account label and drag entries into the order you prefer. The issuer is the service associated with an entry, not a setting for choosing your own logo or colors.
By leveraging these advanced features and customization options, you can enhance both the security and usability of your Google Authenticator app.
Pro Tips for Using 2FA Authenticator Apps
While the app itself is very simple, there are a few pro tips I’ve learned from using the app for the past couple of years.
- App Security: Turn on Privacy Screen under the app’s menu, then Settings, then Privacy Screen. On iPhone and iPad, it requires Face ID or Touch ID. On Android, the verification can use your PIN, pattern or biometrics. This extra protection is recommended to use, but it does not make an insecure phone safe. Keep your device passcode private and use a strong screen lock.
- Backup Codes are Important: Scanning the QR code is by far the most convenient way to set up Google Authenticator. However, it’s important to keep the manual setup key in an extremely safe place if you intend to use it as a backup. That reusable key is different from the single-use backup codes a service gives you for account recovery. Save those recovery codes too, somewhere you can reach without this phone. They could save you a ton of headache in the future!
- Use Multiple 2FA Options: For most online accounts, you’re not restricted to just one form of 2-factor authentication. For example, you could set up Facebook with both the Google Authenticator as well as with a 2FA security key. Either could be used to verify your account and act as a backup for each other. I use and recommend Yubikey.
- Tap to Copy the Code: Usually, 6 digits is pretty easy to remember, but not always. If you’re logging on to an account from your phone and it requires you to open the authenticator app for a code, simply tap the appropriate code and it will be copied to your clipboard. Now you no longer have to remember it!
If you have any other tips to add here, I encourage you to share them in the comment section below!
Google Authenticator Frequently Asked Questions
There are quite a few questions that I get from people about using this app for 2-factor authentication. Let’s answer the most common ones here.
The setup key is the secret supplied in the 2-factor authentication settings of the online account you are trying to secure. The service can show it as a QR code to scan or as letters and numbers to enter manually. Its length varies; it is not always 32 digits. It is different from both your changing six-digit sign-in code and a single-use recovery code.
Yes, you can and it’s always good to create a backup of your codes. Simply use the same QR code or manual code provided by your online account to set up both devices at the same time and check to make sure that they provide the same 6-digit code for 2FA verification. You can also sync saved entries by signing into the same Google account on each device. Only use devices you own and secure.
To transfer codes, you can either export your Google Authenticator codes from the app via a QR code or you can sync your Google Authenticator codes to the cloud.
For the most part, yes. An authenticator app avoids the SIM-swap risk of SMS codes, but typed codes can still be phished. Passkeys and FIDO security keys offer stronger protection against phishing. Turn on Privacy Screen and keep a recovery method.
Yes! It is possible to migrate your codes to a new phone, either via export or through cloud sync. You can follow our guide to transfer Google Authenticator codes safely to see how it’s done.
Next Steps in Online Security
Congrats on setting up 2-factor authentication on your mobile device!
This is the first of many steps that I recommend you take to start taking control of your online security and privacy. I even have a helpful checklist you can download that will walk you through the most important changes you need to make.
So what’s next? Here are a few things to consider:
- Get Better Passwords: Not every online login allows for 2-factor authentication, so creating stronger passwords is incredibly important! You can check your current password strength using our password checker tool or you can browse our list of the best password manager apps.
- Update Your Privacy Settings: You may not realize all the information you’re giving away for free to anybody who is willing to dig a bit! One of the best things you can do is change the privacy settings on your Facebook account to make sure you’re only sharing your information with the people you want to see it.
- Start Using a 2FA Key: A physical security key used with FIDO authentication offers protection against phishing that a typed one-time code does not. To learn more about this, check out our 2FA security key setup tutorial.
- Monitor Your Identity: Did you know that you can get a free weekly credit report from each of the three national credit bureaus through AnnualCreditReport.com? Make sure there isn’t anything unusual. And if you know that your data has been exposed, you should get a credit monitoring service like Identity Guard. Think of it like a home alarm system for your identity.
