What this helps with: Adding a second lock to your email and other important accounts, so a stolen password alone isn’t enough to get in.

How it works: When you sign in on a new device, you type your password and confirm it’s you, usually by tapping Yes on your phone or typing a short code. Most of the time, on your own phone, you won’t notice it at all.

You may also see it called two-factor authentication, 2-Step Verification, or MFA. They all mean the same thing.

For your Google Account (Gmail, Android)

Open your Google Account: on Android, open Settings, tap Google, then Manage your Google Account. On a computer, go to myaccount.google.com.
Tap Security (or Security & sign-in).
Under How you sign in to Google, tap 2-Step Verification, then Turn on.
Follow the steps on screen. Google will suggest Google prompts: a message on your phone that you tap Yes to approve.
Save backup codes. Google offers a list of one-time codes. Print them or write them down, and keep them somewhere safe at home.

For your Apple Account (iPhone)

Most Apple Accounts already have this turned on. To check:

Open Settings and tap your name at the top.
Tap Sign-In & Security.
Look for Two-Factor Authentication. If it says On, you’re done. If not, tap to turn it on and follow the steps.

For your bank and other accounts

Look in the account’s Settings or Security section for words like two-step, 2-step verification, or multi-factor. Turn it on there. Start with your email, because it’s used to reset your other passwords.

The one rule to remember

Never share a sign-in code with anyone. Not on the phone, not by text, not with someone who says they’re from Google, Apple, or your bank. Real companies won’t call to ask for it. If you get a code or a “Is this you?” prompt you didn’t ask for, tap No and don’t share it.

If something goes wrong

I didn’t get the code. Wait a minute and tap Resend. Make sure your phone has signal.
I got a new phone. Sign in on the new phone while you still have the old one, if you can. Your backup codes also work.
I lost my phone. Use one of your backup codes, or follow the account’s recovery steps. It may take a few days, on purpose, to keep your account safe.
I keep getting prompts I didn’t ask for. Tap No each time. Someone may know your password, so change it.

Official sources

Google: Turn on 2-Step Verification
Apple: Two-factor authentication for Apple Account
CISA: Turn On MFA

Last checked: Oct 15, 2026

This is general help, not personalized tech support. Your bank’s steps may be different; follow what its app or website shows you.

How to Turn On Two-Step Login