Installing Google Authenticator does not finish setting up two-factor authentication. You still need to connect each account and confirm a generated code with the service you want to protect. Start with the app, add your accounts using a QR code or setup key, then save backup access before you need it.
Start with the app and choose how to store your codes
On Android, open Google’s Google Authenticator listing in Google Play and tap Install. Google Play determines whether your device is eligible.
On iPhone or iPad, download Google Authenticator from Google’s App Store listing. It requires iOS 16.0 or later on iPhone, or iPadOS 16.0 or later on iPad.
For synchronized storage, sign in to your Google Account inside Authenticator. Saved codes synchronize across devices signed in to that account.
For device-only storage, select Use without an account instead. Choosing where to store codes and enrolling an account for protection are separate actions.
Connect the account you want to protect
For a Google Account, open myaccount.google.com and go to Security & sign-in > How you sign in to Google > Turn on 2-Step Verification.
Complete the enrollment prompts.
In your Google Account’s 2-Step Verification settings, select Set up authenticator. If Android displays Get Started as the starting control, select it.
Follow the prompts to display the setup code.
For another service, open its authenticator enrollment screen. Each service has its own menus and supplies the QR code or setup key.
With the service’s QR code displayed, open Google Authenticator and tap + > Scan a QR code.
Scan the service’s QR code.
Enter the generated Authenticator code back into the service to finish enrollment. An entry appearing in the app does not complete setup on its own.
If your Google Account already has a trusted passkey or hardware security key, you can speed up Google’s trust in Authenticator at myaccount.google.com/security.
Select Google Authenticator > Approve. If Approve does not appear, the account has no trusted passkey or security key.
Authenticate with your trusted passkey or security key. Without approval, a new authentication factor can take up to seven days to become available.
If scanning fails, enter the service’s setup key manually using the steps below.
Use a setup key when the QR code is on the same phone
A QR code displayed on the same phone you are using for Authenticator is a reason to use manual entry.
Get the secret key from the service’s authenticator enrollment screen.
In Google Authenticator, tap + > Enter a setup key.
Enter an account name that identifies the service and account.
Supply the secret key from the service.
Select Time Based when the service requires it.
Tap Add.
Enter the generated code back into the service to complete enrollment.
Save backup access before you need it
For your Google Account, go to Security & sign-in > How you sign in to Google > 2-Step Verification > Backup codes > Continue > Get backup codes.
Save the codes using Download Codes or Print codes. Google does not allow backup-code downloads under Advanced Protection.
To use a backup code at Google sign-in, select Try another way > Enter one of your 8-digit backup codes.
For other services, use their own backup or account-recovery options.
Protect access to the app
Privacy Screen protects access to Authenticator with device authentication.
Open Menu in Google Authenticator.
Go to Settings > Privacy Screen.
Enable Privacy Screen.
Complete the device authentication prompt.
Move your codes to another phone
For synchronized codes, sign in to the same Google Account inside Authenticator on the new device. Your saved codes synchronize automatically.
A manual transfer requires the old phone and an updated Authenticator app. On the old device, open Menu > Transfer codes > Export codes on Android, or Menu > Transfer accounts > Export accounts on iPhone or iPad.
Unlock the old device when prompted.
Select the entries you want to transfer.
Tap Next to display the export QR code or codes.
On the new device, install Authenticator, tap Get Started and sign in to your Google Account.
Then go to Menu > Transfer codes > Import codes on Android, or Menu > Transfer accounts > Import accounts on iPhone or iPad.
Scan every export QR code shown on the old phone.
To keep the transferred codes on the new phone only, tap your profile picture and select Use Authenticator without an account. This removes the codes from your Google Accounts and stores them on the device.
If synchronization or manual transfer fails, use each service’s backup or account-recovery process to regain access, then replace that service’s authenticator enrollment.
Correct the phone’s clock if codes are rejected
On a Pixel phone, open Settings > System > Date & time. The path differs on other Android manufacturers’ phones.
Enable Set time automatically.
On iPhone or iPad, open Settings > General > Date & Time.
Enable Set Time Automatically. Carrier, Screen Time, or device-management restrictions can disable this control.
For automatic time-zone selection on iPhone or iPad, open Settings > Privacy & Security > Location Services > System Services.
Enable Setting Time Zone.
Authenticator uses your phone’s clock, so make time corrections in the phone’s settings. On Android, Google removed the old in-app time correction starting with Authenticator version 7.0.
Frequently Asked Questions
How do I switch to device-only storage after setup?
Tap your profile picture and select Use Authenticator without an account. Switching removes the cloud copies of your codes.
Does deleting an entry or uninstalling Authenticator turn off two-factor authentication?
No. Neither action changes the protected service’s authentication requirements. Preserve working recovery access first. Deleting a synchronized entry also deletes it from other devices using that synchronization.
Can I use Google Authenticator with a work or school Google Account?
Yes, when your organization permits it. A policy requiring only security keys or passkeys prevents an authenticator app from serving as the required second step.
Can I add another Google Account for storing Authenticator codes?
Yes. Tap your profile picture and select Add another account. Select the account or sign in to it. When asked to start saving codes to that account, tap Continue on Android or Allow on iPhone or iPad.