Skip to content
SurenoGet Sureno
Stay safe from scams · iPhone, Android or any account

Turn on two-step login

Two-step login (also called two-factor or multifactor) asks for a code or a tap on your phone as well as your password, so a stolen password is not enough.

About 5 minutes4 stepsChecked October 2026

The pictures are drawings of the screens, not screenshots. Your screen may look a little different.

  1. Start hereEmailBankHealth portalApple or Google account
    Drawing

    Step 1: Start with your email and your bank

    CISA suggests email accounts, banks, health care and other important accounts first, then every account that offers it.

  2. Sign-In & SecurityEmail & Phone NumbersChange PasswordTwo-Factor Authentication
    Drawing

    Step 2: On an iPhone (Apple Account)

    Open Settings, tap your name, tap Sign-In & Security, then Two-Factor Authentication. Enter a trusted phone number and the code you receive.

  3. Security & sign-inPasskeysTurn on 2-Step VerificationRecovery phone
    Drawing

    Step 3: For a Google account (Android, Gmail)

    Open your Google Account, tap Security & sign-in, and under "How you sign in to Google" choose Turn on 2-Step Verification. Follow the steps.

  4. GoogleG-482913 is your code.Never share it.
    Drawing

    Step 4: Never share a code

    Codes are for you to type, never to read out. Google says it will not call you to verify a code. Anyone who asks for one is a scammer.

Good to know: Other accounts: look in their settings for "two-factor", "two-step" or "multifactor" and turn it on.

Official help

These steps follow the official help pages:

More news

Loading more stories…