Skip to main content

How to Set Up Two-Factor Authentication

Passwords & Email

How to Set Up Two-Factor Authentication

Two-factor authentication — often called 2FA or two-step verification — is the single most effective thing you can do to protect your online accounts. Even if someone steals your password, they still cannot get into your account without a second code that only you can receive. This guide explains what it is, why it matters, and exactly how to turn it on for your most important accounts.

What Is Two-Factor Authentication?

Two-factor authentication adds a second layer of security on top of your password. Think of it like a bank vault that requires both a key and a combination — having one without the other gets you nowhere.

  • When you log in with 2FA enabled, you enter your password as usual (factor 1).
  • You are then asked for a second piece of proof (factor 2) — typically a 6-digit code sent to your phone by text message, or generated by an authenticator app.
  • Because the second code changes every 30 seconds and is tied to your specific device, a hacker who has your password but not your phone cannot log in.
  • According to Google, enabling 2FA blocks 99.9% of automated account takeover attacks.

Tip: The most common way accounts get hacked is not through clever technical attacks — it is through stolen passwords from data breaches at other websites. Two-factor authentication protects you even when your password has been compromised.

Setting Up 2FA on Your Google / Gmail Account

Your Google account protects your Gmail, Google Photos, YouTube, and any Android phone or tablet signed in with that account.

  1. 1Go to myaccount.google.com on your phone or computer.
  2. 2Click "Security" in the left menu.
  3. 3Under "How you sign in to Google," click "2-Step Verification."
  4. 4Click "Get started" and follow the prompts.
  5. 5Google will first ask you to verify your identity with your current password.
  6. 6Choose your second factor: "Google prompt" (a notification sent to your phone — the easiest option), text message, or an authenticator app.
  7. 7Follow the on-screen instructions to verify your chosen method, then click "Turn on."

Tip: Google Prompt is the easiest 2FA method for most people — when you log in, Google sends a notification to your phone that simply asks "Is this you trying to sign in?" You tap Yes and you are in.

Setting Up 2FA on Your Apple ID

Your Apple ID protects your iPhone, iPad, Mac, iCloud photos, App Store purchases, and Apple Pay.

  1. 1On your iPhone or iPad, go to Settings → tap your name at the top → Password & Security.
  2. 2Tap "Two-Factor Authentication" and then tap "Turn On."
  3. 3Follow the prompts to verify your phone number. Apple will send a 6-digit code to your phone number to confirm it.
  4. 4Going forward, when you sign in to your Apple ID on a new device, a 6-digit code will appear on your trusted devices (your existing iPhone, iPad, or Mac) for you to enter.

Tip: Apple's two-factor authentication is built directly into iOS and macOS — you do not need a separate app. The verification code appears as a notification on your other Apple devices.

Setting Up 2FA on Facebook

Your Facebook account contains years of personal photos, messages, and connections — it is a high-value target for hackers.

  1. 1Open Facebook and tap the three horizontal lines (menu) in the bottom right (iPhone) or top right (Android).
  2. 2Scroll down and tap "Settings & Privacy" → "Settings."
  3. 3Tap "Password and Security."
  4. 4Tap "Two-Factor Authentication" and then tap "Use Two-Factor Authentication."
  5. 5Choose your preferred method: Authentication App (most secure), Text Message (SMS), or Security Key.
  6. 6Follow the on-screen instructions to set up and verify your chosen method.

Setting Up 2FA on Your Email Account (Outlook / Microsoft)

If you use Outlook, Hotmail, or a Microsoft account, here is how to add two-factor authentication.

  1. 1Go to account.microsoft.com and sign in.
  2. 2Click "Security" in the top navigation.
  3. 3Click "Advanced security options."
  4. 4Under "Two-step verification," click "Turn on."
  5. 5Follow the setup wizard — Microsoft will walk you through adding a phone number or the Microsoft Authenticator app as your second factor.

Using an Authenticator App (The Most Secure Option)

Text message codes are convenient, but authenticator apps are more secure because they work even without cell service and cannot be intercepted.

  • Google Authenticator and Microsoft Authenticator are the two most popular options — both are free and available on iPhone and Android.
  • When setting up 2FA on a website, choose "Authenticator App" as your method. The site will show you a QR code.
  • Open your authenticator app, tap the "+" button, and scan the QR code with your phone's camera.
  • The app will now generate a fresh 6-digit code every 30 seconds for that account. Enter the current code to complete setup.
  • Going forward, when you log in to that account, open the authenticator app and enter the current 6-digit code as your second factor.

Tip: If you switch to a new phone, you will need to transfer your authenticator app accounts. Both Google Authenticator and Microsoft Authenticator have built-in transfer features — do this before wiping your old phone.

Frequently Asked Questions

Need Help Securing Your Accounts?

My Neighbor Tech provides in-home technology training and security help throughout Baltimore County, Carroll County, Harford County, and Howard County, MD. We will walk you through every step at your own pace.