2-factor Authentication

2-factor Authentication: a reader asks…

Hi Coach, can you tell me what to do to turn on 2-factor authentication for my gmail account?

You should take a quick look at my article: 3 Things to Know about 2-Factor Authentication (and some advice) which will give you a good primer for what 2-factor authentication is (and what it isn’t). To turn this feature onto gmail (they call it two-step verification), here’s what you do:

1. visit https://myaccount.google.com/security/signinoptions/two-step-verification/enroll-welcome?hl=en and click the blue Get Started button, and sign into your account (if you’re not already signed in).
2. Provide a cell phone number that can receive text messages and click the Try it link
3. Type in the code you received on your cell phone and continue to the last step by clicking the blue Turn on button.

Now anytime you need to access your gmail account you’ll be sent a text message after you’ve entered your password. Type that in to gain access to your account. There are a few things to consider:

First, you will see (immediately after turning it on) some alternatives in case you lose access to your cell phone and/or can’t receive text messages for some reason. These alternatives include printing a set of backup codes to carry with you, using the Google Authenticator app on your smartphone to generate codes, and adding a 2nd cell phone for backup. I recommend you add at least one alternate method for emergencies.

Second, when you access your gmail account and have verified your identity using the text message code, you have the opportunity to tell Google that you trust that particular device, so you don’t keep getting the 2-step verification each time. You can use this for your personal computer and other devices. See the checkbox underneath the signup that says “Don’t ask…”

Third, if you use the mail app on your iPhone/iPad or Mac, or chat clients, 2-step verification means you may have to take an additional step to generate an ‘app password’ to use in the setup of your mail app instead of your regular password. If needed, you’ll be prompted to create an app password.

I’m really glad you’ve chosen to add 2-factor authentication to your email account, you should add this to any online account that has the capability. This helps offset both weak passwords and compromised credentials (username & password combo) that are often the result of hackers breaking into online entities. It isn’t perfect, but the additional layer means that your email account just got very much harder for a hacker to crack into – a good thing for you!