How to set up an authenticator app

Add the strongest kind of sign-in code to your most important accounts, one account at a time.

About 30 minutes 11 steps Phone

Tick each step as you go. Your progress is saved on this device only, so you can stop and come back later.

0 of 11 steps done

Before you start

An authenticator app makes a new 6-digit code every 30 seconds. When you sign in, you type the code after your password. Even if someone steals your password, they can’t get in without your phone.

It’s safer than codes sent by text message, because scammers can sometimes steal your phone number. You’ll need your phone, and a computer or tablet helps for scanning QR codes.

Part 1 · About 5 minutes

Get set up

Pick an app and make sure your codes are backed up.

1. Pick an authenticator appiPhone: the Passwords app can make codes, built in (iOS 18 and later). Any phone: free apps like Google Authenticator or Microsoft Authenticator. Download only from the App Store or Google Play, and check the app maker’s name, since there are look-alike apps.3 min

2. Turn on backupGoogle Authenticator: sign in with your Google Account so your codes are backed up and synced. Microsoft Authenticator: turn on Backup in its settings. Apple Passwords backs up codes with iCloud Keychain.Why: Without a backup, losing your phone could lock you out of your accounts.2 min

Part 2 · About 8 minutes

Add your first account

Start with your email, since it can reset everything else.

3. Turn it on for your emailOpen your email account’s security settings. For Gmail, go to myaccount.google.com → Security → 2-Step Verification → Authenticator. For others, look for Two-step verification, Two-factor authentication or 2FA, and choose Authenticator app.3 min

4. Scan the QR codeOpen your authenticator app, tap + or Add, and scan the QR code on the screen. If you’re setting up on the same phone, look for Can’t scan? or Enter a setup key and copy the key into the app instead.2 min

5. Type in the 6-digit code to finishEnter the code your app shows to confirm it works. If it doesn’t work, wait for the next code and try again.1 min

6. Save your backup codesMost accounts give you a list of backup codes when you turn this on. Save them in your password manager or print them and keep them at home.Why: They get you in if your phone is lost or broken.2 min

Part 3 · About 15 minutes

Add the rest

Do the same thing for your other important accounts.

7. Add banking and money appsLook in each app’s security settings. Some banks use their own app or text codes instead of an authenticator. That’s okay. Use what they offer.5 min

8. Add social mediaFacebook, Instagram, TikTok and Snapchat all let you choose an authentication app in their security or Password and security settings.5 min

9. Add shopping and other accountsAmazon, PayPal, your Apple Account or Google Account, and any account with your card saved.3 min

Part 4 · About 3 minutes

Keep it working

Two habits that keep your accounts safe.

10. Never share a codeNo real company, bank or “support” person will ask you for a sign-in code. Anyone who asks is trying to get into your account.1 min

11. Move your codes before you change phonesBefore you reset or trade in your old phone, open your authenticator app on the new phone and make sure your codes are there. Google Authenticator can also transfer codes with a QR code. Keep the old phone until you’ve signed in to your important accounts on the new one.2 min

Where this comes from

Last checked Nov 11, 2026. Apps change their menus often. If a step doesn't match your screen, try typing the setting's name into the search bar in Settings. Spotted a change? Tell us.

Keep going

More checkups

How to use Facebook safelyAbout 30 minutes · 18 steps How to start using a password managerAbout 40 minutes · 12 steps