How to turn on two-step sign-in

Two-step sign-in (also called two-factor or 2-step verification) asks for a second proof that it is really you, usually a code, as well as your password. Even if someone steals your password, they cannot get in.

Before you start

• Have your phone to hand, and be signed in to the account on a trusted device.
• Start with your email, as it can reset your other accounts. Then do banking, Apple, Google, Microsoft and social media.
• Menu wording changes from time to time, so the names below may differ slightly.

Step by step

1. Google: go to your Google Account, choose Security, then 2-Step Verification, and follow the steps.
2. Microsoft: sign in to your Microsoft account, open Security, then Advanced security options, and turn on Two-step verification.
3. Apple: on an iPhone, open Settings, tap your name, then Sign-In & Security. Two-factor authentication is on by default for most accounts, so you may find it already enabled.
4. Other sites: look in Security or Account settings for Two-factor, 2-step or Multi-factor.
5. Choose how to receive codes. An authenticator app is safer than text messages, but text messages are much better than nothing.
6. Save any backup codes the site gives you and keep them somewhere safe, away from the phone.

Staying safe

• Never read a code out to anyone who contacts you. Scammers phone and say they need the code. Real firms will not ask.
• If you get a code you did not request, someone may know your password. Change it straight away.
• Keep your phone number up to date with your accounts.

When to get more help

Stop and ask for help if you have lost your phone, changed your number, cannot get codes, or are locked out. Do not trust anyone who contacts you offering to help. Tell us which account and which device you used.