How to setup Google 2 Step Verification
Passwords, unfortunately, aren't as secure as they used to be, and if someone gets your password, they can access your account without any problem. Even having a strong password doesn't completely protect you. Two-factor authentication is one of the best things you can do to make sure your accounts don't get hacked.
Google is an important to service in which to turn on two factor authentication as many Google services all use it: Gmail, Youtube, Google Maps, Google+ 2-Step Verification adds an extra layer of security to your Google Account, drastically reducing the chances of having the personal information in your account stolen. To break into an account with 2-Step Verification, bad guys would not only have to know your username and password, they'd also have to get a hold of your phone.
How to Setup Google 2 Step Authentication
Sign into your Gmail Account
Login to your Gmail account and visit Gmail's 2-step verification settings page
Click Start Setup.
Setup your phone
Each time you login to a Google service from a new computer, you will be prompted for a 6 digit code. This code is generall sent as an SMS text message on your mobile phone. However, it could also be provided by google ringing your home phone, a generated text code or the mobile google authenticator app.
Your mobile phone is the easiest as you usually have that with you.
1. So the first step is to setup your phone. Enter your mobile phone number.
2. Use the dropdown box to select your country.
3. Select Voice Call or Text Message.
4. Click: Send Code
Verify your phone
Enter the code sent to your phone and then click Verify. If you didn't get the code, click the message: " Didn't get the code?" for a voice call.
Trust this computer
Turn on 2 Step Verification
Reconnect your apps
Click Reconnect my apps.
You will immediately be taken to screen informing you that 2-step verification has been activated and provide you with further options. The first one is to enter a backup phone number (very good idea) and the second to is get a list of printable codes (I actually store these as a secure note in Dropbox). If you don't, you can get to this section via this link. https://accounts.google.com/b/0/SmsAuthSettings#devices
In the Verification Codes tab:
1. You can edit / check the mobile phone number. If you want to verify your sites using the Google authrenticator app, select: "Get codes via our mobile app instead.
2. Add a backup number if your mobile phone is unavailable. If you have a fixed home number, enter that, or a second mobile number.
3. Download or print Backup codes. If neither of your phones are available, you can use these codes to verify yourself. Print them and keep them in your wallet or in a Drop box account. Well worth doing this.
4. Click the tab: App-Specific Passwords
Signing in to applications that access your Google Account
Some applications that access your Google Account (such as Gmail on your phone or Outlook) cannot ask for verification codes. To use these applications, you will not use verification codes. Instead, you'll enter an application-specific password in place of your normal password. Common applications and devices that require an application-specific password include:
- POP and IMAP email clients such as Outlook, Mail and Thunderbird
- Gmail and Google Calendar on smartphones
- YouTube Mobile
- Installed chat clients such as Google Talk
- Picasa, Sketchup, and installed applications
Most of the time, you will only have to enter an application-specific password once per application or device
Click: Manage application-specific passwords. You may have to reenter your Google password.
Add an app-specific password for Mail
You need to select a new password for every application. Eg an app-specific password for Mail on the iPad, Mail on the MAC, Youtube on my phone, mail on my smartphone, calendar on the ipad etc
1. Select the application from the drop down box.
2. Select the Device from the drop down box.
3. Click Generate.
How to use the password
Follow the instructions in the box above and then click Done.
Add your account details and in the password box, enter the app-specific password. Click Next and your mail account will be setup on the iPad.
Add a new application
Add a new app-specific password for each new application. You can always revoke the password if you uninstall the app.
Generate new app-specific passwords for existing Google apps
When you turn on 2 step verification, your existing Google passwords will not work. Eg, if you have a Picasa account, you will need to generate an app-specfic password, or an Apple Mail account on a laptop or computer. It will no longer work until you re-enter your app-specfic password. Although this can be anooying at first, remember that it is protecting your identity and you only have to do this once.
When you create a Google account and you need a password, if your usual Google password is rejected, then you need to create an app-specific password.
This is the process to re-verify Picasa web albums: Soon after you turn on 2-step verification, you'll be alerted that your password is no longer working (see image below). Enter the username of your account in the username field (label 1) and an application-specific password that you generated in the "Password" field (label 2). If you want Picasa to remember your information so that you do not have to sign in again, check the box next to "Remember me on this computer" (label 3). We recommend you don't check this box if you're using a shared computer.