As we continue to see an increase in spam and phishing attempts our concern about ensuring your privacy and securing your personal information is our top priority. We are now offering the ability to enable 2 Step Verification to your Google Account to ensure that your information is as safe as possible.
Please follow the steps below to activate this feature.
Why you need it
An extra layer of security
2-Step Verification adds an extra layer of security to your Google Account, drastically reducing the chances of having the personal information in your account stolen. To break into an account with 2-Step Verification, hackers would not only have to know your username and password, they'd also have to access your phone.
It's easier than you think for someone to steal your password
Any of these common actions could put you at risk of having your password stolen:
- Using the same password on more than one site
- Downloading software from the Internet
- Clicking on links in email messages
2-Step Verification can help keep hackers out, even if they have your password.
Imagine losing access to your account and everything in it
When a hacker steals your password, they could lock you out of your account, and then do some of the following:
- Go through – or even delete – all of your emails, contacts, photos, etc.
- Pretend to be you and send unwanted or harmful emails to your contacts
- Use your account to reset the passwords for your other accounts (banking, shopping, etc.)
How it works
Sign in will require something you know and something you have
With 2-Step Verification, you'll protect your account with something you know (your password) and something you have (your phone).
Signing in to your account will work a little differently
Whenever you sign in to Google, you'll enter your password as usual. Then, you'll be asked for a code that will be sent to your phone via text, voice call, or our mobile app.
Keep sign-in simple
During sign-in, you can tell Google not to ask for a code again on that particular computer. From then on, that computer will only ask for your password when you sign in. You'll still be covered, because when you or anyone else tries to sign in to your account from another computer, a verification code will be required.
If you have issues or need help please contact your Technician and they will assist you during normal office hours.
- Sign in to your Google Account settings page by clicking on your name or picture in the upper right corner of the screen and then clicking Account.
- At the top, click Security.
- In the Password box, click Setup next to "2-Step verification." This will bring you to the 2-Step Verification settings page.
- You will then see a step-by-step guide which will help you through the setup process.
- Once you’re done, you’ll be taken to the 2-Step Verification settings page again. Be sure to review your settings and add backup phone numbers.
- You’re done! Next time you sign in, you’ll receive an SMS with a verification code
Easy setup for Android users
Users who only access their Google Account from Android devices can use a short walkthrough to set up the Google Authenticator application on their phones. With Google Authenticator, you can generate verification codes on your phone even if your phone isn't connected to a network.
- Follow steps 1-2 in the instructions above to access your 2-Step Verification settings and then click Settings.
- Android users (4.0 or older) will see a screen providing an option to install the Google Authenticator app.
- If you prefer to receive codes via SMS instead of using the Google Authenticator app, click on the link at the bottom of the screen that says "You can receive codes by text message (SMS) or voice instead" and follow the instructions to complete the setup.
- If you would like to use Google Authenticator, click "Send me the app" to install the app on your phone and follow the instructions on your screen to complete the setup process.
- Verify that the time on your Android device is correct.
- You’re done! Next time you sign in, you’ll be prompted to enter a code that you’ll get from the Authenticator app.
iPhones (App Passwords)
An App password is a 16-digit passcode that gives an app or device permission to access your Google Account. If you use 2-Step-Verification and are seeing a “password incorrect” error when trying to access your Google Account, an App password may solve the problem. Most of the time, you’ll only have to enter an App password once per app or device, so don’t worry about memorizing it.
Why you may need an App password
When you sign up for 2-Step Verification, we normally send you verification codes. However, these codes do not work with some apps and devices, like Gmail on your iPhone or iPad, Thunderbird, and Outlook. Instead, you’ll need to authorize the app or device the first time you use it to sign in to your Google Account by generating and entering an App password.
How to generate an App password
- Visit your App passwords page. You may be asked to sign in to your Google Account.
- At the bottom, click Select app and choose the app you’re using.
- Click Select device and choose the device you’re using.
- Click Generate.
- Follow the instructions to enter the App password (the 16 character code in the yellow bar) on your device.
- Click Done.
Once you click done, you’ll won’t see that App password code again. However, you will see a list of apps and devices you’ve created App passwords for.
If these directions don’t work, please try this:
- Sign in to your Google Apps Gmail Account and click Account Settings (at the top right corner of the window).
- Click Authorizing applications & sites. (Note: You can only generate application-specific passwords if you're enrolled in 2-Step Verification).
- Go to your Authorized Access to your Google Account page: https://www.google.com/a/your_domain/IssuedAuthSubTokens. Be sure to replace "your_domain" with your actual domain name.
- Enter your password, if prompted.
- On your Authorized Access to your account page, provide a descriptive name for your application-specific password, such as "Gmail Android". (This lets you remember which application it's for, in case you later need to revoke it).
- Click Generate password.
2-Step Verification in a browser vs. a desktop or mobile app
|Web Browser application||Desktop application or mobile application|
|What||Enter a 2-Step Verification code||Enter an application-specific password|
|How||Get a verification code each time you need one, from your phone||Get an application-specific password once from yourAuthorized Access to your Google Account page on the web|
|When||Once a month or when otherwise prompted||Only once when you set up a new application/device after you've enrolled in 2-Step Verification|
|Where||On a second page that appears after entering a username and password||In your Google Apps Password field|
Forgot your App password
Every App password is only used once. But don't worry, you can always generate a new App password whenever you need one, even for a device or application you've authorized before.
Common Issues With 2 Step Verification
- My phone was lost or stolen
- Why you shouldn’t use Google Voice to receive verification codes
- Link to set up 2-Step Verification not showing
- More about Google Authenticator
- I turned on 2-Step Verification and an application on my phone or computer stopped working
- Application-specific passwords not working
- Google TV and App Passwords
- I lost my backup codes and I want to revoke them
- I’m not receiving a code via text message or phone call
- My Google Authenticator codes aren’t working (Android)
My phone was lost or stolen
If your phone was lost or stolen, we strongly recommend that you revoke your App Passwords and change your Google Account password. This will help prevent others from accessing your Google Account from your phone.
You have several ways you can get back into your account, depending on your circumstances.
Use backup options
Sign in from a trusted computer
If you’ve previously signed in from a computer and checked that the computer should remember you, you might be able to sign in from that computer without a verification code. Once you’re in your account, you can turn off 2-Step Verification until you can again get verification codes.
Retrieve code with voicemail and a voice call
When signing in, ask that you have your code sent to you by voice call. We’ll then leave a voicemail on your phone with your verification code. If you can access your phone’s voicemail remotely, you can then call your phone and get the verification code.
To request a verification code by voice call:
- Sign in with your username and password at accounts.google.com.
- When asked for your verification code, click Other ways to get a verification code at the bottom.
- Select the button next to “Send to your backup phone number ending in **” and click OK.
- If you set up your backup phone to get voice calls, you should get a voice call. If you set up your backup phone to get text messages, you’ll need to click Call your phone ending in ** at the bottom.
Once you’ve switched to getting your verification codes by voice call, you should be able to request a code, then retrieve it from your voicemail.
Get a new phone from your carrier
If you’ve lost your phone, you might be able to get a new phone with the same phone number from your carrier.
Fill out our Account Recovery form
We recommend you use this option only if you cannot get into your account in any other way. This process can take several days and usually involves more effort than other recovery options.
- Sign in to your account with your username and password.
- On the verification code challenge page, click Problems receiving your code?
- Click "I need Google's help getting back into my account."
- You'll then need to fill out an account recovery form to verify ownership of the account. Take time to answer each question to the best of your ability. The form was designed to ensure that no one can gain access to your account except you. Since Google doesn't collect a lot of information about you when you sign up for an account, we will ask you questions like when you created your account, what Google services you use, and who you email frequently (if you use Gmail) to make certain you are authorized to access your account.
If you’re a Google Apps user (business)
If you’re a Google Apps user (for example, your email is firstname.lastname@example.org), you have two options:
Use backup options
Contact your domain administrator
Your administrator can turn off 2-Step Verification for your account so you can sign in without a code.
Why you shouldn’t use Google Voice to receive verification codes
If you use Google Voice to receive verification codes, you can easily create a situation where you’ve locked yourself out of your account.
For example, if you are signed out of your Google Voice app, you might need a verification code to get back in. However, you won’t be able to receive this verification code because it will be sent to your Google Voice, which you can’t access.
Link to set up 2-Step Verification not showing
If you do not see the link and you are a Google Apps user, you might have to access the 2-Step Verification setup through aspecial URL. It is also possible that your domain administrator has not yet set it up for your organization. Check with your domain administrator to find out.
More about Google Authenticator
Learn more about the Google Authenticator open source project.
I turned on 2-Step Verification and an app on my phone or computer stopped working
When you turn on 2-Step Verification, any apps that need access to your Google Account will stop working until you enter an App Password in place of your normal password.
Common applications and devices that require an App Password include:
- Old versions of email clients such as Outlook, Apple Mail and Thunderbird
- The email app that comes with your phone (but is not made by Google)
- Some chat, contacts and YouTube clients
You do not need to memorize App Passwords because every App Password is only used once. You can generate a new App Password whenever you’re asked for one--even for a device or application you’ve authorized before.
App passwords not working
If you’ve double-checked to make sure you’ve entered the App Password in correctly but it’s still not working, try going to https://g.co/allowaccess on your device’s browser. Enter your username and password, then type the letters on the screen. Then go back to the application you're trying to access and enter your App Password.
I lost my backup codes and I want to revoke them
If you lost the print-out of your backup codes, you can revoke them on your settings page. Click Show codes, then clickGenerate new codes. This will invalidate the previous set of backup codes and generate a new set.
I’m not receiving a code via text message or phone call
If you chose to receive codes by text message, make sure your service plan and mobile device supports text message delivery. Delivery speed and availability may vary by location and service provider. Also make sure you’ve got adequate cell signal when you’re trying to receive your codes.
If you chose to get codes by voice call, note that a voicemail with the verification code will be left on your phone if you’re unable to answer the call.
If you have a smartphone, we recommend you use the Google Authenticator app.
You can also switch between receiving your codes by text messages or voice calls - sometimes delivery of one of these services is more reliable than the other.
If you requested multiple codes, only the newest one will work. Keep in mind that it might take some time for the latest code to arrive.
My Google Authenticator codes aren’t working (Android)
This might be because the time on your Google Authenticator app is not synced correctly.
To make sure that you have the correct time:
- Go to the main menu on the Google Authenticator app
- Click Settings
- Click Time correction for codes
- Click Sync now
On the next screen, the app will confirm that the time has been synced, and you should now be able to use your verification codes to sign in. The sync will only affect the internal time of your Google Authenticator app, and will not change your device’s Date & Time settings.