How to set up 2FA on Google
Checked against Google's own help on 10 October 2026. Menus change, so follow the nearest label if yours differs.
Short answer
Open Google's security settings (Google Account, Security, 2-Step Verification), choose the authenticator app option, and scan the QR code Google shows with KeyNesta (or enter the setup key by hand). Type the six-digit code KeyNesta shows back into Google to finish, and save the recovery material Google gives you before you close the page.
Before you start
Have KeyNesta open and unlocked before Google shows the QR code, so the code is ready the moment it appears. KeyNesta needs no account to do this. It stores authenticator-app codes only: it does not do passkeys or hardware security keys, and where Google offers those you set them up in Google directly.
Steps
- Open your Google Account at
myaccount.google.comand select Security. - If 2-Step Verification is off, select Turn on 2-Step Verification and follow the prompts.
- Under 2-Step Verification, find Authenticator app and choose Set up authenticator. Google shows a QR code.
- Add it to KeyNesta. Open the KeyNesta web app (or the app on your phone once it is released), unlock your vault, choose Scan QR and point the camera at the code on screen. If you cannot scan, use Import QR image, or choose Add entry to paste the setup key.
- Type the six-digit code KeyNesta shows back into Google to confirm.
- Back in 2-Step Verification, create Backup codes and download or print them.
| What to know | |
|---|---|
| Where to start | Google Account, Security, 2-Step Verification |
| Setup key as text | If the QR screen offers a link to show the key as text, use it and paste the key into KeyNesta. |
| Recovery material | Google lets you print or download a set of 8-digit backup codes. |
| Source | Google Account Help: Turn on 2-Step Verification |
Backup and recovery for Google
Google lets you print or download a set of 8-digit backup codes. If you lose them, open the 2-Step Verification section, select Show codes, then Get new codes. Accounts in the Advanced Protection Program cannot download backup codes.
Save whatever Google gives you somewhere that is not the phone holding your codes. Where to store your 2FA backup codes compares the options, and 2FA backup and sync covers backing up the KeyNesta vault itself.
Things to know about Google
- Google says a newly added authenticator can take up to seven days to appear as a sign-in option on some devices.
Source
Menu paths on this page come from Google Account Help: Turn on 2-Step Verification, read on 10 October 2026. Google's page describes the Security route and the backup codes; the authenticator wording is from Google's Authenticator help page. KeyNesta is not affiliated with Google.
Frequently asked questions
Can I use KeyNesta as the authenticator app for Google?
Yes. Google asks for a standard time-based code, and KeyNesta reads the same QR code or setup key and generates that code on your device, offline. Google does not learn which app you chose. KeyNesta holds authenticator-app codes only; it has no passkey or hardware security key support. How to add the code is in How do I add a 2FA code to KeyNesta?
What happens to my Google 2FA if I lose my phone?
Use one of your 8-digit backup codes as the second step, or any other second step you added, then set up the authenticator again. If your KeyNesta vault is synced or you made an encrypted backup, you can restore the codes on another device; the lost phone guide covers the order to do things in.
How do I add Google to KeyNesta if I cannot scan the QR code?
If the QR screen offers a link to show the key as text, use it and paste the key into KeyNesta. Google's help page does not describe that link, so look for it on the screen rather than relying on its exact name. In KeyNesta you can also upload a screenshot with Import QR image, paste an otpauth:// link, or add the entry by hand with the secret. Delete any screenshot of the QR afterwards: it works like a password.
Can I use the same Google code on two devices?
Codes come from a shared secret, so any app that holds the secret shows the same codes. The tidy way is KeyNesta's optional end-to-end encrypted sync, which carries the vault to a second device. The alternative is to add the secret to a second app while the QR code is still on screen; once Google stops showing it, you cannot get it back without re-enrolling.
Can I use security keys with Google as well as KeyNesta?
Google lists a security key as another second step you can add. KeyNesta does not support hardware security keys or passkeys, so keep those in Google if you use them; KeyNesta holds the authenticator-app codes only.
Do I need to turn on 2-Step Verification in Google before adding an authenticator?
Yes. The authenticator app is one of the second steps inside 2-Step Verification, so Google asks you to turn that on first if it is off. The setup then continues straight into the authenticator choice.
Why does Google want backup codes when I already use an authenticator on my Google Account?
Because the codes live on one device. Google's help tells you to enrol additional second steps, and backup codes count as one, so that a lost or reset phone does not lock you out of the account.
Try KeyNesta free. The web app needs no sign-up.
Open the web app All platforms