Your Gmail account is often the key to all your other accounts, so protecting it should be a priority. The simplest and most effective step is turning on 2-Step Verification, which asks for a second confirmation even when someone has your password.
Why 2-Step Verification matters
Passwords get leaked through phishing emails, data breaches, and reused logins. With 2-Step Verification enabled, a attacker who knows your password still cannot sign in without your phone or a security key.
How to turn it on
Open your Google Account and go to the Security section. Under How you sign in to Google, select 2-Step Verification and follow the prompts. Google will ask you to confirm your phone number and approve the sign-in on your device.
Extra tips
- Save your backup codes in a safe place, such as a password manager.
- Review your connected devices and remove any you do not recognise.
- Check your recovery phone number and recovery email are up to date.
- Never share verification codes with anyone, even if they claim to be from support.
Taking these few minutes today can save you a lot of trouble later.