Turn on two-step verification for your email
If your email account is protected only by a password, anyone who learns that password can get in. A second step, usually your phone, stops most of these attempts.
Applies to: Google and Microsoft email accounts, including Google Workspace and Microsoft 365.
Try these steps
Open your security settings
For a Google account, go to myaccount.google.com/security. For a Microsoft work account, go to mysignins.microsoft.com/security-info. For a personal Microsoft account, go to account.microsoft.com/security.
Add a second step
Choose two-step verification and follow the prompts. An authenticator app on your phone is safer than text messages if you have the choice.
Save your recovery options
Save any backup codes somewhere safe that isn’t this email account, and check your recovery phone number and email are up to date.
Repeat for your team
Each person turns it on for their own account.
Check it worked
Sign out, then sign back in. You should be asked for the second step after your password.
When to stop and ask for help
- The setting is greyed out or managed by your organisation. Your administrator controls it.
- You’re the administrator and want to require it for everyone. Done wrongly, this can lock people out.
- You’ve lost access to the phone or codes for an account.
Rather not do it yourself?
Tell us what you’ve tried. We’ll reply with the scope, price and timing before any work starts.
Menus and settings change over time. If what you see looks different, the tool’s own help pages have the latest steps. Last updated .