Skip to content
Novaz AuthenticatorGET

Google Account 2FA: how to set up an authenticator app

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. When it's required
  2. Turn on 2-Step Verification with an authenticator app
  3. Why it may not work at sign-in yet
  4. Backup codes
  5. When Google asks for a code
  6. If Google rejects your code
  7. Work, school, Nest and Fitbit accounts
  8. Changing phones
  9. If you lose your authenticator
  10. Turning 2-Step Verification off
  11. Official Google help

One Google Account signs you in to Gmail, YouTube, Google Drive, Google Play, Google Photos and the Google Cloud console, so a second step here guards all of them (Google, Google Cloud). Google calls it 2-Step Verification. The second step can be a prompt on your phone, a passkey or security key, a text or voice code, a backup code, or an authenticator app.

Google's pages keep naming Google Authenticator, but other apps that make one-time codes work too (Google), and its Workspace help confirms support for the TOTP standard (Google Workspace). This guide uses Authenticator App - Novaz on iPhone. Any authenticator app works the same way.

How we checked this guide: the Google steps come from Google's own help pages for Google Account, Google Workspace, Google Cloud and Google Nest, linked below, which we read on October 20, 2026. We haven't tested them on a Google Account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

When it's required

Usually it's optional. Since May 12, 2025, a personal Google Account needs it to open the Google Cloud console or the Firebase console (Google Cloud). The YouTube Partner Program requires it too (YouTube). Work and school accounts follow their administrator's rules.

Turn on 2-Step Verification with an authenticator app

Google's help gives this route (Google, Google):

  1. Open your Google Account at myaccount.google.com and select Security & sign-in.
  2. If 2-Step Verification is off, select Turn on 2-Step Verification under How you sign in to Google and follow the steps.
  3. Go to myaccount.google.com/two-step-verification/authenticator. Google may ask you to sign in again.
  4. Select Set up authenticator. Google's help ends there with a pointer to the on-screen steps, so it doesn't say whether you get a QR code, a text key, or both.
  5. Add the account to Novaz:
    • QR code on a computer: tap +, then Scan QR code.
    • QR code on the iPhone itself: take a screenshot, tap +, then Choose a photo. See scanning a QR code on the same iPhone.
    • A text key: tap +, then Enter key manually, and paste it into Setup key. Put your Gmail address in Account if you have several Google Accounts. See What is a 2FA setup key?
  6. If Google asks for a code to finish, type the one Novaz shows.

Google doesn't state its code settings, so scan when you can: a QR code carries them, while a typed key always gets 6 digits every 30 seconds in Novaz. Google Cloud's docs call the settings area the Security tab, so names may vary.

Why it may not work at sign-in yet

A newly added authenticator can take up to 7 days to become a sign-in option, which gives you time to react if someone else added it (Google). If you have a trusted passkey or security key, you can speed this up: on myaccount.google.com/security, select the authenticator, choose Approve, and confirm with the passkey or key (Google).

Backup codes

Google gives 10 single-use backup codes of 8 digits. In Security & sign-in, open 2-Step Verification, select Continue under Backup codes, then Get backup codes. Refresh replaces the set and cancels the old one. In the Advanced Protection Program you can't download them (Google).

Novaz can keep a copy of its keys through iCloud backup (PRO) or a backup file, but without one the keys are only on your iPhone. Either way, keep these codes on paper or in a password manager. See 2FA backup codes.

When Google asks for a code

A sign-in with your password then needs a second step, and Google picks which one to show. A passkey sign-in skips it (Google). If Google offers another method, Try another way shows the rest. On devices only you use, check Don't ask again on this computer; clearing cookies brings the question back (Google).

If Google rejects your code

Google's own checklist: use the code before it expires, for the right service and the right Google Account, with your phone's time correct for your time zone (Google). On iPhone, open Settings > General > Date & Time and turn on Set Automatically. Novaz warns when the clock is 15 seconds or more off. More in Authenticator code not working?

Work, school, Nest and Fitbit accounts

With a Google Workspace account, these steps might not work; Google sends you to your administrator (Google). Admins can allow any method, block text and call codes, or allow only security keys and passkeys, which rules out authenticator apps (Google Workspace). They can also generate backup codes for a locked-out user (Google Workspace).

A Nest account never moved to a Google Account has its own 2-step verification in the Nest app, with codes by text or email only (Google Nest). Separate Fitbit accounts lost support on May 19, 2026 (Google Health).

Changing phones

Google's transfer steps cover Google Authenticator only (Google). With Novaz, iCloud backup or a backup file lets you restore your accounts on the new iPhone, and the Google entry keeps working. Without one, set up the authenticator again for the new phone while the old one still works. Changes to sign-in methods can take up to 7 days to apply, so keep the old phone and your backup codes until then (Google). See How to transfer your authenticator app to a new iPhone. Leaving Google Authenticator for Novaz? You can import its export codes: see transferring Google Authenticator codes.

If you lose your authenticator

Google's fallbacks: another phone signed in to your account, another phone number you added, a backup code, a security key, a passkey on another device, or a device where you chose not to be asked again. Once in, sign the lost phone out and change your password (Google).

Without any of those, use account recovery. Google says it can take 3-5 business days, because 2-Step Verification needs extra proof (Google). Use a device, browser and place where you usually sign in, and answer every question (Google). Don't look for a phone line: "you can't call Google for help to sign into your account" (Google). More in Lost the phone with your authenticator app?

Turning 2-Step Verification off

In Security & sign-in, select 2-Step Verification, then Turn off, and confirm with Turn off. Google says to destroy your saved backup codes (Google). Then open the account in Novaz and tap Remove account.

Official Google help

More guides: Email