A mail password can be peeked at or guessed, and you do not want to buy a second phone “for codes”. You can still turn the sign-in check on the device that is already in your pocket. Then a code is asked once more, and one password is not enough for a stranger.
You do not need a family menu for this, and you do not need a relative’s phone. An app with codes on your phone is enough, or a sheet of backup codes that sits at home. SMS is weaker than an app, but better than nothing, if the SIM card is definitely yours.
What happens
The check is called two-step: a password and a second step. The second step is a code that changes, or a question on your phone. The page lives at myaccount.google.com, the Security section, the item Two-step verification. The name can be a little different. Look for sign-in check and security, not the section about family and not parental controls.
An app like an authenticator shows a short code that updates itself. You put it on the same phone where you read mail. That is a normal path when there is no second device. Do not dictate the code into a chat and do not forward it to “support”.
Backup codes are a list of short lines the page shows once. Print them or copy them onto paper and put them at home, not in a photo of this same phone and not in a draft of the same mail. Paper helps if the phone is lost, broken, or you missed with the app. Treat each such code as one-time, and do not photograph it onto a screen people nearby can see.
SMS comes to the number you added. If the number is yours, that is already stronger protection than a bare password. Do not read an SMS code aloud to anyone either. If the number is old and the SIM card is no longer yours, first tie your own number, and only then turn SMS on. Otherwise the code will travel to someone else.
Codes in an app are usually more reliable than SMS: a message can be intercepted at the operator or pulled out with a call, while a code in the app lives on your screen for a few seconds. If you do not want to install an app, SMS is still better than signing in with a password alone. Keep paper codes for both cases, even when the app is already installed.
After you turn it on, mail on your phone more often stays open and does not ask for a code every hour. The code will be needed on a new device, in someone else’s browser, and sometimes after a password change. That is expected, not a breakdown. Do not turn the check off “because it asked once”.
It makes sense to print backup codes or copy them by hand and put them at home, not in a chat. One code burns after it is used. If the sheet is lost, new codes are made on the same security page, while sign-in is still open. You do not need to buy a separate key for this check.
What to check, in order
- Open myaccount.google.com from the phone where mail is already yours. Choose the same address.
- Go into the Security section and open Two-step verification. If the item is not visible at once, look for the block about signing in to the account.
- Turn the check on. The page will walk you through the steps and may ask for the password you already know. Do not send it into a chat.
- Install a code app on this same phone if you are ready. Scan the code from the screen with the app itself, the way the page shows, and enter the first code to check.
- Save the backup codes on paper at once and put them at home. Not in an email to yourself, and not in a shared family note if other people read it.
- If you do not want an app, confirm the number that is in your phone now, and leave codes by SMS. That is weaker than an app, but better than one password.
- Remove someone else’s number from the list if the SIM card is no longer yours. Otherwise the next code will not come to you.
- Do not look for a Family item in order to turn this check on. A family group and parental settings have nothing to do with the second sign-in step.
Where people usually go wrong
- They put the check off until they buy a second phone. It is not required for this.
- They turn SMS on for a number they already gave away, or lost together with the SIM card.
- They store backup codes as a photo in the same mail. Lose the sign-in and you will not open the photo either.
- They dictate a code from the app to a person who calls “from mail support”.
- They look for the switch in the family menu or in a child’s settings. The item you need is in Security of your account.
If there is no second phone, turn two-step verification on this one: codes in an app, or backup codes on paper at home. SMS to your own number is better than a password alone.
What to do today
Open myaccount.google.com, the Security section, and turn on Two-step verification while mail is still open on your phone. Install a code app on this same phone, or confirm SMS to a number that is definitely yours. Copy the backup codes onto paper and leave them at home, not in the mailbox and not in a shared photo. Remove an old number that is not yours from the sign-in methods. Do not read a code from the app or from SMS to anyone on the phone. Tomorrow, go into mail as usual: on your own device an extra question may not appear, and on a new device the code is exactly what protects the mailbox.
A code to sign in to mail does not replace the lock on the phone itself: how a fingerprint and a PIN work is in the text about a fingerprint and a PIN. Keep the password that turns the computer on separate. There is a note about a password to sign in to the computer.
