Ravindra BagaleCourses & study guides Track your progress

Guides Cyber safety for everyone

Turn On 2FA for Google, Apple and Microsoft

By , Cyber Security trainer LinkedIn Published: Last updated:

Two-factor authentication (2FA / 2-Step) asks for a second proof after your password — usually a code from an authenticator app, SMS, or a prompt on a trusted device. Turn it on for Google, Apple ID and Microsoft accounts, prefer app-based codes, and store backup codes offline.

Quick steps

  1. Google: Google Account → Security → 2-Step Verification; add authenticator; save backup codes.
  2. Apple: Settings → [your name] → Sign-In & Security → Two-Factor Authentication.
  3. Microsoft: account.microsoft.com → Security → Two-step verification.
  4. Prefer authenticator app over SMS when both exist.
  5. Store backup codes on paper at home.

Why this matters

Sophie in Lyon enabled Google prompts after a scare. Arjun in Pune helped his uncle turn on Apple ID two-factor before a trip.

Password alone is not enough when phishing or breaches happen.

What you need to know

Better: authenticator app or platform prompts. OK but weaker: SMS codes (still better than nothing). Must save: backup codes printed or offline.

2FA choices

  • Authenticator app — Strong everyday choice
  • SMS only — Better than off, SIM-swap risk
  • No 2FA on email — High risk

How to do it (step by step)

  1. Google: Google Account → Security → 2-Step Verification; add authenticator; save backup codes.
  2. Apple: Settings → [your name] → Sign-In & Security → Two-Factor Authentication.
  3. Microsoft: account.microsoft.com → Security → Two-step verification.
  4. Prefer authenticator app over SMS when both exist.
  5. Store backup codes on paper at home.
  6. Do not approve mystery login prompts you did not start.

Example: Arjun and his uncle before travel

Arjun turned on Apple ID two-factor and verified a trusted phone number.

He printed backup codes and put them in a home drawer.

Sophie rejected a Google prompt at midnight she did not start — and changed her password.

Common mistakes

  • Approving prompts you did not trigger.
  • Storing backup codes only inside the same email inbox.
  • Leaving email without 2FA.

Trusted places to check

Quick revision

  • On for Google, Apple, Microsoft.
  • Prefer authenticator.
  • Backup codes offline.

Ravindra Bagale's Tip

Save backup codes on paper in a safe place. Still never share live codes with callers.

Quick quiz: check what you learned

  1. What should you do with 2FA backup codes?

    1. Store them offline on paper or a safe place at home
    2. Post them in a WhatsApp group so family can help
    3. Email them to a public address for easy search
    4. Skip them because authenticator apps never fail
    Show answer

    A. Backup codes are your spare keys — keep them offline.

  2. A login prompt appears at 2 a.m. and you were asleep. You should…

    1. Deny it and change your password from a device you trust
    2. Approve it so the “system” can finish an update
    3. Text your OTP to the number shown in the prompt
    4. Turn 2FA off so the prompts stop bothering you
    Show answer

    A. Mystery prompts mean someone else may have your password.

Learn more on this site

Short path above. These pages go deeper:

Frequently asked questions

What is this guide about?

It explains everyday safety for: 2FA setup Google Apple Microsoft, authenticator. Plain steps, no IT jargon required.

What is the one rule to remember?

Turn on 2-Step / two-factor in Google, Apple ID and Microsoft account security pages. Prefer an authenticator app over SMS when you can.

Do I need to be a cyber expert?

No. These steps are for parents, students, shoppers and anyone who uses a phone.

Where do I report if something already went wrong?

India: 1930 and cybercrime.gov.in. US: reportfraud.ftc.gov. UK: Action Fraud. Also tell your bank or the platform quickly.