Two-factor authentication is one of the best things you can do for your security, and an authenticator app is the easiest strong way to do it. It takes about two minutes per account and makes a stolen password almost useless. Our GetMyPassword team walks through how to set up an authenticator app, step by step, and how to avoid the one mistake that locks people out.
What an authenticator app is
An authenticator app generates a six-digit code that changes every 30 seconds, which you enter after your password when logging in. Because the code is created on your device and never sent over the network, it is safer than SMS codes, which can be intercepted or stolen through SIM swaps. Popular choices include Google Authenticator, Microsoft Authenticator and Authy.
Set it up step by step
- Install an authenticator app from your official app store.
- On the account you want to protect, open security settings and choose two-factor authentication → authenticator app.
- Scan the QR code shown, using the app’s “add” button.
- Enter the six-digit code the app displays to confirm, and turn 2FA on.
The step everyone forgets: backups
Here is what locks people out: when you enable 2FA, the site shows a set of recovery codes — save them. Store them in your password manager or print them. If you ever lose your phone, those codes are how you get back in. Many authenticator apps also offer an encrypted cloud backup or multi-device sync; turning that on means a lost phone is an inconvenience, not a lockout.
The only real risk with an authenticator app is losing your phone without a backup. Save your recovery codes the moment you turn 2FA on, and that danger disappears entirely.
Strong password first, then the app
Two-factor authentication is a second layer, not a replacement for a good password. Give each account a unique password from our password generator, store it in a password manager, then add an authenticator app on top. Together they are formidable: even if your password leaks, no one logs in without the code on your phone. Start with your email and banking, then add the rest over time.
Frequently asked questions
How do I set up an authenticator app?
Install an authenticator app, open two-factor authentication in your account’s security settings, choose the authenticator-app option, scan the QR code, and enter the six-digit code to confirm. Then save the recovery codes shown.
Is an authenticator app better than SMS codes?
Yes. Authenticator codes are generated on your device and never sent over the network, so they cannot be intercepted or stolen through SIM-swap attacks the way SMS codes can. They are the more secure choice.
What happens if I lose the phone with my authenticator app?
You use the recovery codes you saved when enabling 2FA to get back in, or restore from the app’s cloud backup if you set one up. This is why saving recovery codes is essential.