How to Configure Gmail Security Settings (Step-by-Step)
Summary: This article walks through configuring key security settings in your Google account, including 2FA, recovery options, and backup codes.
Who This Applies To
All users setting up or reviewing their Google Workspace security settings
Prerequisites
- Active Google Workspace account
- Access to your mobile device
Step-by-Step Configuration
- Access Your Security Settings
- Go to: https://myaccount.google.com
- Click Security
- Enable 2-Step Verification
- Under “How you sign in to Google”, click 2-Step Verification
- Click Get Started
- Follow prompts to:
- Add your phone (initial setup)
- Add authenticator app (recommended)
- Set Up Authenticator App (Recommended)
- In 2-Step Verification settings, select Authenticator app
- Choose your device type
- Scan the QR code using Google Authenticator
- Enter the generated code to confirm
- Generate Backup Codes
- In 2-Step Verification settings, click Backup codes
- Click Generate
- Save the codes securely in:
- Box
- Or your password manager
- Add Recovery Options
- Go to Security → Ways we can verify it’s you
- Add:
- Recovery phone number
- Recovery email address
- Review Devices
- Go to Security → Your devices
- Review active sessions
- Remove any unfamiliar devices
- Review Third-Party Access
- Go to Security → Third-party apps with account access
- Remove apps you don’t recognize or no longer use
Optional (Admin-Recommended)
- Enable Security alerts
- Use company-approved password manager (e.g., 1Password)
- Avoid using App Passwords unless explicitly required
Troubleshooting
Can’t find 2-Step Verification?
→ Contact IT (may be enforced or restricted)
Lost access to authenticator app?
→ Use backup codes or recovery options
Need Help?
Reach out to IT if you need assistance completing these steps.