· 1 min read
2-step verification for Google and YouTube: authenticator codes explained
2-step verification is the single most effective way to protect a YouTube channel. This guide explains how authenticator codes work and how to set them up.
What 2-step verification does
With 2-step verification, signing in needs your password plus a second proof, such as a code from an authenticator app. Someone who learns your password still cannot get in.
YouTube also requires 2-step verification for channels in the YouTube Partner Program, so it is worth enabling early.
How authenticator codes work
When you add an authenticator, Google shows a QR code that contains a secret key. Your app uses that key and the current time to create a new six-digit code every 30 seconds.
Because the code depends on the time, the date and time on your device must be correct. A wrong clock is the most common reason codes are rejected.
Turning it on
Open your Google account security settings, choose 2-step verification and follow the steps. Add an authenticator app and, as a backup, a phone number you control.
Print or save the backup codes and keep them offline. They let you sign in if you lose your phone.
Generating codes in your browser
If you already have the secret key, our free authenticator tool turns it into the current code directly in your browser. Keys are never sent to or stored on our servers, and they disappear when you close or refresh the tab.
You can also generate codes for many keys at once, which helps when you manage several accounts.
Keep the key private
Anyone with your secret key can create valid codes. Never share it, never send it in chat and do not store it in screenshots you share.
If you think a key has been exposed, remove that authenticator from your Google account and add a new one.