A Simple Guide to Authenticator Apps

Take the most important step to lock your digital doors: Two-Factor Authentication (2FA) using an Authenticator App.

Think of 2FA like a second lock on your front door. Even if a scammer steals your password (the first key), they still can’t get in without the special 6-digit code generated by the app on your phone. This makes your accounts dramatically safer.

Which App Should You Use?

Most people choose between Google Authenticator and Microsoft Authenticator. Both are free, highly secure, and work similarly.

  • Google Authenticator: Best for simplicity and those who use Gmail/Google services.
  • Microsoft Authenticator: Great if you use Outlook or work/school accounts, as it often allows you to just tap “Approve” instead of typing a code.

Both apps also offer cloud backup, which means if you lose your phone, you won’t lose access to your accounts. We’ll cover how to enable this below.

How to Set It Up (Step-by-Step)

Step 1: Download the App

Go to the App Store (iPhone) or Google Play Store (Android). Search for “Google Authenticator” or “Microsoft Authenticator” and install it.

Step 2: Enable Cloud Backup (Important!)

Before adding any accounts, turn on backup in the app:

  • Google Authenticator: Open the app → Tap the three dots (menu) → Settings → Turn on “Cloud backup” and sign in with your Google account.
  • Microsoft Authenticator: Open the app → Tap the three dots (menu) → Settings → Turn on “Cloud backup” and sign in with your Microsoft account.

This ensures you won’t be locked out if you lose your phone or get a new one.

Step 3: Enable 2FA on Your Account

Log in to the website you want to protect (like your bank, email, or social media) on a computer.

  1. Go to Settings or Security.
  2. Look for “Two-Step Verification,” “Two-Factor Authentication,” or “Multifactor Authentication.”
  3. Choose the option to use an “Authenticator App” (not SMS/text message, which is less secure).

Step 4: Link the App

A QR Code (a black-and-white square) will appear on your computer screen.

  1. Open the Authenticator app on your phone.
  2. Tap the “+” icon or “Add Account.”
  3. Select “Scan a QR Code” or “Work or school account” (for Microsoft).
  4. Point your phone camera at the computer screen to scan the square.

Step 5: Verify

The app will now show a 6-digit code that changes every 30 seconds. Type the current code into the website on your computer to finish the setup. You’re done!

Important: Save Your Backup Codes

Most websites will offer you a set of backup codes (usually 8–10 single-use codes) after enabling 2FA. Save these codes in a safe place—not on your phone! Print them out or store them in a password manager. If you ever lose access to your authenticator app, these codes will get you back into your account.

What If I Lose My Phone?

If you’ve enabled cloud backup (Step 2), simply:

  1. Install the authenticator app on your new phone.
  2. Sign in with the same Google or Microsoft account you used for backup.
  3. Your accounts will automatically restore.

If you didn’t enable backup, you’ll need to use your saved backup codes to log in, then re-enable 2FA with your new device.

Which Accounts Should I Protect First?

Start with these critical accounts:

  1. Email (Gmail, Outlook, Yahoo) – Your email is the “master key” to everything else.
  2. Banking and financial accounts
  3. Social media (Facebook, Instagram, X/Twitter)
  4. Shopping accounts (Amazon, PayPal)
  5. Cloud storage (Google Drive, Dropbox, iCloud)

Official Setup Guides

For platform-neutral instructions on setting up 2FA, visit these trusted resources:

One More Thing: Avoid SMS/Text Message 2FA When Possible

While SMS-based 2FA (getting a code via text) is better than nothing, it’s vulnerable to “SIM swap” attacks where scammers trick your phone carrier into transferring your number to their device. Authenticator apps are much more secure because the codes are generated locally on your phone and never sent over the network.

Similar Posts