Google Authenticator 7.2 for Android

Google Authenticator 7.2 for Android is Google's free app for two-step verification: it generates short codes you enter after your password to prove that it is really you. You can download it from Google Play; the answers below cover setup, backups and common questions.

What does Google Authenticator do?

Passwords alone are easy to steal. Two-step verification adds a second factor, and Google Authenticator provides it in the form of one-time codes. When you enable two-step sign-in on a website or service, it shows a QR code; you scan it with the app, and from then on the app shows a fresh short code for that account that changes at regular intervals. At sign-in you type the current code after your password, so a thief who knows only the password gets stuck. The codes are generated on your phone and work even without a mobile signal. Google released the first version on 20 September 2010, and the app has become one of the standard tools for protecting email, social networks, crypto exchanges, developer platforms and work accounts. It is not limited to Google accounts: any service that supports authenticator apps works with it.

How do I set it up?

1. Install Google Authenticator from Google Play; the developer should be Google LLC.
2. In your account's security settings on a website, choose to add an authenticator app.
3. In the app, tap the plus button and scan the QR code shown on the screen.
4. Enter the code from the app on the website to confirm, and save the backup codes the site gives you.

Google's own step-by-step help is on the Google Authenticator support page.

What if I lose my phone?

That is the main risk. Keep the backup codes each service provides in a safe place, and before you change phones, move your accounts to the new device using the transfer options in the app. Without either, you may need to go through each service's account recovery.

How big is the app?

About 4.77 MB according to catalogue data, so it fits on any phone.

Is Google Authenticator safe?

Yes, when installed from Google Play. Beware of look-alike apps with similar names and icons. Lock your phone with a PIN or fingerprint, since anyone who can open the app can read your codes. Never read codes to someone who calls or messages you asking for them.

Is it free?

Yes, completely free, with no ads.

What are the pros and cons?

• Pro: strong extra protection for many services.
• Pro: works offline.
• Pro: tiny and free.
• Con: losing the phone without backups can lock you out.
• Con: codes must be typed by hand.

What are the alternatives?

Within our listings, Google Authenticator is the dedicated authenticator app in the Android tools category. For protecting app access on the phone itself, AppLock adds a lock screen to chosen apps, which complements rather than replaces two-step verification.