Search
Clear search
Close search
Google apps
Main menu

    Set up 2-Step Verification

    Troubleshoot 2-Step Verification

    Users should see Frequently asked questions for answers to common user questions.

    The G Suite Service Level Agreement does not apply to any services used in connection with 2-Step Verification if the verification process relies on third-party voice or data providers to deliver the verification code.

    Account Recovery and Support for Administrators

    For which editions of G Suite is 2-Step Verification available?

    2-Step Verification is available for all editions of G Suite. However, the enforcement and user backup codes features aren't available for Google Apps Free edition (legacy).

    My user lost their phone and is locked out of their account.

    Instruct your user to use one of their backup codes to sign in.

    Backup codes are provided on their Sign-in verification page when they enroll in 2-Step Verification. These act as backup one-time passwords for use in case they lose their phone. We strongly suggest users to print or write down these codes and store them securely.

    If your user has lost their phone and doesn't have their backup code, you can obtain a backup code for them via: Admin console > Users > (select user) > Security > Show backup verification codes

    My user didn't enroll in 2-Step Verification and is locked out of their account.

    To unlock the user's account:

    1. Add the user to the exception group you created when setting up 2-Step Verification enforcement. If you didn't yet set up an exception group, see the instructions.
    2. Make sure the user has enrolled in 2-Step Verification: On the dashboard, click Reports, then select Security. Check the 2-Step Verification Enrollment column to see which users have enrolled.
    3. Remove the user from the exception group.

    I'm a G Suite administrator, and I'm locked out of my account.

    If you've lost your phone, and you don't have your backup codes, and you don't have access to a device that you've accessed your Google Account from via 2-Step Verification in the last month, you should contact another administrator on the domain whom will be able to provide backup codes to you.

    If you're still unable to access your account, have another G Suite administrator contact Google via the G Suite direct contact channel. They will need to provide their customer PIN which is in their G Suite control panel under the Support tab.

    If another G Suite administrator is not available, you can try to recover your account by following the account recovery steps by clicking "Need Help?" on admin.google.com.

    Will 2-Step Verification work with my company's single sign-on (SSO) service?

    If SAML single sign-on (SSO) is enabled for your domain Google's 2-Step Verification will not apply when logging on through your SSO. Super Administrators, however, will continue to sign in using Google authentication and therefore can, and should, use Google's 2-Step Verification. See SAML SSO Service for G Suitefor additional details on using SSO for your domain.

    Account Support for End Users

    The URL https://www.google.com/accounts/SmsAuthConfig doesn't take me to the 2-Step Verification setup page.

    If this link isn't working, or if it just takes you to a Google Accounts page that you can't sign in to, follow these steps to enable 2-Step Verification for your account:

    The URL https://www.google.com/accounts/IssuedAuthSubTokens doesn't take me to the application-specific passwords page.

    Follow these steps to access your application-specific password page.

    See Frequently asked questions for additional answers to user questions.

    Was this article helpful?
    How can we improve it?
    Sign in to your account

    Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.