Use a security key for 2-Step Verification

Security keys can be used with 2-Step Verification to help you keep hackers out of your Google Account.

Important: If you’re a journalist, activist, or someone else at risk of targeted online attacks, learn about the Advanced Protection Program.

Step 1: Get your keys

• Use a compatible phone's built-in security key
• Buy Titan Security Keys from the Google Store
• Order a compatible security key from a retailer you trust

Step 2: Add a key to your account

1. Open a compatible browser, like Chrome, FireFox, or Safari (13.0.4 or higher).
2. Enroll your security key. You might need to sign in.

Tip: To help you sign in if your key is lost, add more ways to prove it's you. 

Step 3: Sign in with your key

Security keys are a more secure second step. If you have other second steps set up, use your security key to sign in whenever possible. If a security key doesn't work on your device or browser, you might see an option to sign in with a code or prompt instead.

If you receive the error, “You need to register this Security Key to your Google Account before you can use it to sign in”:

1. Attempt to sign in with a different account.
2. Update your Google Play service.
3. To add the account in question, try to sign in again.

Tip: You’ll be asked for your security key or another second step any time you sign in from a new computer or device.

With your phone's built-in security key

If you haven’t already, first add your compatible phone’s built-in security key to your Google Account.

Sign in with your Android phone's built-in key

1. Make sure Bluetooth is turned on for both devices.
2. Sign in on the new device:
   • On a computer or Chromebook, sign in to your Google Account using a supported browser, like Chrome.
   • On an iPhone or iPad, sign in to your Google Account using the Smart Lock app.
3. Check your Android phone for a notification.
4. Double-tap the "Are you trying to sign in?" notification.
5. Follow the instructions to confirm it’s you signing in.

Sign in with your iPhone's built in key

1. Make sure Bluetooth is turned on for both devices.
2. Sign in to your Google Account on a Chrome OS (version 79 and above), iOS, macOS, or Windows 10 device.
3. Check your iPhone for a Smart Lock notification. Tap the notification.
4. To verify your sign-in, tap Yes.

With a security key you purchased

1. On your computer, open a compatible browser like Chrome, Firefox, Edge, or Opera.
2. Sign in to your Google Account. Your device will detect that your account has a security key.
3. Connect your key to the USB port in your computer.
4. If you see a message from "Google Play services," select OK. If not, move on to step 5.
5. Activate your key:
   • If your key has a gold disc, tap it.
   • If your key has a gold tip, tap and then press it.
   • If your key has a button, press it.
   • If your key has none of these features, you may need to remove and reinsert it. This type of key turns off after each use.

Tip: You can use your key each time you sign in or skip using it on devices you trust.

Organize your security keys

You can manage your security keys under your 2-Step Verification settings. There, you’ll find a list of the keys you’ve added, from the most recent to the oldest. You’ll also find more info such as the key's name, the date it was added, and the date it was last used. The key’s name defaults to “Security Key” unless you choose a custom name.

You also have the option to edit each security key’s name or to delete it.

Rename your security keys

Next to each security key, click on the pencil icon to edit its name. This means that if you have multiple security keys, you can better identify them with a custom name.

When you click on the pencil icon , a prompt asks you to type a custom name for your security key. You can choose a name up to 20 characters in length.

Remove your security keys

Next to a security key, click on the trash bin icon to remove it so that it’s no longer connected to your Google Account. When you remove your security key, you’ll be asked for confirmation. You may also need to sign in to your Google Account again.

Unable to use security key

If you’re unable to use your security key, you can generate a security code to use 2-step verification:

1. With your other device that’s signed in to your account, go to g.co/sc.
2. To get your security code, follow the instructions on screen.

Lost security key

If your security key is lost, you can follow these steps to get back into your account and protect it. Choose the right steps for you depending on whether you’ve set up another second step like:

• Verification codes
• Google prompts
• Backup codes
• A different security key you’ve added to your account
• A registered computer where you previously chose not to be asked for a verification code

If you have another second step

1. Sign in to your Google Account with your password and your other second step.
2. Follow the steps to remove the lost key from your account.
3. Get a new security key. You may want to get an extra key you can keep in a safe place.
4. Add the new key to your account.

If you don’t have another second step or forgot your password

Note: 2-Step Verification requires an extra step to prove you own an account. Because of this added security, it can take up to 3-5 business days for Google to make sure it’s you trying to sign in.

1. Follow the steps to recover your account. You'll be asked some questions to confirm it's your account.
   • Use these tips to answer as best you can.
2. You may be asked:
   • To enter an email address or phone number where you can be reached.
   • To enter a code sent to your email address or phone number. This code helps make sure you can access that email address or phone number.

Related resources

•  Gmail Security and Privacy Settings