Two-step verification adds an authenticator code to a supported sign-in flow. It makes possession of your password alone less useful to someone trying to enter your account. Set it up carefully while you still control your email and phone.
Follow the visible setup
Open the Security Center, then Two-Factor Authentication if available. Start the setup and add the displayed account to your authenticator. Use the scan or manual setup information offered on that screen. Enter the current six-digit code to confirm. Until confirmation succeeds, do not assume the protection is active.
Prepare a recovery option
If the screen offers Recovery codes, save them somewhere private away from the phone you could lose. Read what creating a new set does before confirming. Do not confuse these saved codes with the changing six-digit authenticator code. Read account recovery before changing phones or removing an authenticator.
When signing in
Use the verification prompt shown by your app. If a code expires, wait for the next one and enter it carefully. Do not repeatedly submit the same rejected code. Check your device time if codes keep failing, and use in-app support if the problem continues.
Know what each protection does
A passkey, local fingerprint unlock and authenticator challenge are different protections. Their availability varies by client. Never disable a protection because a stranger tells you it will unlock earnings or fix an account.