Loading page
About this tool
Interactive walkthrough for turning on Google 2-Step Verification, passkeys and backup codes, with a live account-hardening score.
This local checklist walks through the practical Gmail and Google Account hardening flow: recovery details, 2-Step Verification, authenticator apps, passkeys or security keys, backup codes, SMS removal, app-password cleanup and a recovery test. It does not connect to Google, ask for a password, or store backup codes; it only tracks which safety steps you tick in the browser.
Open Gmail 2FA Setup Guide on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
The tool is a checklist and explainer; it never signs in to Google or sends your account details anywhere.
Critical controls such as 2-Step Verification, passkeys and backup codes count more than optional hygiene tasks.
The guide starts with recovery phone, recovery email and backup codes so users do not lock themselves out.
Yes for phishing resistance. A passkey or hardware security key is cryptographically bound to the real Google domain, while an authenticator code can still be typed into a convincing fake sign-in page.
If you have tested a stronger method and saved backup codes, removing SMS reduces SIM-swap risk. Do not remove it until another recovery path is confirmed.
Store them in a trusted password manager or on paper in a safe place. Do not store them in Gmail drafts, photos, chat messages, or the same phone that receives your second factor.
No. It is not connected to any Google API. It only provides a browser-side checklist and progress score.