Enabling Google's 2-Step Verification

Two-step verification (“2SV”) provides an extra layer of security for your UCSB Connect account(s).

The 2SV formula combines 2 factors: “something you know” (such as your username and password) and “something you have” (such as a temporary code sent to your phone via voice/text or a USB key).

Note: To enable 2SV on your UCSB Google account, you will need a phone in order to receive an activation code from Google via voice/text.

 

Step 1: Go to https://myaccount.google.com/signinoptions/two-step-verification/enroll-welcome.

Step 2: Log in to your account.

Step 3: Click “Get Started”

Step 4: Enter your password.

Step 5: Enter your phone number, delivery preference (Text message or Phone call), and then click “Next".

Step 6: Enter the verification code you were provided by text/phone and select “Next”.

Step 7: Click "Turn On".

Step 8: You have now activated 2SV. Even if you “trusted” your computer, you will still be prompted to enter another 2-step verification code about every 30 days. In the Google Web App, the code prompt will look like this:


 

Step 9 (optional):  You can also use Google Notifications or a Signature Key by clicking on "Show more options".

Instructions for how to set up your Gmail account to receive Google Notifications:

Step 10 (optional):  If you are using a non-Android phone such as an iPhone or Windows phone, or if you use an email client on your computer such as Thunderbird, Apple Mail, or Mac Outlook, you will need to reconnect those apps and devices to your Google account. Google should prompt for this immediately after enabling 2FV:

Step 11 (optional):  To reconnect your apps and devices at any time, visit https://myaccount.google.com/ and click “Security”, then follow the steps below:

Under "Signing in to Google", click “App passwords” (2SV must be On):

Enter your account password:

Under "Select app" > choose "Mail":

Under "Select device" > choose the device from the dropdown list.  Click "Generate".  Then skip to the final step of these instructions with your "Generated app password".  If you are using a device or mail client not shown in the "Select device" dropdown menu, such as Thunderbird or Outlook, select "Other (Custom name)" instead:

Enter the name of the "Other" mail client or device.  Then click "Generate":

Open the mail client or device with your configured Gmail account.  When doing so, you will receive a prompt that your previous password is no longer valid and to enter the new one.  Enter the 16-character App Password as seen on the "Generated app password" screen.  You are now logged into your Gmail account with 2SV and your App Password as the authentication method.