You can turn off two-step verification in Gmail through your Google Account settings, but Google will ask you to confirm your identity first

Two-step verification adds a second security layer by requiring a code from your phone or security key when you sign in. If you want to remove this requirement, you go through your Google Account security page, confirm who you are, and disable the feature. The process takes a few minutes and works the same way whether you use an authenticator app, text messages, or a security key.

Before you disable it, understand that your account becomes easier to break into if someone learns your password. Two-step verification stops most account takeovers because attackers rarely have access to your phone or security key. Turning it off means you rely only on your password to protect your email, photos, documents, and payment information stored in your Google Account.

Key Takeaways

  • You disable two-step verification through myaccount.google.com under Security, not through Gmail itself.
  • Google requires you to enter your password and pass a verification step before you can turn it off.
  • If you no longer have access to your phone or security key, you may need to use backup codes or recovery options to regain access to your account.
  • Turning off two-step verification removes the code requirement but does not delete your backup codes or recovery phone number.

Steps to disable two-step verification

Go to myaccount.google.com and sign in if you are not already. Click Security in the left menu. Scroll down to the section labeled How you sign in to Google and look for 2-Step Verification.

Click on 2-Step Verification. Google will ask you to confirm your identity by entering your password again. After you enter it, click Disable or Turn off (the exact wording depends on your account settings). Google will show a confirmation message. Two-step verification is now off, and you will only need your password to sign in.

What happens when you disable it

Once two-step verification is off, you can sign into Gmail and other Google services using only your password. You will not receive text messages, authenticator app prompts, or security key requests when you log in. If you ever turn two-step verification back on, your old backup codes and recovery phone number remain saved in your account.

Your backup codes do not disappear when you disable two-step verification. If you ever need them again — for example, if you turn the feature back on — they will still be there. However, if you want to delete them for privacy reasons, you can do that separately in the same Security section.

If you cannot access your phone or security key

If you no longer have the phone or security key you set up for two-step verification, you cannot simply turn it off through the normal steps. Google will ask you to verify your identity using that device, and you will not be able to complete the process without it.

In this situation, use your backup codes. When Google asks for a verification code during sign-in, look for a link that says Can't use your phone? or Use a backup code instead. Enter one of your backup codes. If you do not have your backup codes either, you can use your recovery email address or recovery phone number to regain access to your account. After you regain access, you can then disable two-step verification through the normal method.

Turning two-step verification back on later

If you disable two-step verification and later decide you want the extra security, you can turn it back on through the same Security page. Click 2-Step Verification again and follow the prompts to set it up. You can choose between text messages, an authenticator app like Google Authenticator or Authy, or a physical security key.

When you turn it back on, Google generates a new set of backup codes. Save these codes in a safe place — not in your email or on your computer where someone could find them. If you lose access to your phone or security key again, these codes are your way back into your account.

Why Google recommends keeping two-step verification on

Two-step verification stops most common account attacks because hackers usually only have your password, not your phone or security key. Even if someone buys your password on the dark web or guesses it, they cannot sign in without the second verification step. This protects not just your email but also your Google Drive files, Google Photos, YouTube account, and any payment methods linked to Google.

If you turn it off because the verification codes are inconvenient, consider using a security key instead. A security key is a small physical device that works faster than typing a code and is harder to intercept than text messages or app-based codes. You can buy one for $20 to $50 and use it with multiple accounts.

Frequently Asked Questions

Will disabling two-step verification delete my backup codes?

No. Your backup codes remain in your account even after you turn off two-step verification. If you turn the feature back on later, you can view and use the same codes. If you want to delete them, you can do that separately in the Security section.

Can I disable two-step verification if I lost my phone?

Not through the normal method. You will need to use a backup code, recovery email, or recovery phone number to sign in first. Once you regain access to your account, you can then disable two-step verification. If you have none of these options, you may need to use Google's account recovery process.

What if I disable two-step verification by mistake?

You can turn it back on immediately by going to myaccount.google.com, clicking Security, and selecting 2-Step Verification again. Google will walk you through setting it up. Your old backup codes will still be there if you saved them.

Does disabling two-step verification affect my other Google services?

It affects all Google services that use your Google Account, including Gmail, Google Drive, YouTube, Google Photos, and Google Play. You will no longer need a verification code to sign into any of them. However, some apps or services you have connected to your Google Account may have their own separate security settings.