If Google says your organization requires 2-Step Verification, follow the method and enrollment deadline set for your work or school account. A personal-account preference cannot override an administrator’s enforcement policy.
Confirm the account and requirement
Read the full address on the sign-in screen. If you also use personal Gmail, make sure you have not selected the organization account accidentally.
Ask your administrator which methods are permitted, when enforcement begins, and how to obtain help before the deadline. Google’s administration guide allows policies for particular groups or organizational units, so colleagues may not see identical requirements.
Enroll using the approved method
- Open the managed Google Account’s Security & sign-in settings.
- Open 2-Step Verification and complete the setup offered.
- Use the method approved by the organization.
- Confirm that enrollment completed, rather than stopping after entering a phone number.
- Check the permitted backup arrangement with the administrator.
An organization can allow several methods, exclude text and phone-call codes, or require the security-key category of methods. Google’s current admin guide says the Only security key policy also supports passkeys. Do not assume SMS must be available.
If you are already locked out
Use an existing permitted backup if the sign-in flow offers it. Otherwise contact the administrator through the organization’s known support channel. A password reset alone may not satisfy an enforced verification requirement.
For a security-key-only policy, Google’s admin guide says users cannot generate their own backup verification codes; the administrator provides the relevant codes under the organization’s procedure. Do not confuse these with a personal account’s self-generated backup-code set.
Avoid weakening protection to regain convenience
Do not create an unmanaged account to bypass the requirement, transfer organization files into personal storage, or ask a colleague to lend you their authentication identity.
If you need an accessible alternative or have lost the required device, explain that to the administrator. Preserve any working session while they establish the supported route. Once access returns, verify the approved backup before replacing the phone or key you depend on.
Browse Gmail & Google Account help
References
- Deploy 2-Step Verification | Security & data protection | Google Workspace Help
- Turn on 2-Step Verification
- Fix common issues with 2-Step Verification
Reviewed against the linked official and developer guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.