Home / For staff / Two-step verification
Hand holding a black phone, displaying colourful icons.

Enabling Two-Step Verification

Two-step verification is the recommended sign-in process for your National Centre for Atmospheric Science Google Account. You should have two-step verification enabled on your Google Account.

Two-step verification adds an extra layer of security to your account by requiring you to enter a verification code in addition to your usual username and password. When you log-in, you will receive your unique verification code via text message to your mobile phone, or via a smartphone application called Google Authenticator.

This added security feature will help protect your account from unauthorised access due to a compromised password. Even if you password is cracked, guessed or stolen, an attacker cannot sign in without a verification code – which only you can obtain.

Your login process will look slightly different with Two-Step Verification. You will be asked to enter your usual username and password. Then, you will be asked to enter a six digit code.

How to turn on Two-Step Verification

All staff are required to turn on Two-Step Verification. It only takes five minutes. You will need to have your mobile phone to hand.

If you don’t feel confident enough to set up Two-Step Verification, then ask your local computer support team to walk you through the process.

1. Navigate to Google
2. Select ‘Sign In’ and enter your NCAS Google username and password
3. Visit the two-step verification settings
4. In the Two-Step Verification” box on the right, select ‘Start Setup.’
5. Next, select ‘Get Started.’ You will be prompted for your username and password again.
6. Now, you will need to enter the phone number of the device you will use for your verification.
7. When you have entered your phone number, select ‘Try It.’
8. You should receive a text message containing a six digit code.
9. Enter the six digit code when prompted. Then, select ‘Next.’
10. You will be asked to turn on Two-Step Verification. Select ‘Turn On’ and Two-Step Verification will be enabled on your account.

If you would rather use the Google Authenticator application than receive text messages. Download the Google Authenticator application from the App Store, and follow our instructions.

How to install the Google Authenticator on Android

The Google authenticator app will allow you to receive codes even if you don’t have an Internet connection or mobile service. This is a small lightweight app that can be downloaded for Android and iPhone.

Android Requirements

Your Android device must be running Android version 2.1 or later.

Downloading the application

1. Visit Google Play.
2. Search for Authenticator and find Google Authenticator by Google Inc.
3. Select ‘Install’

Setting up the application

1. On your computer, go to the 2-Step Verification settings page select Authenticator app and click on Android.
2. On your mobile device, open the Google Authenticator application.
3. If this is the first time you have used Authenticator, select Begin setup.

To link your mobile device to your account

Using QR code
1. Select ‘Scan A Barcode’
2. Point your camera at the QR code on your computer screen.

Using secret key
1. Select ‘Enter Provided Key’
2. Then enter the email address of your Google Account in the ‘Enter Account Name’ box.
3. Next, enter the secret key on your computer screen in the ‘Enter Your Key’ box. Make sure you’ve chosen to make the key ‘time based’, then select ‘Add.’
4. To test that the application is working, enter the verification code on your mobile device into the box on your computer next to ‘Code’, then click ‘Verify.’
5. If your code is correct, you will see a confirmation message. Click ‘Save’ to continue the setup process.
6. If your code is incorrect, try generating a new verification code on your mobile device, then entering it on your computer.
7. If you’re still having trouble, you might want to verify that the time on your device is correct.

How to install the Google Authenticator on iPhone

The Google authenticator app will allow you to receive codes even if you don’t have an Internet connection or mobile service. This is a small lightweight app that can be downloaded for Android and iPhone.

iPhone Requirements

You must have iOS 5.0 or later and you must have a 3G model or later.

Downloading the application

1. Visit the App Store.
2. Search for Google Authenticator.
3. Download and install the application.

Setting up the application

1. If you haven’t already, complete the SMS/Voice setup and enroll your account in 2-Step Verification using your phone number. You can add the Google Authenticator app only after you’ve already enrolled using your phone number.
2. On your computer, go to the 2-Step Verification settings page and click on iPhone.
3. On your mobile device, open the Google Authenticator application.
4. Tap the ‘Plus’ icon.
5. Tap ‘Time Based.’

To link your mobile device to your account

Using Barcode
1. Tap ‘Scan Barcode’ and then point your camera at the QR code on your computer screen.

Using Manual Entry
1. Tap ‘Manual Entry’ and enter the email address of your Google Account. Then, enter the secret key on your computer screen into the box next to Key and tap ‘Done.’
2. To test that the application is working, enter the verification code on your mobile device into the box on your computer next to Code, then click ‘Verify.’ The clock icon on your mobile device will let you know how much time is left before the verification code expires and a new one is generated.
3. If your code is correct, you will see a confirmation message. Click ‘Save’ to confirm.
4. If your code is incorrect, try generating a new verification code on your mobile device, then entering it on your computer.
5. If you’re still having trouble, you might want to verify that the time on your device is correct or read about common issues.

Frequently asked questions

Do I need to enter the code every time I sign in?

You need to enter a new code every 30 days or after deleting your web browser’s cookies. On the sign in page select the option to ‘Remember Verification For This Computer’ on your computer. This means you won’t have to re-enter your code for 30 days.

Do not select this option for a public computer, such as a shared computer in an Internet cafe.

When do I need a verification code?

The verification code is only needed to sign in to your NCAS Google account and not any other IT systems.

Will my password change?

No, your password stays the same.

What if I don’t have my mobile phone when I need to sign in?

During the setup process, you can setup codes that you can write down and use when you don’t have your phone. Otherwise, you can contact the NCAS IT Team who can temporarily disable Two-Step Verification for you.

I just enrolled in Two-Step Verification, and now I can’t access email on my phone

You will need to create application specific passwords for any mobile devices or desktop applications that stop accessing Google.

You can find instructions on Application Specific Passwords provided by Google.

You should use the Application Specific Password with the mobile device or desktop application instead of your normal password. This is a process that only needs to be set up once.

My phone was lost or stolen

Contact your domain administrator. Your administrator can turn off Two-Step Verification for your account so you can sign in without a code or use backup options. You can select to have the verification codes sent to your backup phone or use one of your printable backup codes to sign in.

I lost my backup codes and I want to revoke them

If you lost the print-out of your backup codes, you can revoke them on your settings page. Click ‘Show Codes’, then click ‘Generate New Codes’. This will invalidate the previous set of backup codes and generate a new set.

If you have any trouble using the guide above, simply drop a message to our IT team.