Practical 2: Setting Up and Configuring
Two-Factor Authentication (2FA) on a
Mobile Phone
Objective:
To understand the process of enabling and configuring two-factor authentication (2FA) on a
mobile device to enhance account security.
Overview:
This practical involves setting up 2FA for an online account (e.g., Google) using a mobile
authenticator app like Google Authenticator, Microsoft Authenticator, or Authy. The
purpose is to experience firsthand how 2FA adds an extra layer of protection beyond
passwords.
Tasks Performed:
1. Chose an Online Account:
- Selected Account: Google Account (Gmail)
2. Downloaded an Authenticator App:
- App Used: Google Authenticator
- Installation Source: Google Play Store / App Store
- Device Used: Mobile phone (e.g., Android)
3. Enabled 2FA in Account Settings:
- Navigated to: Google Account > Security > 2-Step Verification
- Clicked on "Get Started"
- Verified account using password
4. Scanned QR Code / Entered Secret Key:
- Chose Authenticator App option
- A QR code was displayed
- Opened Google Authenticator and tapped on "+" to add new account
- Scanned the QR code provided by Google
5. Verified Setup:
- The app generated a 6-digit time-based OTP
- Entered the code on the website to complete setup
- Setup was successfully verified
6. Saved Backup Codes:
- Google provided 10 backup codes
- Noted them down securely (offline or encrypted storage)
- These codes can be used to log in if access to the phone is lost
Expected Outcome Achieved:
✅ 2FA was successfully enabled for the selected Google account
✅ Time-based OTPs are now required during sign-in
✅ Backup codes stored securely
✅ Understood how 2FA helps prevent unauthorized access even if the password is
compromised
Conclusion:
This practical demonstrated the step-by-step process of configuring 2FA, highlighting its
importance in protecting personal accounts from cyber threats. By combining something
the user knows (password) with something the user has (OTP from mobile device), 2FA
significantly increases account security.