How to Use Google Authenticator Codes on Windows 10 and 11

Using an authenticator code on your PC sounds handy, especially when your phone is charging in another room or has vanished between the couch cushions. I stumbled upon this option while looking for a desk-friendly backup, and it’s worth a look.

Google doesn’t offer an official Google Authenticator app for Windows. However, compatible desktop apps and browser extensions can generate the same six-digit codes on Windows 10 and Windows 11. You’ll learn how to connect one to Google, verify that it works, and avoid locking yourself out.

What Are Google Authenticator Codes?

Google Authenticator uses time-based one-time passwords, usually shortened to TOTP. These are six-digit codes created from a secret key and the current time. A fresh code usually appears every 30 seconds.

The system works with Google and many other services that offer an Authenticator app, 2FA, or MFA option. Those last two terms mean two-factor or multi-factor authentication: a second check beyond your password.

Key features:

• Changing codes: A stolen code becomes useless shortly after it appears.
• No text message required: The authenticator creates codes without waiting for SMS delivery.
• Broad compatibility: One authenticator can store codes for many supported accounts.
• Offline operation: Code generation doesn’t need an internet connection after setup.
• Extra sign-in protection: Someone who knows your password still needs the current code.

A Windows authenticator is useful if you don’t own a smartphone, need an accessible desktop option, or want a backup. The convenience is genuinely good. There’s a security trade-off, though: your password and second factor may live on the same computer.

Before You Begin

Make sure you have:

• A Windows 10 or Windows 11 PC
• Access to your Google account
• An internet connection for setup
• A current version of Chrome, Edge, or another supported browser
• A safe place for Google backup codes

Create and save your Google backup codes before changing anything. Store them away from the PC, such as in a trusted password manager or a secure printed copy. They’re the spare key you’ll be glad you kept.

Get Your Google Authenticator Secret Key

Every compatible authenticator needs the same starting ingredient: a secret key from Google. Treat this key like a password. Anyone who copies it can generate valid codes for your account.

Step 1: Open Your Google Account

Go to the Google Account website and sign in. Select Security from the menu.

Step 2: Open 2-Step Verification

Find How you sign in to Google, then select 2-Step Verification. Google may ask you to confirm your password or approve another security check.

Step 3: Turn On 2-Step Verification

If 2-Step Verification is off, follow Google’s prompts to enable it. The available first-step choices depend on the recovery and security options connected to your account.

Once it’s active, return to the 2-Step Verification page.

Step 4: Add an Authenticator App

Under Add more second steps to verify it’s you, select Authenticator app. Choose the setup option shown on the page; its wording or placement may vary slightly with Google’s current layout.

Step 5: Display the QR Code

Continue until Google shows an authenticator QR code. Leave this page open while you configure the Windows app or browser extension.

Step 6: Reveal the Secret Key

Select Can’t scan it? beneath the QR code. Google will display a long secret key that you can enter manually.

Step 7: Copy the Key

Copy the secret key without sharing it or saving it in an unprotected text file. Keep Google’s setup window open because you’ll return to it for verification.

Use a Desktop Authenticator on Windows

A desktop app keeps codes outside your browser, which I prefer if the PC is your only practical device. G Authenticator is available through the Microsoft Store and works with Google-style TOTP codes.

The app’s button names can move as it’s updated. Look for the control that adds an account, then choose manual setup when offered.

Step 1: Install G Authenticator

Open the G Authenticator Microsoft Store page, select Get or Install, and wait for Windows to finish.

Open the app from the Microsoft Store page or the Start menu.

Step 2: Add an Account

In G Authenticator, select the option for adding a new account. Depending on the current app version, this may appear as an Add account button or a plus icon.

The plus button is a familiar setup pattern in Windows authenticators:

Step 3: Enter the Google Details

Choose manual entry. Paste the secret key from Google, then give the account a clear name such as Google – personal account.

Check the entry before saving. Mixing up two Google accounts is an easy way to spend ten minutes blaming the wrong thing (I’ve seen that little mess more than once).

Step 4: Save the Account

Save the entry. G Authenticator should display a six-digit code and a timer showing when that code expires.

Step 5: Verify the Code With Google

Return to Google’s authenticator setup window and select Next. Enter the current six-digit code from G Authenticator, then submit it.

Use a newly generated code if the timer is almost empty. Nobody enjoys typing quickly only to watch the code expire at the last second.

Step 6: Finish the Setup

Wait for Google to confirm the code, then select the available completion button. G Authenticator is ready when a fresh code from the app works at Google’s sign-in prompt.

What About WinAuth and WinOTP?

WinAuth and WinOTP appear in plenty of older Windows guides. WinAuth is a legacy option and isn’t actively developed, so I’d skip it for a new setup unless you have a specific reason to keep using it.

Existing WinAuth users can still follow the familiar pattern: select Add > Google, paste the secret key, verify the generated code, and protect the saved configuration with encryption or a password. Test the code before depending on it.

WinOTP uses a similar add-and-save process. If you already have either app working, don’t remove its Google entry until your replacement has passed Google’s verification check.

To disconnect an authenticator, return to the Google 2-Step Verification page, open the Authenticator app settings, and use the available removal or replacement control. Google may change the control’s label or position.

Removing the entry from Google invalidates codes tied to that setup. Confirm another sign-in method works first.

Use an Authenticator Browser Extension

The Authenticator extension in the Chrome Web Store generates TOTP codes inside Chrome and compatible Chromium-based browsers. You can also visit the project’s official site at authenticator.cc.

This route is smooth when you spend your day in a browser. It also puts your password entry and authenticator closer together, so keep the browser, extension, and Windows account protected.

Step 1: Install the Extension

Open the official extension listing in Chrome and select Add to Chrome, then confirm with Add extension. In Edge, use the supported store or extension-install option presented by the browser.

Step 2: Open Authenticator

Select the Extensions button in the browser toolbar, then choose Authenticator. Pinning it to the toolbar makes future codes easier to reach.

The toolbar icon looks like this in versions that use the classic Authenticator design:

Step 3: Open Editing Mode

Select the pencil or editing control in the Authenticator panel. The exact position can vary with the installed extension version.

Step 4: Add an Account

Select the plus button and choose the manual-entry option. Some versions can also scan a QR code or import a QR image, but manual entry works with the Google secret key you already copied.

Step 5: Choose Manual Entry

Open the account-entry choice that lets you type or paste a secret. Its label may appear as Manual Entry or similar wording.

Step 6: Enter Your Account Information

Enter Google as the issuer, paste the Google secret key, and add the correct Google email address as the account name or username. Save the entry.

Don’t paste the secret into a search box or address bar by accident. Browsers remember things like an elephant with a filing cabinet.

Step 7: Check the Generated Code

Open the extension again. Your Google account should now have a six-digit code that changes about every 30 seconds.

Step 8: Verify the Extension With Google

Return to Google’s setup window, select Next, and enter the current code from the extension. Complete the setup after Google accepts it.

The extension actually works nicely once it’s pinned. Copying a code takes only a couple of clicks.

Is a Windows Authenticator Safe?

The code-generation method is the same TOTP system used by phone authenticators. The weak spot is device separation.

If malware takes control of your PC, it may capture your password and reach locally stored authenticator data. Keeping the main authenticator on a separate phone gives an attacker another barrier to cross. A Windows app or extension makes more sense as a convenience option or carefully protected backup.

Protect the PC with these habits:

• Use a strong Windows password: A short or shared password leaves the front door flapping open.
• Turn on device encryption: Encryption protects stored data if the PC is lost or stolen.
• Lock the screen: Press Windows + L whenever you step away.
• Update Windows and the browser: Security fixes close known holes that malware can exploit.
• Limit browser extensions: Every extension gets some level of access, so install only what you trust.
• Keep backup codes elsewhere: A backup stored only on the same PC can disappear with it.
• Consider a security key: A physical security key keeps the second step on separate hardware.

An authenticator code is usually a better choice than an SMS code because it doesn’t depend on your phone number. Still, a security key or a separate trusted device offers better separation than storing everything on one PC.

Move Existing Codes From a Phone

Google Authenticator on Android and iOS can sync codes through a Google account. It also has a transfer feature for exporting accounts as QR codes.

Some desktop extensions can scan a displayed QR code or import a QR image. Be careful with exported QR codes because each one contains the secret needed to generate valid codes. Delete any temporary image after importing it, then empty the Recycle Bin.

A safer, slower method is to reconnect each service separately:

1. Sign in to the service using your current authenticator.
2. Open its Security, 2FA, or MFA settings.
3. Replace or reconfigure the Authenticator app method.
4. Add the new secret to your Windows authenticator.
5. Verify a code from Windows.
6. Confirm your recovery methods before removing the old entry.

Google’s synced mobile codes don’t automatically appear in an unrelated Windows app or extension. Each third-party tool needs the relevant secret or a supported import.

Tips and Troubleshooting

The Code Is Incorrect

TOTP codes depend on accurate time. If the PC clock is wrong, the authenticator and Google disagree about which code belongs to the current 30-second window.

1. Open Settings > Time & language > Date & time.
2. Turn on Set time automatically.
3. Check that Time zone is correct.
4. Select the available option to synchronize the clock.
5. Wait for a fresh code and try again.

The Old Authenticator Stopped Working

Replacing an authenticator setup can create a new secret. Apps linked to the previous secret will keep producing codes, but Google won’t accept them.

Remove the outdated entry from the old app only after the newly connected authenticator passes a sign-in test.

The App Shows the Wrong Google Account

Check the account name and secret key. If you copied a key from another Google account, delete that entry and repeat the setup from the correct account’s 2-Step Verification page.

You Lost Access to the PC or Phone

Use a Google backup code, a registered security key, or another recovery method connected to the account. Once signed in, replace the missing authenticator through Google’s security settings.

Avoid depending on one device. One spilled coffee shouldn’t control access to your digital life.

The Extension Disappeared

Select the browser’s Extensions button and check whether Authenticator is enabled. Pin it again if it’s merely hidden.

If the extension was removed along with its stored data, reinstalling it may not restore your account secrets. Use a backup or another sign-in method, then reconnect the authenticator.

Can You Use the Same App for Other Accounts?

Yes. Any service offering TOTP may work with the same Windows app or extension. Look in the service’s security settings for labels such as Authenticator app, 2FA, MFA, or Time-based one-time password.

Each account gets its own secret. Give every entry a clear name so identical six-digit codes don’t turn your extension into a very confusing junk drawer.

Which Windows Authenticator Method Should You Choose?

Method	Best For	Main Trade-Off
G Authenticator	A separate Windows app	Codes remain on the same PC used to sign in
Authenticator browser extension	Quick access while browsing	Browser compromise may expose passwords and codes
Phone authenticator	Better separation between sign-in and verification	Requires a nearby phone
Hardware security key	Strong protection and separate hardware	Requires buying and carrying a key

A desktop app is my pick when a Windows authenticator is genuinely necessary. The browser extension is clever and convenient, but I’d reserve it for accounts where that convenience outweighs having both sign-in pieces in one browser.

Google-compatible authenticator codes on Windows are a handy little gem for people who need a desktop option. Set up recovery codes, secure the PC, and test everything before retiring an old authenticator. I’d recommend bookmarking Google’s security page too; it saves hunting through account menus during a lockout scare.

Response Format

Return your response in this exact format: