By Alex Carter, Editor at GetVerifyCode
A Google security code is a short-lived sign-in code you create yourself, not a text message Google sends you. On an Android phone already signed in to your account, you get a 10-digit code under Settings, Google, Manage your Google Account, Security. Work or school accounts with a security key can generate one at g.co/sc.
Key facts
- Google says an Android phone running Android 6.0 or later can generate a 10-digit security code from Settings, Google, Manage your Google Account, Security or Security & sign-in, Security code.
- Google says you don't need an internet connection or mobile service to get these codes on Android.
- Google's Workspace help says users can generate security codes via g.co/sc when their admin allows it.
- Google says g.co/sc security codes are valid for 5 minutes and are different from Google Authenticator codes.
What is a g.co/sc security code?
Google uses the words "security code" for codes you make on a device you already trust, then type on the device where you're signing in. That is the opposite of an SMS verification code, which Google sends to your phone number. Google documents two cases:
- The Android security code. If you sign in from a different location than usual, Google may ask for a code from your phone. Your signed-in Android phone creates a 10-digit code for you to enter.
- The g.co/sc security code. In Google Workspace (work and school accounts), an admin can let users generate security codes via g.co/sc for sign-ins that use a security key.
Both prove you have something only you should hold: a phone that is already signed in, or your own security key. Neither one should ever be sent to you by a stranger.
How to get a Google security code on Android
Google's Account Help page gives these steps for Android 6.0 and later:
- On your Android phone, open Settings and tap Google.
- Tap Manage your Google Account.
- Tap Security (or Security & sign-in), then Security code. Enter your phone password and pick the account if asked.
- When the phone shows a 10-digit code, type it on the device you want to sign in on.
- Tap Continue.
On Android 5 and earlier the path is slightly different: open Google Settings, then Manage your Google Account, Security & sign-in, Security code (on Android 4.4, just Security code). Google also notes that some steps vary by Android version and custom builds.
The useful part is that Google says you don't need an internet connection or mobile service to get the code. That makes it a handy option when you are abroad or have no signal for an SMS code.
How g.co/sc works with security keys
Google's Workspace admin help describes g.co/sc security codes for accounts that sign in with a security key:
- A Workspace admin chooses whether users can generate security codes. They can turn them off, allow them only on the same device or local network, or allow them with remote access, such as when signing in on a remote server or virtual machine.
- When allowed, users generate security codes via g.co/sc. To make one, the user taps their security key.
- Google says these codes are valid for 5 minutes.
- Google says they are different from the one-time codes that apps like Google Authenticator generate.
If g.co/sc doesn't offer you a code, your account may not use a security key, or your admin may not allow security codes. Your Workspace admin is the person to ask.
Google security code not working? What to check
- Use a device that is already signed in. The Android code only comes from a phone where your Google Account is already signed in, and the g.co/sc code needs your own security key.
- Check the time. A g.co/sc code is valid for 5 minutes, so generate a fresh one and type it straight away. Our guide to invalid or expired codes covers the general pattern.
- Pick the right account. If the phone has more than one Google Account, choose the one you're signing in to.
- Ask your admin. For work or school accounts, the admin may have turned security codes off.
- No signed-in device? On the sign-in screen, choose another way to verify, such as a backup code you saved earlier, instead of the security code.
Never type a security code into a page someone sent you, and never read one out to a caller. If a message you didn't expect asks for a Google code, read why you got a Google code you didn't request.
Security code vs SMS verification code vs Authenticator code
- Google security code: you generate it on a signed-in Android phone or with your security key, then type it on the other device. On Android, Google says no internet or mobile service is needed.
- SMS verification code: Google texts it to your phone number, so you need signal and access to that number. See what OTP means for how these one-time codes work.
- Authenticator code: an app like Google Authenticator creates a rotating code. Google says g.co/sc security codes are different from these.
All three are second steps on top of your password. Our guide to two-factor vs two-step verification explains how they fit together.
Keep your own number on your Google Account
Your Google Account should stay on your own phone number and devices, because you'll need them for recovery and security alerts. A second number only suits low-stakes, one-off sign-ups you won't need to recover later; read how to keep your personal number private for when that makes sense.
Top up your wallet from $1. Each number is priced live per service and country. Some apps reject virtual numbers. Acceptance is decided by the app, not by us.
Using a temporary number to protect your privacy, travel, or test your own app is generally lawful in many places, but laws differ by country and each app sets its own terms. Check both. Never use it for fraud, impersonation, or getting around a ban. See are temporary phone numbers legal.
Related guides
- Why Did I Get a Google Code I Didn't Request?
- What Is a Verification Code? SMS Codes Explained
- Verification Code Invalid or Expired? How to Fix It
- What Does OTP Mean? One-Time Passcodes Explained
- What Is Two-Factor vs Two-Step Verification?
Want a separate number for one-off sign-ups? Get started or check pricing.
About the author: Alex Carter is the editor at GetVerifyCode. Alex tests SMS verification routes across services and countries and writes plain-language guides on receiving OTP codes safely.
GetVerifyCode is not affiliated with the apps named in this article. Follow each app's terms and local law.
FAQ
FAQ
The code has to come from a phone already signed in to your Google Account or from your own security key, and a g.co/sc code is valid for only 5 minutes. Generate a fresh code, check you picked the right account, and for work accounts ask your admin whether security codes are allowed.
It is the code a signed-in Android phone creates under Settings, Google, Manage your Google Account, Security, Security code. You type it on the other device to confirm the sign-in is you.
Yes, on Android. Google says you don't need an internet connection or mobile service to get security codes on your phone.
No. Google sends an SMS verification code to your phone number. A security code is created on your own signed-in phone or with your security key, and Google says g.co/sc codes also differ from Authenticator codes.
