What account confirmation means and why YouTube asks for it
YouTube asks you to confirm your account when you sign in from a new device, change your password, or after a period of inactivity. Confirmation means proving you own the account by responding to a code or prompt — usually a text message, email, or notification on a device you've already used with that account. This step stops someone else from accessing your account even if they have your password.
The confirmation process is not the same as two-factor authentication, though they work together. Confirmation is what YouTube does automatically when it suspects unusual activity. Two-factor authentication is a setting you turn on to require a code every single time you sign in. Both protect your account, but they work at different moments.
If you see a confirmation prompt, it means YouTube detected something it considers out of the ordinary — a new location, a new browser, a new phone, or a sign-in attempt after weeks of no activity. Responding to the prompt tells YouTube that yes, it is actually you.
Key Takeaways
- YouTube sends confirmation codes to your recovery email or phone number when you sign in from somewhere new or after a long gap in activity.
- You must have a recovery email or phone number on file before you can receive a confirmation code, so add both to your account now if they are missing.
- If you cannot receive codes at your recovery email or phone, you can use a backup code that Google gave you when you first set up two-factor authentication.
- Scammers sometimes trick people into confirming accounts that are not theirs by pretending to be YouTube support, so never share a confirmation code with anyone.
How to respond to a YouTube confirmation prompt
When YouTube asks you to confirm your account, you will see a message on the sign-in screen or in your Gmail inbox. The message will ask you to confirm that you are trying to sign in, and it will show the location or device where the sign-in attempt happened. Read this information carefully — if the location or device is not yours, do not confirm.
If the sign-in attempt is yours, click "Yes, that's me" or the green checkmark button. YouTube will then send a confirmation code to your recovery email or phone number. Open that email or text message, copy the code, and paste it into the box on the sign-in screen. Once you enter the code correctly, you will be signed in.
The whole process usually takes less than a minute. If you do not receive a code within a few minutes, check your spam or junk folder — confirmation emails sometimes land there by mistake. If the code still does not arrive, you can ask YouTube to send it again, or you can use a backup code if you have one saved.
Adding a recovery email and phone number to your account
YouTube uses your recovery email and phone number to send confirmation codes, so you need at least one of them on file. To add or update them, sign into your Google Account (the account that runs your YouTube channel), go to the Security section, and look for "How you sign in to Google." You will see your current recovery email and phone number listed there.
To add a recovery email, click "Email address" and enter a second email account that you check regularly and that you own. Google will send a confirmation link to that email — click it to verify. To add a phone number, click "Phone number," enter your number, and choose whether you want codes sent by text or voice call. Google will send a test code to confirm the number works.
Use a recovery email and phone that you will still have access to in five years. If you use a work email, add a personal one too, because you may not have access to your work email after you leave that job. If you use a phone number, make sure it is one you actually answer — a number you abandoned or gave to someone else will not help you when you need it.
What to do if you cannot receive confirmation codes
If your recovery email no longer exists or your phone number is disconnected, you cannot receive a confirmation code. In this situation, you can use a backup code — a set of one-time codes that Google gave you when you first turned on two-factor authentication. Backup codes are usually printed on a piece of paper or saved in a password manager.
If you have a backup code, enter it on the confirmation screen instead of waiting for an email or text. Each backup code works only once, so after you use one, you have one fewer left. If you run out of backup codes and cannot receive emails or texts, you will need to go through Google's account recovery process, which takes longer and requires you to answer security questions or provide other proof that you own the account.
To avoid this situation, update your recovery email and phone number as soon as you know they have changed. If you no longer have access to either one, sign into your account while you still can, go to Security, and add new contact information. Do this before you lose access entirely.
Recognizing fake confirmation requests and scams
Scammers sometimes send fake confirmation emails or texts that look like they came from YouTube or Google. These messages ask you to click a link, enter your password, or share a confirmation code. Real YouTube confirmation codes come only through your recovery email or phone number that you added to your account — never through a random link in an email or a message from someone claiming to be YouTube support.
If you receive a message asking you to confirm your YouTube account and you did not just try to sign in, it is almost certainly a scam. Do not click any links in the message. Do not enter your password. Do not share any code. Instead, go directly to YouTube.com or Gmail.com by typing the address into your browser yourself, sign in, and check your account activity in the Security section. If someone tried to access your account, you will see it listed there with the date and location.
Never share a confirmation code with anyone, even if they say they are from YouTube support. YouTube employees will never ask for your code. If someone is pressuring you to share a code or to confirm an account quickly, that is a sign of a scam.
Turning on two-factor authentication for extra protection
Confirmation protects you when YouTube detects unusual activity, but two-factor authentication protects you every time you sign in. With two-factor authentication turned on, you must enter a code after you type your password — even if you are signing in from a device you use every day. This means that even if a scammer has your password, they cannot get into your account without that second code.
To turn on two-factor authentication, go to your Google Account Security section and look for "2-Step Verification." Click it and follow the steps to choose whether you want codes sent by text, through an authenticator app like Google Authenticator or Authy, or through a security key (a small device you plug into your computer). Google will give you a set of backup codes to save in case you lose access to your phone or authenticator app.
Two-factor authentication does add a few seconds to every sign-in, but it makes your account much harder to break into. If you use YouTube to upload videos, manage a channel, or store important content, two-factor authentication is worth the small inconvenience.
What happens if you cannot confirm your account
If you see a confirmation prompt and you cannot respond to it — because you do not have access to your recovery email or phone, and you do not have a backup code — YouTube will not let you sign in. You will need to go through Google's account recovery process instead. This process asks you to answer security questions you set up when you created your account, or to provide other information that proves you own the account.
The recovery process can take anywhere from a few minutes to several days, depending on how much information you can provide and how quickly Google can verify it. To make recovery faster if this ever happens, write down the answers to your security questions and store them somewhere safe. Also, keep a record of when you created your account and what devices you have used to sign in.
If you are locked out of your account right now, go to the Google Account recovery page, enter your email address, and follow the prompts. Be as specific as possible when answering questions about your account history and recent activity.
Frequently Asked Questions
Can I confirm my YouTube account without a phone number?
Yes. You can use a recovery email instead. As long as you have at least one recovery email or phone number on file, YouTube can send you a confirmation code. If you have neither, you will need to use a backup code or go through account recovery.
What if I get a confirmation request but I did not try to sign in?
Do not confirm it. Someone else may be trying to access your account. Go to your Google Account Security page, check your recent activity, and change your password immediately. If you see sign-in attempts from locations you do not recognize, you can also remove those sessions from your account.
How long does a confirmation code stay valid?
Most confirmation codes expire after 10 minutes. If you do not enter the code within that time, you will need to request a new one. The confirmation screen will give you the option to send another code.
Can I use the same backup code twice?
No. Each backup code works only one time. After you use it, it is gone. This is why Google gives you multiple backup codes — so you have more than one if you need it. If you run out, you can generate a new set in your Security settings.
Is it safe to confirm my account on a public computer?
It is safer than not confirming, but public computers carry risk. If you must sign in on a public computer, confirm your account, but do not save your password and sign out completely when you are done. Better yet, use your own device whenever possible.