From Security, generate the QR code, scan it with Google Authenticator or a compatible TOTP app and enter the six-digit code.

Store recovery codes securely: each code can be used only once.