How do I protect my e-Devlet account with two-step verification?
How to add a second verification step next to your password on e-Devlet and shut other people out of your account.
Short answer
Sign in at turkiye.gov.tr, open Hesabım (My Account) from the name menu at the top right, go to Güvenlik Ayarları (Security Settings) and turn on İki Aşamalı Kimlik Doğrulama (two-step verification). Choose one method: SMS confirmation code, mobile signature, e-signature or Turkish ID card. Save it, then log out and sign in again to see the second step working.
What you need
Step by step
Check your registered phone number
Sign in at turkiye.gov.tr with Giriş Yap, open Hesabım (My Account) from the menu showing your name at the top right, and confirm under Kişisel Bilgilerim (My Personal Information) that the mobile number registered in your name is current. The confirmation code goes to that number, so an old line blocks the whole process.
Open Security Settings
In the Hesabım section, select the Güvenlik Ayarları (Security Settings) heading. This screen lists sign-in methods, session preferences and the two-step verification option together in one place.
Turn on two-step verification
Use the toggle on the İki Aşamalı Kimlik Doğrulama row, or the edit link next to it, to activate the feature. The system then sends you to the method selection screen.
Pick a verification method
Choose one of SMS Onay Kodu (SMS confirmation code), Mobil İmza (mobile signature), e-İmza (e-signature) or T.C. Kimlik Kartı (Turkish ID card). The SMS code is the most practical option, while mobile signature and e-signature work independently of your phone line, which makes them safer if you change numbers.
Save and confirm your choice
Press Kaydet (Save). The system sends a confirmation code to your mobile phone or triggers your signature app to approve the change. Enter the code in the matching field, then check the Güvenlik Ayarları screen to see the setting is active.
Log out and sign in again
Use Çıkış (Log out) in the top right menu to end the session, then sign in from scratch. After your password, confirm the second step is really requested and that the code arrives. If something fails, return to the settings screen and switch methods.
Review your sign-in history
Open the account activity and sign-in history screen under Hesabım and check whether the recent logins were yours. If you see a login you do not recognise, change your password and report it to the e-Devlet call centre.
Set up a backup sign-in route
Keep at least one of mobile signature, e-signature or Turkish ID card defined so you are not locked out if your phone is lost or your line is closed. These methods do not depend on SMS, so they keep a door open in an emergency.
Tips
Watch out
If you base two-step verification on SMS and then cancel your line, or forget to update your number, you can lock yourself out of your own account. Recovering it means going to a PTT branch to reset the password. Never share an incoming confirmation code with anyone, because the second step stops protecting you the moment that code is passed on.
Frequently asked questions
+What should I do if the SMS confirmation code does not arrive?
First check that the number registered on e-Devlet is current and that your phone has signal. If it continues, try signing in with mobile signature or your ID card, and if that fails, contact the e-Devlet call centre or a PTT branch.
+Can I turn two-step verification off later?
Yes, follow the same path and disable it from the Güvenlik Ayarları screen under Hesabım. Identity verification is requested when switching it off too, though leaving it on is the safer choice.
+I lost my phone, how do I get into my account?
If you already have mobile signature, e-signature or Turkish ID card defined, sign in with that and change the verification setting. Otherwise you need to visit a PTT branch to reset your password; confirm current requirements with the institution.
+Can I receive confirmation codes on a foreign number?
Code delivery to foreign lines is not always reliable. If you live abroad, prefer mobile signature, e-signature or ID card sign-in, and verify the details through e-Devlet.
+Is the second step also asked when I sign in through my banking app?
Banking sign-in already contains its own identity verification, so the flow can work differently. Check the notes on the Güvenlik Ayarları screen to see which sign-in methods trigger the second step.
Sources and verification
Last verified: September 15, 2026. tell us. Interface labels are given in the original Turkish with English translations, since the e-Devlet portal is served in Turkish.
This content is for information only; for official procedures the relevant institution’s current announcements take precedence. Details: disclaimer.