Google Authenticator verifies that you are who you say you are based on a secret you and the provider share online. When you log into a website, your device generates a code based on the current time and the shared secret.