SECURE YOUR GOOGLE ACCOUNT

Secure your Google Account.

Work through these settings one at a time. After making a change, verify that the protection is actually active.

Your Google Account may protect more than you realize.

It may be connected to email, files, photos, passwords, devices and other services. Securing it can therefore protect much more than one login.

Start with the controls that would cause the greatest harm if someone else gained access.

GOOGLE ACCOUNT SECURITY

Work through these settings one at a time.

Open a section to see the practical steps. After making a change, use the verification point to confirm that the protection is actually active.

Turn on 2-Step Verification

Add another layer of protection so a stolen Google Account password is less likely to be enough to access your account.

Click to see protection steps

Step-by-step

  1. Open your Google Account.
  2. Open Security & sign-in.
  3. Under How you sign in to Google, select 2-Step Verification.
  4. Follow the instructions shown by Google to complete the setup.
  5. Choose the verification methods available to you and appropriate for your account.
  6. Save legitimate backup codes somewhere secure if Google provides them.
  7. Complete the verification process.
  8. Return to the security settings and confirm that 2-Step Verification is active.

VERIFY: Confirm that 2-Step Verification is shown as active in your Google Account security settings.

Review devices signed in to your account

Check the phones, computers and other devices that currently have access to your Google Account.

Click to see protection steps

Step-by-step

  1. Open your Google Account.
  2. Open Security & sign-in.
  3. Find the section showing your devices or recent device activity.
  4. Review every device currently associated with your account.
  5. Check the device name and other activity information shown.
  6. If you recognize the device and still use it, no action may be necessary.
  7. If you do not recognize a device, select it and review the available security options.
  8. Sign out of an unfamiliar device where appropriate.

VERIFY: Review the device list again and confirm that the devices with access are ones you recognize and control.

Review recent security activity

Security activity can help you notice password changes, new sign-ins or other changes you did not make.

Click to see protection steps

Step-by-step

  1. Open your Google Account.
  2. Open Security & sign-in.
  3. Look for Recent security activity or the available security activity section.
  4. Review recent sign-ins, password changes and other security events.
  5. Investigate activity that you do not recognize.
  6. If something looks suspicious, stop treating it as a routine security check and move to the recovery process.

VERIFY: You should be able to recognize the important recent security activity associated with your account.

Review your recovery information

Make sure the recovery email address and phone number connected to your Google Account are still under your control.

Click to see protection steps

Step-by-step

  1. Open your Google Account.
  2. Open Security & sign-in.
  3. Find your recovery phone and recovery email information.
  4. Check that the phone number still belongs to you.
  5. Check that the recovery email address is still accessible to you.
  6. Remove or update recovery information that you no longer control.
  7. Never add a recovery method because someone contacting you tells you to do so.

VERIFY: Confirm that every recovery method belongs to you and that you can access it right now.

Set up a passkey when appropriate

A passkey can use your device's security system, such as a fingerprint, face scan or screen lock, to help protect your Google Account.

Click to see protection steps

Step-by-step

  1. Open your Google Account.
  2. Open Security & sign-in.
  3. Look for Passkeys or the available passkey setting.
  4. Review the passkeys already associated with your account.
  5. If a passkey is appropriate for you, choose the option to create or add one.
  6. Follow the device authentication instructions.
  7. Complete the setup using your device's supported security method.
  8. Never approve a passkey or authentication request because an unknown person told you to.

VERIFY: Return to the passkey settings and confirm that the passkey you created is listed on your account.

Review your password

Your Google Account password should be strong, unique and protected from reuse on other important accounts.

Click to see protection steps

Step-by-step

  1. Open your Google Account.
  2. Open Security & sign-in.
  3. Find the Password setting.
  4. Review when the password was last changed.
  5. If you believe the password may have been exposed, choose the option to change it.
  6. Create a strong password that you do not use on another important account.
  7. Store the password securely, preferably in a reputable password manager.
  8. Never give your Google Account password to someone claiming to provide technical support.

VERIFY: Confirm that your password has been changed successfully if you changed it, and make sure you can sign in normally.

Review connected apps and services

Third-party apps can receive access to parts of your Google Account when you authorize them.

Click to see protection steps

Step-by-step

  1. Open your Google Account.
  2. Open the area for Security & sign-in or connected services.
  3. Find your third-party connections or linked apps.
  4. Review the applications and services that currently have access.
  5. Identify anything you no longer use or do not recognize.
  6. Review what information or permissions each service has been given.
  7. Remove access where appropriate.
  8. Before removing access, consider whether you still use the service and whether doing so may affect its features.

VERIFY: Review the connected-app list again and confirm that only services you recognize and still need remain connected.

Review Sign in with Google connections

Check the apps and websites where you use your Google Account to sign in.

Click to see protection steps

Step-by-step

  1. Open your Google Account.
  2. Find the section for Sign in with Google or linked apps.
  3. Review the applications and websites listed.
  4. Identify services you no longer use or do not recognize.
  5. Review the information and permissions associated with each connection.
  6. Remove access where appropriate.
  7. Do not enter your Google Account password directly into an unfamiliar third-party website.

VERIFY: Confirm that the Sign in with Google connections remaining on your account are services you recognize and intentionally use.

Run a Google Security Checkup

Google's Security Checkup can identify account-security recommendations that need your attention.

Click to see protection steps

Step-by-step

  1. Sign in to your Google Account.
  2. Open Security & sign-in.
  3. Look for Security Checkup or Recommended actions.
  4. Review each recommendation carefully.
  5. Complete the actions that are relevant to your account.
  6. Do not ignore a warning simply because you do not recognize the cybersecurity term being used.
  7. Return to the Security Checkup after making changes and review the remaining recommendations.

VERIFY: Confirm that the important Security Checkup recommendations have been reviewed and that urgent issues have been addressed.

Review your security notifications

Security notifications can help you notice suspicious activity affecting your Google Account.

Click to see protection steps

Step-by-step

  1. Open your Google Account.
  2. Open Security & sign-in.
  3. Review the available security notifications and recent alerts.
  4. Investigate notifications about sign-ins, password changes or other security events you did not initiate.
  5. If you receive an unexpected sign-in request, do not approve it.
  6. If the notification indicates possible compromise, move to the account recovery process instead of continuing with ordinary settings changes.

VERIFY: Confirm that you recognize the important security notifications and have investigated anything unexpected.

Protect the Google Account on your phone

A secure Google Account also depends on protecting the phone or device that can access it.

Click to see protection steps

Step-by-step

  1. Make sure your phone has a strong screen lock.
  2. Use the device's supported biometric security where appropriate.
  3. Keep your phone's operating system and security updates current.
  4. Do not leave your phone unlocked where another person can easily access your account.
  5. Review the Google Account devices periodically.
  6. If your phone is lost or stolen, use a trusted device to secure your Google Account and review the affected device immediately.

VERIFY: Confirm that your phone has an active screen lock, current security updates and no unfamiliar access to your Google Account.

Review your Google Account after suspicious activity

If you notice an unfamiliar login, changed recovery information or another warning sign, stop normal activity and investigate first.

Click to see protection steps

Step-by-step

  1. Do not send sensitive information while you investigate.
  2. Review your recent security activity.
  3. Review your devices.
  4. Check your recovery information.
  5. Review your 2-Step Verification settings.
  6. Check your connected apps and services.
  7. Change your password if you believe it may have been exposed.
  8. If you believe someone has gained access to your account, use Google's official account-recovery process.

VERIFY: Do not return to normal account activity until the suspicious access or security issue has been properly investigated and addressed.

Something does not look right?

If you find an unfamiliar login, changed recovery information, unexpected security alerts or another sign that someone may have accessed your account, stop the normal security check and move to the recovery process.

I think my account is compromised →
Still need help?

If you have worked through the relevant settings and something still looks wrong, do not give your security secrets to someone promising to fix the account. Use the service's official support and recovery resources for service-specific account problems.

For broader cybersecurity problems, you can also use the professional assistance pathway on this platform.

Need Professional Help? →
Gooogle Account security is not a one-time task.

Review important account settings periodically, especially after a password change, device change, suspicious message or unexpected login alert.

VERIFY BEFORE YOU TRUST.

← Back to Secure Your Accounts