Deepak Gupta

Lock down your Google Account and Gmail account

9 settings, about 32 minutes. Do them in order: each one closes a door attackers use. Your ticks stay in this browser only.

0 of 9 doneAbout 32 minutes total

Run Security Checkup5 minOpen myaccount.google.com/security-checkup and work through each item it flags.source
Change your password, and every reused one5 minChange your Google password. Then change it on any site that used the same password, or that lets you sign in with your Gmail. Check your passwords shows saved passwords that need fixing.source
Sign out devices you don't know3 minIn your Google Account, open Security & sign-in. In Your devices, select Manage all devices. Sign out of any device you don't recognize.source
Check Recent security activity2 minOpen myaccount.google.com/notifications and look for sign-ins or security changes you did not make.source
Fix your recovery phone and email3 minMake sure the recovery phone number and recovery email are yours and still work. Remove any you don't recognize.source
Create a passkey3 minGo to myaccount.google.com/signinoptions/passkeys and tap Create a passkey. Only do this on a device you own.source
Turn on 2-Step Verification5 minIn your Google Account, open Security & sign-in. Under How you sign in to Google, turn on 2-Step Verification and follow the steps.source
Print backup codes3 minUnder How you sign in to Google, select 2-Step Verification. Under Backup codes, use Get backup codes, then print or download them. Each code works once.source
Remove apps with access3 minOpen myaccount.google.com/linkedapps and remove access for any app you don't use or don't recognize.source

Then

Write down where your recovery details live in the recovery kit, so a future lockout takes minutes, not weeks.

Free toolExposure CheckSee what of yours is already public.Free toolPassword Breach CheckCheck if a password shows up in known leaks.ReadHow to set up two-factor on all your accounts ReadPasskeys vs passwords

Comparing password managers or security keys? See the independent tool comparisons.

Sources and last check

Last verified: October 16, 2026. Steps checked against the platform's own help pages listed below. Device testing is ongoing; steps marked unconfirmed are still waiting for it.

How to recover your Google Account or Gmail (read 2026-10-16)
Tips to complete account recovery steps (read 2026-10-16)
Why your account recovery request is delayed (read 2026-10-16)
Secure a hacked or compromised Google Account (read 2026-10-16)
Investigate suspicious activity on your account (read 2026-10-16)
Respond to security alerts (read 2026-10-16)
'Suspicious sign in prevented' email (read 2026-10-16)
Google Account Security Scam via Phone Call (read 2026-10-16)
Avoid & report phishing emails (Gmail Help) (read 2026-10-16)
Your account is disabled (read 2026-10-16)
Make your account more secure (read 2026-10-16)
See devices with account access (read 2026-10-16)
Turn on 2-Step Verification (read 2026-10-16)
Sign in with backup codes (read 2026-10-16)
Sign in with a passkey instead of a password (read 2026-10-16)
Share some access to your Google Account data with apps from other developers (read 2026-10-16)
Common questions with Advanced Protection Program (read 2026-10-16)

Wrong step or changed screen? Report it. Never include passwords or codes.