Why this account matters so much
Your Google account is usually the key to everything: Gmail, Google Photos, Drive, your calendar, saved passwords in Chrome and the "Sign in with Google" button on dozens of other services. Losing it means more than losing email, which is why speed matters.
Read also: Two-factor authentication: why to turn it on for every important account and How to spot a fake website before you type your password.
Signs your account was hacked
- Security alerts about a new sign-in from a device or location you do not recognize.
- Emails in Sent that you did not write.
- A password that suddenly stops working.
- Changed recovery phone or email, or new filters forwarding your mail elsewhere.
Many takeovers start with a fake login page. See how to spot a fake website.
The recovery path
- Go to Google's account recovery page by typing g.co/recover yourself or using the app, never a link from a message.
- Answer the questions as accurately as you can, ideally from a device and place where you usually sign in. Google may ask for an old password or send a code to your recovery phone or email.
- Create a new, long password you do not use anywhere else.
- Run the Security Checkup and sign out of every device you do not recognize.
- Check recovery info, mail filters and forwarding, and undo anything you did not set.
Source: Google Account Help, How to recover your Google Account or Gmail.
Lock it down so it does not happen again
- Turn on 2-Step Verification, ideally with prompts on your phone or a passkey. Google's own research found that on-device prompts blocked 100% of automated bot attacks and 99% of bulk phishing. See why two-factor authentication matters.
- Review third-party apps with access to your account and remove what you no longer use.
- Change reused passwords on other services, starting with your bank and other email accounts.
If you cannot finish recovery on your own, use only Google's official help pages. Anyone who offers to "recover" your account for a fee or asks for your codes is a scammer.
Source: Google Security Blog, How effective is basic account hygiene at preventing hijacking, 2019.
Sources
- Google Account Help. How to recover your Google Account or Gmail. https://support.google.com/accounts/answer/7682439
- Google Security Blog. New research: How effective is basic account hygiene at preventing hijacking, 2019. https://security.googleblog.com/2019/05/new-research-how-effective-is-basic.html
Frequently asked questions
How long does Google account recovery take?
Sometimes minutes. If Google cannot confirm it is you, it may take a few days and ask you to try again from a familiar device.
Can I recover the account without my phone?
You can try with your recovery email or an old password. That is why it is worth keeping recovery info up to date.
Should I pay someone to recover my account?
No. Recovery happens only through Google's official process. Paid recovery offers are scams.
What should I do after getting the account back?
Change the password, turn on 2-Step Verification, check devices, filters and forwarding, and update reused passwords elsewhere.
