Your Google account is usually the key to everything: email, photos, calendar, contacts and the login for dozens of other services. That's why realizing someone got in without permission is alarming — and calls for fast action.

The good news is that Google has its own recovery path. The sooner you act, the better your chance of regaining access before the intruder changes your security details.

Signs your account was hacked

Some warnings show up before you lose access completely:

  • "New sign-in" emails from devices or places you don't recognize.
  • Messages in your Sent folder you didn't send.
  • A password that suddenly stops working.
  • Changed settings, like recovery email or filters creating automatic forwarding.

If you notice any of these, treat it as urgent. Many of these attacks start with fake links — it helps to know how to spot suspicious messages.

The recovery walkthrough

Use Google's official flow, always typing the address by hand or using the app, never through a received link:

  • Open Google's account recovery page and enter the affected email.
  • Confirm your identity — it may ask for the last password you remember, a code sent to your phone or recovery email.
  • Reset the password as soon as possible, creating a new, long one you use nowhere else.
  • Review recent activity in the security section and end sessions on unknown devices.
  • Check the settings for recovery, filters and forwarding, undoing anything you didn't set.

How to lock the account down

After recovering, close the doors:

  • Turn on two-step verification — the most effective protection.
  • Review connected apps and remove what you no longer use.
  • Update reused passwords on other services if you used the same one.

If you can't finish recovery yourself, use only Google's official support channels. Distrust anyone offering to "recover" your account in exchange for data or payment.

Informational content. It does not replace individualized medical, financial or professional advice.

Frequently asked questions

Can I recover the account if the intruder changed everything?

Often yes. Google uses several signals to confirm you're the real owner, such as devices and places used before. Answer with as much true information as you remember.

Should I create a new account instead of recovering?

Recovering is usually better, because the account is the login for many services. A new one leaves behind important emails, photos and access.

Does two-step verification cause trouble if I change phones?

No, as long as you set more than one method, like a security key or backup codes. That way switching devices won't lock you out.

technologysecuritygooglegmail