ONLINE SAFETY

How to Secure Your Google Account

Your Google Account may be connected to email, photos, contacts, documents, app purchases and other services. A few security checks can significantly reduce the risk of unauthorized access.

Use a strong, unique password

Create a password that is difficult to guess and do not reuse it on unrelated websites. If a password is exposed elsewhere, reuse can allow an attacker to try the same credentials against your account.

Turn on stronger sign-in protection

Use Google's available multi-step sign-in options. A second verification step can make a stolen password less useful to an attacker. Prefer modern authentication methods offered by Google and keep your recovery methods current.

Review recovery information

Check the recovery email address and phone number associated with the account. They should be accessible to you and should not belong to someone else. Recovery information is important when you lose access or need to respond to suspicious activity.

Review signed-in devices

Periodically check the devices and sessions associated with your account. If you see a device you do not recognize, investigate it promptly and secure the account using Google's official account-security tools.

Be careful with phishing

Attackers often create messages that imitate trusted services. Do not enter your password after following an unexpected link in an email, message or social post. When in doubt, open the service directly using a bookmark or manually entered address.

Keep your phone and browser updated

Security updates can fix vulnerabilities. Install operating system and browser updates from trusted sources and avoid modified applications from unknown websites.

Protect your recovery devices

Account security is also device security. Use a screen lock, avoid sharing verification codes, and do not approve a sign-in prompt you did not initiate. Treat one-time codes as private credentials.

Security checklist

• Use a unique password.
• Enable multi-step authentication.
• Keep recovery details current.
• Review unfamiliar devices and sessions.
• Ignore unexpected requests for passwords or codes.
• Keep your phone, browser and apps updated.

Bottom line: Account security is an ongoing habit, not a one-time setting. Review your security information occasionally and use official Google security pages for account changes.