Fix a hacked Gmail account in five moves. Regain access with the Google recovery page then check recent security events and devices. Reset your password and add 2-Step Verification. Remove unfamiliar forwarding rules and filters from Gmail settings. Steps follow the Google guide.
You see a sign in alert you did not trigger or your inbox sends mail you never wrote. Fast action limits the damage and the order of steps matters.
This guide follows Google Account Help. See fix a hacked or compromised Google Account.
How do You Regain Access to the Account?
Open the Google account recovery page and answer its questions as accurately as you can. Google states that accurate answers raise your chance of recovery.
Which Items Need a Check First?
- Recent activity. Open your Google Account then Security and find Recent security events. Mark unknown events with No, it wasn't me.
- Devices. Open Your devices then Manage devices and report any device you do not recognize.
- Financial activity. Look in Google Pay and Google Play for purchases or payment methods you did not add.
How do You Reset Passwords and Add a Second Factor?
Reset your Google Account password first. Then reset the password on every site where you used the same one.
Add 2-Step Verification. Google states that a second factor like a phone or security key means a stolen password alone is not enough.
Which Gmail Settings do Hackers Edit?
| Setting | What to Look For |
|---|---|
| Automatic forwarding | Rules that send your mail to another address |
| Filters and labels | Rules that hide or move mail |
| Mail delegation | Other people with access to your inbox |
| IMAP and POP access | Access you did not enable |
| Vacation responder | Replies you did not write |
| Recovery phone and email | Contact details you did not set |
Google also lists the apps with access to your account under Permissions. Remove any app you do not know.
What About Your Computer and Other Services?
Remove harmful software and scan with trusted anti virus software. Update Chrome and add a screen password. Disable less safe app access if it is enabled.
Contact your bank or the authorities when someone may have used your identity. For wider habits see online security measures for your business. For Drive files see how to restore deleted Google Drive files.
Frequently Asked Questions
How do I Start Gmail Recovery?
Use the Google account recovery page to regain access. Then check your devices and sign in alerts.
Is Changing the Password Enough?
No. Check forwarding rules and filters and recovery details because a hacker can edit them.
Should I Turn on 2-Step Verification?
Yes. Stolen passwords stop working alone once a second factor is on.
Which Gmail Settings should I Review?
Check forwarding and filters and delegation and IMAP or POP access and the vacation responder.
Can Hackers Reach Other Google Services?
Yes. Google advises that you check Drive and Photos and YouTube and payment activity too.
Key Takeaways
- Use the Google recovery page to regain access.
- Check devices and sign in alerts for unknown entries.
- Reset passwords and add 2-Step Verification.
- Remove unknown forwarding rules and filters from Gmail.
- Scan your devices for harmful software.
Sources and References
This guide follows Google Account Help.
- Secure a hacked or compromised Google Account (Google Account Help) support.google.com