How to Recover a Hacked Google Account

How to Recover a Hacked Google Account

Signs your Google account has been hacked: you can't sign in because the password was changed, Google sent you "security alert" emails about a sign-in you didn't make, your contacts are getting strange emails from you, or messages you never sent appear in Gmail's Sent folder.

Act quickly. The steps below follow Google's own account-recovery and security guidance: get back in first, then close every door the attacker may have left open.

Before You Start: Beware of Recovery Scams

Google's account recovery is done through its online recovery page. If someone phones, texts or messages you offering to "recover" your Google account - or you find a "Google support phone number" in search results - treat it as a scam. Never give anyone your password or the verification codes Google sends you.

Step 1: Try to Sign In Normally

If you can still sign in, change your password immediately at myaccount.google.com > Security > Password (the section may be labelled How you sign in to Google on newer layouts). Use a new, long password you've never used anywhere else, then go to Step 3.

Step 2: Use Google's Account Recovery Page

If the attacker changed your password or recovery details:

1. Go to g.co/recover (it opens Google's account recovery page, accounts.google.com/signin/recovery).
2. Enter your Gmail address or Google account email.
3. Answer the questions. If you don't know an answer, make your best guess rather than skipping.

Tips that Google gives for a better chance of success:

• Use a device you've signed in on before (your usual phone or PC).
• Use a familiar location and network, like home Wi-Fi.
• Enter a previous password if you're asked for one - even an old one helps.
• Give an email address you can check right now, so Google can contact you.

If recovery doesn't work the first time, try again from your usual device after a little while. Don't create a new account yet - you may still get the old one back.

Step 3: Run the Security Checkup

Once you're back in, go to myaccount.google.com/security-checkup. It walks you through the most important items and flags anything unusual. Then check each area below by hand.

Step 4: Sign Out Devices You Don't Recognise

1. Go to myaccount.google.com > Security > Your devices > Manage all devices.
2. Select any device you don't recognise and choose Sign out.

Also look at Recent security activity on the Security page. Each event shows when and where it happened - it tells you when the attacker got in.

Step 5: Check Your Recovery Phone and Email

Attackers often add their own phone number or email so they can take the account back later.

• On the Security page, open Recovery phone and Recovery email.
• Remove anything that isn't yours and add your own current details.

Step 6: Check Gmail for Forwarding, Filters and Delegates

This is the step people miss. An attacker can quietly forward copies of your email to themselves.

In Gmail on a computer, select Settings (gear) > See all settings, then check:

• Forwarding and POP/IMAP - remove any forwarding address you didn't add.
• Filters and Blocked Addresses - delete filters you didn't create (especially ones that forward, delete or archive emails, or hide messages from your bank).
• Accounts (or Accounts and Import) - under Grant access to your account, remove anyone you don't know. Also check Send mail as for addresses that aren't yours.
• Your signature and vacation responder - make sure nothing was added.

Step 7: Remove Unknown Apps

Go to myaccount.google.com > Security and open the section for third-party apps and services with account access. Remove access for anything you don't recognise.

Step 8: Turn On 2-Step Verification

2-Step Verification (or a passkey) means a stolen password alone is no longer enough to sign in. See how to turn on two factor authentication for Google Microsoft and Apple. While you're there, check 2-Step Verification settings for phones or methods you didn't add.

Step 9: Change Reused Passwords Elsewhere

If you used the same password on other sites, change it there too - starting with your bank, other email accounts and shopping sites. Check whether your email was in a data breach to see where it may have leaked from. Google's own Password Checkup (in Google Password Manager) also lists saved passwords that are weak, reused or compromised.

Step 10: Check Money and Scan Your Devices

• If you use Google Pay or have cards saved in Google Play, look for purchases you didn't make and contact your bank if needed.
• Scan your PC with Windows Security (or your antivirus) and update your browser. Remove browser extensions you don't recognise.
• Warn your contacts not to open links from the strange emails sent from your account.

How It Usually Happens

• Phishing: a fake sign-in page that looks like Google. Learn the signs in how to spot a phishing email before you click.
• A reused password that leaked from another website.
• Malware on a device, often from a fake download or a fake virus warning pop up.

If You Can't Get the Account Back

Recovery isn't guaranteed - Google has to be confident you're the owner. If it fails repeatedly, keep trying from your usual device, and update the email address on important services (bank, work, shopping) so password resets don't go to the hijacked account. If you need help checking your PC and other accounts after a hack, the GetQuickTechSupport team can help.

---

Frequently Asked Questions (FAQ)

Similar Posts : How to Check if Your Email Was in a Data Breach, How to Secure Your Home WiFi Router, How to Turn On Two Factor Authentication for Google Microsoft and Apple, How to Recover a Hacked Google Account, How to Spot a Phishing Email Before You Click,

See Also:google account security gmail