Unusual activity alerts

To help protect your Google Account, we notify you about unusual account activity, such as sign-ins or password changes from unfamiliar locations and devices. You can review this activity and confirm whether or not you actually took the action.

Understanding unusual activity

Since you may regularly sign in to your account from multiple computers and mobile devices, sometimes it might not be obvious whether or not a particular action was yours. Here are a few tips to help you determine if recent activity wasn't yours:

  1. Date and time: You see a date or time when you didn't access your account from your computer or mobile device.
  2. Browser and browser version: A particular browser or browser version that you don’t recognize was used to sign in to your account.
  3. Location: You don't recognize the physical location where the sign-in took place.
    If you sign in to your account through a mobile phone, the physical location may be different from where you are, but the domain should still be that of your mobile phone’s service provider.
  4. IP address and domain: You see an IP address or domain you never used to access the Internet.
    • Examples of domains include ISPs, mobile network providers (e.g., Verizon), and corporate networks.
    • An IP address is a series of numbers that specifies where a particular computer or mobile device is on the Internet. Learn how to find your current IP address.
    • If you’re unsure whether a sign-in was yours, you can perform a reverse IP lookup, which will give you more information about the computer or device that signed in.
    • Although we try to be as accurate as possible, sometimes the domain listed might be inaccurate.

We also recommend that you complete the Google Account security checklist to help ensure that your computer and account are fully protected.

I don't recognize the activity

Here are some reasons why activity might appear unusual but still be yours:

  • You traveled to this location, and signed in to your account while you were there
  • You started using a new mobile device
  • You signed in to your account from a friend's computer
  • You signed in to your account on a shared computer at an Internet cafe, library, or another location

If none of these situations apply, then the activity might be suspicious. Follow the steps below to secure your account:

  1. Run a virus scan on your computer. Some hackers install programs on computers to track what you type, and a virus scan will reduce this risk.
  2. Change your password. Someone likely knows your password and used it to sign in to your account.
  3. Make sure your recovery options are up-to-date. If someone signed in to your account, they might have modified your account recovery settings so that they can get new passwords sent to their email address.

I recognize the activity as mine

If all of the unusual activity was yours, then don’t worry. Just click Yes that was me! to respond to the question "Do you recognize this unusual activity?" We'll use this information to improve our detection system (and to help us alert you only when it really matters). Learn more about staying safe and secure online.