Make your account more secure

At Google, we take online security seriously. To protect your Google Account, we strongly recommend following the steps below regularly.

Note: If you’re a journalist, activist, or someone else at risk of targeted online attacks, learn about the Advanced Protection Program.

Step 1: Do a Security Checkup

Go to Security Checkup to get personalized security recommendations for your Google Account, including:

Add or update account recovery options

Your recovery phone number and email address are powerful security tools. This contact info can be used to help:

  • Block someone from using your account without your permission
  • Alert you if there’s suspicious activity on your account
  • Recover your account if you’re ever locked out

Learn how to add or change your recovery phone number or email address.

Turn on 2-Step Verification

2-Step Verification helps prevent a hacker from getting in to your account, even if they steal your password. To avoid common phishing techniques associated with text message codes, choose a stronger second verification step:

Increased security: Advanced Protection

If you’re a journalist, activist, or someone else at risk of targeted online attacks, consider enrolling in the Advanced Protection Program for a higher level of security. Advanced Protection uses security keys to protect against phishing and includes other protections like blocking unsecure apps.

Remove risky access to your data

Consider removing account access for any non-essential apps to better protect sensitive information.

Turn on screen locks

Screen locks help protect your devices from being used without your permission. Learn how to set screen locks on an Android device.

Note: For info on adding a screen lock on other devices and computers, visit the manufacturer’s support site.

Step 2: Update your software

If your browser, operating system, or apps are out-of-date, the software might not be safe from hackers. Keep your software updated to help protect your account.

Update your browser

Make sure you’re using the latest version or your browser.

Learn how to update Google Chrome.

Note: For info on updating other browsers, visit the developer’s support site.

Update your operating system

Make sure you’re using the latest version of the operating system on your device or computer.

Update Android devices

Learn how to check and update your Android version.

Update Chromebooks

Learn how to update your Chromebook’s operating system.

Note: For info on updating other devices and computers, visit the manufacturer’s support site.

Update your apps

Make sure you’re using the latest version of the apps on your phone or computer.

Update Android apps

Learn how to update your Android apps on Android devices and compatible Chromebooks.

Consider turning on automatic app updates for your Android devices to help make sure you’re always using the latest version.

Note: For info on updating apps on other devices and computers, visit the manufacturer’s support site.

Turn on Google Play Protect

Google Play Protect helps keep Android devices safe from harmful apps. Learn how to turn on Google Play Protect.

Step 3: Use unique, strong passwords

It’s risky to use the same password on multiple sites. If your password for one site is hacked, it could be used to get in to your accounts for multiple sites.

Make sure to create a strong, unique password for each account.

Manage your passwords

A password manager can help you generate and manage strong, unique passwords. Consider using one from Chrome or another trusted provider.

Help protect your password from hackers

To get notified if you enter your Google Account password on a non-Google site, turn on Password Alert for Chrome. That way, you’ll know if a site is impersonating Google, and you can change your password if it gets stolen.

Note: Turn on 2-Step Verification for an extra layer of account security.

Step 4: Remove apps & browser extensions you don’t need

As more apps are installed on a device, it can become more vulnerable. Install only essential apps and browser extensions on devices that have access to sensitive information. Avoid installing unknown apps or apps from unknown sources to protect your device and personal info.

Learn how to:

Note: For info on removing apps and extensions from other devices and browsers, visit the applicable support site.

Step 5: Protect against suspicious messages & content

Hackers can use emails, text messages, phone calls, and web pages to pretend to be institutions, family members, or colleagues.

Avoid suspicious requests

  • Never give out your passwords. Google will never ask for your password in an email, message, or phone call.
  • Don’t reply to suspicious emails, texts, instant messages, webpages, or phone calls that ask for your personal or financial info.
  • Don’t click links in emails, messages, webpages, or pop-ups from untrustworthy websites or senders.

Avoid suspicious emails

Gmail is designed to help protect your account by automatically identifying suspicious emails. You can also use these tips to help you identify suspicious emails and settings:

Tip: If you're using Gmail on your computer, point to a link without clicking on it. At the bottom left, look at the web address and make sure it's what you expect.

Avoid suspicious web pages

Google Chrome and Search are designed to warn you about suspicious content and unwanted software.

Learn how to manage these warnings in Chrome and Search.

If you notice suspicious activity on your account

Follow the steps to help secure your account.

Was this article helpful?
How can we improve it?