Verify it’s you when you complete a sensitive action

Important: If you’re a Google Workspace user or administrator, you can find instructions that are specific to Workspace accounts. If you have a Google Account through your workplace, you may have to verify it's you with your corporate device.

To help protect your account and data, you must verify it’s you when you complete sensitive actions. This is Google’s approach to provide multi-layered security.

Google uses this to help protect your account against damage that a hacker might cause. With this protection, even if a hacker gets your personal details or login info, they’ll still face a challenge before they complete any sensitive actions on your account.

Sensitive actions in your account settings:

• View activity saved in your Google Account.
• Change your password.
• View saved passwords.
• Turn on 2-Step Verification.
• Download your data.

When you make sensitive changes within Google products, we may ask to verify your identity. Examples of sensitive changes include:

• Change of channel ownership on YouTube Creator Studio.
• Change of Google Ads account budget.
• When you buy any other product or service from Google.
  • Example: Buy a Google Pixel or Nest device from Google Store.
• In Gmail, when you create or modify sensitive email filters, add a forwarding address, or enable IMAP access.

To prove it’s you, have a device or security key available that's been registered to your account for at least 7 days. You can use:

• A device associated with the recovery phone number for your account
• A device that's signed in to your Google Account
• For accounts with 2-Step Verification turned on:
  • A security key that’s been added to your Google Account. Learn how to use a security key
  • A verification code from Google Authenticator. Learn how to get verification codes

Important: If you can’t verify it’s you, Google may not allow you to complete the sensitive action for a period of 7 days. This delay is to make sure your account and data stay protected.

• In the 7 day period: You can still use and access your account but you won’t be allowed to update any sensitive information or complete sensitive actions unless you verify it’s you.
• After the 7 day period: You can access the relevant sensitive action even without the verification.

We understand that in some cases, legitimate owners of the account might lose access to a phone or a phone number. We only limit access to the sensitive actions and for a period of 7 days. To continue your purchase in some purchase flows, you can use the guest checkout.

Fix problems

If you're signed in to your Google Account but can’t verify it's you to complete an action, go to the relevant section below.

You get a "Sensitive action blocked" message

To protect your account, you may be blocked when you complete some sensitive actions when at least one of these items hasn’t been associated with your Google Account for at least 7 days:

• Device used to sign into your Google Account
• Phone number
• Security key

If you don’t get the option to verify it’s you, you can:

• [Recommended] Add 2-Step Verification to your account and wait at least 7 days. Then, try again. Learn how to add 2-Step Verification to your account.
• Add a recovery phone number to your Google Account and wait at least 7 days. Then, try again. Learn how to set up a recovery phone number.
• Sign in to your Google Account on a mobile device through the Google or Gmail app and wait at least 7 days. Then, try again.

You can't use your device

If you don’t have access to your device or can’t use it temporarily, try again when you have access to it.

If you can't use your device or your account doesn't have a recovery phone number, try again from another device you use often. You can also follow these steps.

You don't get a prompt on your device

If you don't get a prompt within a few minutes:

1. Make sure your device is connected to the internet.
   • To get prompts, you need Wi-Fi or mobile data turned on.
2. Confirm that you're signed in to your account on your device.
3. Force close the Google app and the Gmail app .
4. Go to the sign-in screen and select Resend.

Tip: If you still don't get a prompt, select Try another way and choose a different option.

You don't get a text

If you don't get a text within a few minutes:

1. Make sure you have the correct recovery phone number.
2. Make sure you have a strong network signal or that the phone is connected to Wi-Fi.
3. Go to the sign-in screen and select Resend.
   • If you’ve recently updated sensitive info, try again after 7 days.

Can't sign in to your Google Account

If you can’t sign in to your Google Account to use Google services like Gmail, Drive, or Photos, learn how to recover your Google Account.