Starting 1 November 2021, monetising creators must turn on 2-Step Verification on the Google Account used for their YouTube channel to access YouTube Studio or YouTube Studio Content Manager. Learn more
Securing your YouTube account helps prevent your account or channel from being hacked, hijacked or compromised.
Note: If you think that your account has been hacked, learn how to secure it.
Secure Your YouTube Account
Create a strong password and keep it safe
Create a strong password
A strong password helps you keep your personal information safe and prevents someone else from getting into your account.
Create a strong and complex password: Use 8 characters or more. It can be any combination of letters, numbers and symbols.
Make your password unique: Do not use your YouTube account password on other sites. If another site gets hacked, the password could be used to enter your YouTube account.
Avoid personal information and common words: Do not use personal information like your birthdays, common words like 'password' or common patterns like '1234'.
Protect your password from hackers
Manage your passwords
Never share your sign-in info
Do a regular security check-up
Go to the Security Check-Up page to get personalised security recommendations for your account and follow these tips to make your account more secure.
Add or update account recovery options
- Block someone from using your account without your permission
- Alert you if there's suspicious activity on your account
- Recover your account if you're ever locked out
Turn on 2-step Verification
- Security keys (Most secure verification step)
- Google Prompts (More secure than text message codes)
- Google Authenticator Application (Receive codes without Internet or mobile data)
Remove suspicious people from your account
- Change or remove access from your YouTube Account
- Change or remove access from your Brand Account
Remove sites and apps you don't need
Update your software and back up your account
Protect against suspicious messages and content
Phishing is when a hacker disguises themself as someone trustworthy to take personal information. Personal information can include:
- Financial data
- National ID/National Insurance number
- Credit card numbers
Hackers may use emails, text messages or web pages to pretend to be institutions, family members or colleagues.
YouTube will never ask you for your password, email address or other account information. Don't be fooled if someone gets in touch with you pretending to be from YouTube.
- Don't reply to suspicious emails, texts, instant messages, webpages or phone calls that ask for your personal or financial info.
- Don't click links in emails, messages, webpages or pop-ups from untrustworthy websites or senders.
- YouTube emails only come from @youtube.com or @google.com addresses.
An example of a suspicious phishing email
Avoid suspicious web pages
Report spam or phishing
Set and check permissions on your channel
If you're a creator, you can invite someone else to manage your YouTube channel without giving access to your Google Account. Invite someone to access your channel as a:
- Manager: Can add or remove others and edit channel details.
- Editor: Can edit all channel details.
- Viewer: Can view (but not edit) all channel details.
- Viewer (limited): Can view (but not edit) all channel details except revenue information.
Learn how to set and check your channel permissions.
Note: If you have a Brand Account, you can invite someone to manage your Google Account and your YouTube channel. Check if you have a Brand Account and learn how to manage Brand Account permissions.