Change the Account Password Immediately create a strong, unique password using letters, numbers, and symbols to prevent previous owners or attackers from accessing the account.
Update Recovery Information Replace existing recovery email addresses and phone numbers with your own to ensure complete control over future account recovery requests.
Enable Two-Factor Authentication Activate two-factor authentication using an authenticator app or trusted device, adding an additional security layer against unauthorized login attempts.
Review Active Devices Check all logged-in devices and sign out unknown sessions to remove any unauthorized access from previous owners or suspicious users immediately.
Inspect Security Activity Review recent login history, security alerts, and account activity for unfamiliar locations or devices indicating potential unauthorized access or suspicious behavior.
Remove Third-Party App Access Disconnect unnecessary apps and services connected to the Gmail account, limiting external access and reducing potential security vulnerabilities significantly over time.
Check Email Forwarding Settings Verify that automatic forwarding, filters, and delegated access are disabled unless intentionally configured, preventing silent email monitoring by unauthorized individuals.
Run a Google Security Checkup Use Google's Security Checkup tool to review account protection settings, identify weaknesses, and apply recommended security improvements for stronger overall protection.
Stay Alert for Suspicious Activity Regularly monitor account notifications, login alerts, and password change requests to quickly detect and respond to any unusual account behavior