Protect and recover the accounts you use every day. Browse clear guides for passwords, sign-in problems, privacy, phishing, two-step verification and account safety.
Open your account provider’s connected-apps, third-party access, or apps-and-integrations page. Review each app’s name, purpose, and permissions, then remove access for apps you no longer use or cannot identify. Confirm that the app disappears or shows no active access. If an app is unfamiliar, secure the account separately and stop before approving any new request.
If a verification code never arrives, confirm where the provider sent it, check spam or blocked messages, request one fresh code, and use an available backup method such as an authenticator, passkey, recovery code, or trusted device. If none works, stop repeated attempts and open the provider’s official account-recovery form.
Sign in through the account provider’s official website or app, open Account or Security settings, find Recovery email or account-recovery options, replace the old address, and complete the confirmation sent to the new inbox. Then verify that the new address is listed, review other recovery methods, and stop if the account shows an unfamiliar sign-in or unauthorized change.
Open the account’s Security or Sign-In & Security settings, select Two-Factor Authentication, 2-Step Verification, or MFA, then follow the setup prompts. Prefer a passkey or authenticator app over SMS when the service offers it. Save the recovery codes offline, add a second recovery method, and test a fresh sign-in before ending the session.
Do not use links or phone numbers in the alert. Open the account provider’s official app or type its address yourself, then check recent sign-in activity. If the event is not yours, change the password, sign out unknown devices, review recovery details, enable two-factor authentication, and use the provider’s recovery process if you cannot sign in.
Open the platform’s Privacy or Account settings and restrict who can add you to groups to the most limited available choice, such as contacts or approved people. Also tighten message requests, block the sender, leave the current chat, and report repeated abuse. Menu names differ, so verify the change by checking the saved setting.
First check whether the spam appears in your Sent folder. If it does, secure the mailbox immediately: use the provider’s official site, change the password, sign out unknown sessions, remove unfamiliar apps, check forwarding and filters, and enable two-factor authentication. If nothing appears in Sent, your address may be spoofed rather than hacked, but still review security activity.
Use your email provider’s message-list controls to report suspicious mail as spam or phishing, block the sender, and delete the message without opening it. Unsubscribe only when you recognize the sender and independently confirm the company’s real website. If messages mention password changes, payment problems, or account alerts, stop treating them as ordinary marketing and visit the account directly.
Start with any device where the account is still signed in, then use backup codes or another enrolled verification method. If the authenticator app supports cloud restoration, restore it only through its official process. Otherwise, use the account provider’s recovery page or contact a work-account administrator. After access returns, remove the lost phone and enroll a new authenticator.
Sign out of your Google Account on every device from Security > Your devices. Verify remote sign-out and secure access if an unfamiliar session remains active.