# How to respond to a Google account security alert

By Ashwathanarayana K P · 2026-11-10

Source: <https://www.technoashwath.com/respond-to-google-account-security-alerts/>

Google sends security alerts when it detects events such as a sign-in on a new device or suspicious account activity. An unexpected alert deserves attention, but an email can also impersonate Google. Open your account directly to check the activity if you are unsure about a message.

## Review the activity

Type the address of your [Google Account](https://myaccount.google.com/security) into your browser or open your account settings from a Google app. Look for recent security activity or a security issue and review the details. Google's [security alert guide](https://support.google.com/accounts/answer/2590353) says an alert may include the device type, time and location.

Think about recent changes before answering. A new phone, browser or trip could explain an unfamiliar-looking event. Location can be approximate, so use all available details rather than treating the location alone as proof. If you recognize your own activity, confirm it through the account's prompt.

If you do not recognize the activity, choose the option indicating it was not you and follow the steps to secure the account. Google may ask you to change your password. Choose a unique password you have not used on another account.

## Check devices and recovery details

In the account's security settings, review devices and recent security activity. Sign out of sessions you do not recognize and check your recovery phone and email for changes you did not make. Google's [compromised-account checklist](https://support.google.com/accounts/answer/6294825) also covers reviewing apps with access and other account settings.

For Gmail, inspect forwarding and filters if you suspect someone accessed mail. An unwanted forwarding rule can expose future messages even after you change the password. Remove settings you did not authorize and review other important services that share the affected password.

## Treat the message itself carefully

A genuine-looking logo or urgent subject line does not establish that an email is legitimate. Avoid opening unexpected attachments or entering credentials after following a link you do not trust. Instead, navigate to your account yourself and review the alert there.

Google's instructions say it does not ask for your password by email, message or phone. Do not share backup codes or approve a sign-in prompt you did not initiate. If you already entered a password on a suspicious page, change it from the account's real security settings and review recent activity promptly.

## Make future recovery easier

Check that your recovery methods are current and consider adding a passkey or another verification method on a device you control. Store backup codes where they are available if your phone is lost. These preparations do not mean every alert is an intrusion, but they give you more options when you need to act.

For work or school accounts, contact your administrator if you cannot access the relevant settings or suspect a compromise. If you are locked out, follow Google's [account recovery steps](https://support.google.com/accounts/answer/7682439).