03/17/2025
How To Recover A Hacked Gmail Account
The most important thing to do when it comes to recovering a hacked and compromised Gmail account is, according to Google spokesperson, Ross Richendrfer, to act quickly. Obviously, acting so quickly as to prevent the attacker from being able to lock you out in the first place would be best, and that means employing a phishing-resistant authentication methodology like a passkey, would be ideal. But if you have found yourself in the account lockout situation it’s too late for that. Do bear it in mind once you have recovered your Gmail account though.
Google recommends that all Gmail users ensure they have a recovery telephone number, alongside the recovery email address, attached to their Google account. “These can be used in cases where users forget their own passwords,” Richendrfer said, or just as critically, “if an attacker changes the credentials after hijacking the account.” This is where the time limitation comes in though. Richendrfer advised that Gmail users have a seven day grace period following any recovery phone number change during which they, as the original account holder, can regain control of the account.
This number should, of course, ideally be for a smartphone that belongs only to the Gmail account holder, is used regularly by them and kept on their person. “When you change your recovery email,” Richendrfer said, “you may be able to choose to get sign-in codes sent to your previous recovery email for one week.” Google has provided more help with Gmail account recovery online, including step-by-step recovery instructions.