How to create an identity theft checklist for your Google account
Your Google Account can be the gateway to Gmail, Google Drive, Google Photos, YouTube, and recovery options for other services.
That makes it a high-value target, so a focused checklist helps you spot warning signs early and lock down the settings that matter most.
This guide shows how to create an identity theft checklist for your Google account that is practical, repeatable, and easy to update after a security incident or routine review.
Why your Google Account deserves a dedicated identity theft checklist
Identity theft does not always start with a dramatic breach.
It often begins with a stolen password, a phishing email, a reused login, or a compromised recovery method.
If an attacker gets into your Google Account, they may access emails, reset passwords on other services, download files, or use saved recovery details to take over additional accounts.
A checklist gives you structure.
Instead of guessing what to check after a suspicious login or data breach, you can move through verified steps in a consistent order.
That reduces missed items and helps you act quickly if your account is ever exposed.
What to include in your Google Account identity theft checklist
Your checklist should cover access, recovery, device security, alerts, and account recovery evidence.
A good version is short enough to use, but specific enough to catch real risks.
1. Verify account access and sign-in activity
Start with the basics: confirm that only you can access the account and that no unknown sessions are active.
- Review recent sign-ins and look for unfamiliar locations, devices, or times.
- Check your Google Account security page for active devices.
- Sign out of any device you do not recognize.
- Change your password immediately if anything looks suspicious.
Google often shows account activity, device details, and security prompts that can reveal an intrusion before damage spreads.
2. Audit recovery options
Recovery settings are one of the most important parts of an identity theft checklist for a Google account because attackers frequently target them after gaining access.
- Confirm your recovery email address is current and controlled by you.
- Check your recovery phone number for accuracy.
- Remove old numbers or email addresses you no longer use.
- Make sure no unauthorized recovery method was added.
If a criminal changes your recovery information, regaining access can become much harder, especially if they also control email alerts.
3. Review two-step verification
Two-step verification, also called 2FA, adds another layer beyond the password.
It is one of the strongest protections against account takeover.
- Turn on two-step verification if it is not already active.
- Prefer authentication apps, security keys, or passkeys over SMS where possible.
- Review backup codes and store them securely.
- Delete any old or lost devices from your verification methods.
If your checklist includes one improvement only, this is often the most valuable one.
4. Check connected apps and third-party access
Apps connected to your Google Account can sometimes retain access even after you change your password.
That makes app review a key part of an identity theft checklist for Google services.
- Inspect third-party apps with access to your account.
- Remove apps you no longer use or do not recognize.
- Review permissions for calendar, contacts, Gmail, and Drive access.
- Watch for suspicious OAuth consent screens or app requests.
Attackers sometimes use deceptive apps to gain ongoing access without needing your password again.
5. Protect Gmail from account recovery abuse
Gmail is often used to reset passwords for banks, social media, shopping accounts, and work tools.
If Gmail is compromised, the damage can extend far beyond email.
- Scan your inbox and sent mail for messages you did not write.
- Check mail forwarding rules and filters for unauthorized changes.
- Review delegated mailbox access if you use it.
- Look for hidden changes that could reroute or delete security alerts.
Forwarding rules and filters are especially important because an intruder may quietly hide evidence while keeping access open.
6. Secure your devices
Your Google Account security depends on the phones, tablets, and computers you use to access it.
A stolen session cookie, malware infection, or unlocked device can bypass a strong password.
- Install updates for Android, iOS, Windows, and macOS.
- Use screen locks and device encryption.
- Run reputable security software on computers.
- Remove unknown extensions, suspicious apps, and remote access tools.
If a device is lost or stolen, remove it from your trusted devices list and change account credentials promptly.
7. Examine data exposure and unusual activity
Identity theft can begin with leaked personal details, so your checklist should include a review of what information is tied to your Google Account.
- Check Google Photos, Drive, and Gmail for sensitive documents.
- Review saved contacts, calendar entries, and auto-fill data.
- Look for downloads of tax records, IDs, or financial documents.
- Consider whether any exposed information could help with impersonation or account recovery attacks.
The more personal information stored in one account, the more important it is to limit access and monitor for unusual activity.
How to build a usable checklist you will actually follow
A good checklist should be simple enough to use during a stressful event and detailed enough to prevent mistakes.
Organize it by urgency so you know what to do first.
Use three priority levels
- Immediate: password change, sign-out of unknown devices, recovery review, 2FA review.
- Short-term: app permissions, forwarding rules, device cleanup, alert settings.
- Ongoing: monthly sign-in checks, backup code review, device updates, breach monitoring.
This structure makes the checklist usable both after suspected fraud and during routine maintenance.
Keep the checklist tied to real evidence
Do not rely on memory.
Add items that direct you to exact places in your Google settings, such as security activity, recovery methods, and third-party access pages.
Include fields for dates, screenshots, and notes so you can track changes over time.
Signs your Google Account may already be compromised
Use your checklist immediately if you notice any of these warning signs:
- Password reset emails you did not request.
- Unfamiliar devices or login alerts from Google.
- Messages sent from your account that you do not recognize.
- Missing files, changed recovery settings, or altered filters.
- Security notifications disappearing from your inbox.
- Unexpected prompts for verification codes.
Even one of these signs can justify a full security review.
How often should you review your identity theft checklist?
For most people, a monthly review is enough for core security checks, with deeper reviews after a password reset, new device setup, phishing attempt, or data breach.
If you use your Google Account for business, freelance work, or sensitive documents, review it more often.
You should also update the checklist whenever Google changes its security features, such as adding passkeys, changing device management options, or adjusting sign-in workflows.
Simple checklist template for your Google Account
- Confirm password is strong and unique.
- Turn on two-step verification or passkeys.
- Review recovery email and phone number.
- Check recent sign-ins and active devices.
- Remove unknown devices and sessions.
- Audit third-party app access.
- Review Gmail forwarding, filters, and delegation.
- Inspect Drive and Photos for sensitive files.
- Update device operating systems and browser extensions.
- Save backup codes in a secure location.
Used consistently, this checklist can help you spot account takeover attempts earlier and reduce the chance that one compromised login turns into wider identity theft.