If you are seeing a Google Security Checkup warning, your account may have weak settings, a risky sign-in, or a device issue.
This guide explains how to fix Google security checkup warning messages and what to verify so the alert does not keep returning.
What the Google Security Checkup warning means
Google Security Checkup is part of Google Account security, and it reviews sign-in methods, recovery details, connected devices, third-party access, and recent security activity.
The warning usually appears when Google detects something unusual, such as an unverified device, a compromised password, or missing recovery options.
This alert is not always proof of a breach, but it should be treated as a signal to review your account immediately.
In many cases, the warning can be resolved by updating key security settings and removing old access points.
Why the warning appears
Google may trigger the warning for several common reasons:
- A password that has been reused or exposed in a known data breach
- A missing or outdated recovery phone number or recovery email
- Two-factor authentication, also called 2-Step Verification, is turned off
- Recent sign-ins from a new location, browser, or device
- Suspicious third-party app access to Gmail, Google Drive, or Calendar
- Security issues on the phone, computer, or browser used to access the account
Understanding the cause helps you fix the problem more efficiently instead of only dismissing the alert.
How to fix Google security checkup warning step by step
1. Review the Security Checkup page
Start by opening your Google Account and going to Security Checkup.
Google groups the main risk areas into sections, which makes it easier to find what needs attention.
Follow the prompts for any item marked as recommended, at risk, or action needed.
2. Change your Google Account password
If there is any chance your password has been exposed, change it right away.
Choose a strong, unique password that you do not use on other websites.
A password manager can help generate and store a secure password without relying on memory alone.
After changing the password, sign out of all devices if Google offers the option.
This helps remove sessions that may have been created by someone else.
3. Turn on 2-Step Verification
Two-factor authentication is one of the strongest ways to reduce future warnings.
Google supports multiple methods, including prompts on trusted devices, authenticator apps, security keys, and backup codes.
- Preferred option: Google Prompt on a trusted phone
- Strong option: authenticator app such as Google Authenticator or Authy
- Advanced option: hardware security key for high-risk accounts
After enabling 2-Step Verification, make sure backup codes are stored somewhere safe in case you lose access to your main device.
4. Update recovery options
Check that your recovery phone number and recovery email are current.
These details help you regain access if Google sees suspicious activity or if you forget your password.
Remove old numbers or email addresses that no longer belong to you.
Recovery information is often overlooked, but it is one of the first things Google checks when deciding whether an account is secure.
5. Review your signed-in devices
In the Security section, inspect the list of devices signed into your account.
Look for phones, tablets, laptops, or browsers you no longer recognize.
- Remove any device you no longer use
- Sign out of devices you do not recognize
- Check the device model and last activity date
If a device appears suspicious, it may indicate that someone has access to your account or that an old session was never closed.
6. Check third-party access
Apps and services that can access your Google data should be reviewed carefully.
Remove anything you no longer use or do not trust.
This includes email clients, calendar integrations, file tools, and browser extensions that request Google access.
Unauthorized third-party access can sometimes create security warnings even if your password is strong, because the risk comes from permissions rather than just login credentials.
7. Secure your browser and device
Google may warn you if the browser or operating system looks outdated or unsafe.
Update Chrome, Android, iOS, Windows, or macOS to the latest stable version.
Also scan for malware or unwanted software.
- Clear suspicious browser extensions
- Update your browser and operating system
- Run a trusted antivirus or antimalware scan
- Avoid signing in on public or shared computers
If you use a browser profile that syncs with Google, check that only trusted extensions are installed.
How to verify whether the warning is real
Phishing emails and fake browser pop-ups often imitate Google alerts.
A real Google Security Checkup warning should be verified inside your Google Account, not through a link in an email or message.
Open a browser manually, go to myaccount.google.com, and review the Security section there.
Do not enter your password on a page that arrived through a suspicious email link, text message, or advertisement.
If the warning claims your account is at risk, confirm it directly through the Google Account dashboard.
What to do if you already lost access or suspect compromise
If you cannot sign in, or if you see signs of unauthorized activity, use Google Account Recovery immediately.
Follow the prompts carefully and answer only from a trusted device and familiar network if possible.
Google may ask for the last password you remember, verification codes, or additional identity checks.
Also review Gmail for mail forwarding rules, filters, or delegated access that you did not set.
Attackers sometimes create silent access paths even after the password changes.
Best practices to prevent the warning from coming back
Once the warning is resolved, keep the account in a healthy state by maintaining the basics of Google account security.
- Use unique passwords for every account
- Keep 2-Step Verification enabled
- Review Security Checkup regularly
- Remove unused devices and app permissions
- Keep your operating system and browser updated
- Use a password manager to reduce reuse and weak passwords
For users who manage business or shared accounts, consider Google Workspace admin policies, security alerts, and stronger identity controls such as security keys and endpoint management.
When to contact Google support or an admin
If this is a work or school account, your Google Workspace administrator may need to review access policies, device compliance, or advanced login restrictions.
For personal accounts, direct support options are limited, but the Google Account recovery tools and Help Center can still resolve most issues.
If the warning keeps appearing after you have changed the password, enabled 2-Step Verification, and removed suspicious devices, the cause may be an old app password, a connected service, or repeated sign-ins from an insecure browser profile.