Google Account Security Checkup is one of the fastest ways to review the safety of your Google account.
In a few minutes, you can spot weak passwords, suspicious sign-ins, and third-party apps that should not have access.
What Google Account Security Checkup does
Google Account Security Checkup is a built-in review tool inside your Google Account security settings.
It evaluates key protections such as your recovery options, recent devices, app access, and active security alerts.
The tool is useful because Google services are often tied to Gmail, Google Drive, Google Photos, YouTube, Android, and Chrome.
If someone gains access to your Google account, they may be able to reset passwords on other platforms too.
How to use Google account security checkup
To start the checkup, open your Google Account and go to the Security section.
From there, launch the Security Checkup and review each recommended item one by one.
- Sign in to your Google Account.
- Open Security from the left-hand menu or account dashboard.
- Select Security Checkup.
- Review device activity, recent security events, third-party access, and recovery settings.
- Apply Google’s recommendations and confirm any changes.
If you use multiple devices, complete the review on one trusted device first.
That makes it easier to verify logins and remove old sessions if needed.
Review your devices and sign-in activity
One of the most important sections shows the devices currently signed in to your account.
Google lists phones, tablets, laptops, and browsers with recent access activity.
Look for devices you do not recognize, locations that do not match your normal pattern, or sessions you have not used in a long time.
If something looks unfamiliar, sign that device out immediately and change your password.
What to check in device activity
- Device model and operating system
- Approximate location and recent access time
- Whether you still own or use the device
- Any repeated login alerts or failed attempts
Check your recovery email and phone number
Recovery information is critical because it helps you regain access if you forget your password or your account is compromised.
Security Checkup will tell you whether your recovery email address and phone number are current.
Use an email address and phone number you actively monitor.
Avoid outdated work addresses, old SIM cards, or numbers you no longer control.
If you change your phone number, update it right away in Google Account settings.
Turn on two-factor authentication
If you have not already done so, enable two-factor authentication, also called 2-Step Verification.
This adds a second layer of protection beyond your password.
Google supports several verification methods, including prompts on your phone, authentication apps, security keys, and backup codes.
For most users, Google prompts or an authenticator app offer a strong balance of security and convenience.
Best options for 2-Step Verification
- Google prompts for quick approval on signed-in devices
- Authenticator apps such as Google Authenticator or Authy
- Security keys for stronger phishing-resistant protection
- Backup codes stored securely offline
Review third-party app access
Security Checkup also lists apps and services that can access your Google account data.
This may include calendar tools, email clients, file managers, or productivity apps you connected years ago.
Remove anything unfamiliar, unused, or unnecessary.
Third-party access is a common risk because old integrations can remain active even after you stop using them.
When deciding whether to keep an app connected, ask whether it still needs access to Gmail, Google Drive, Contacts, or Calendar.
If not, revoke it.
Check security alerts and recent activity
Google surfaces important alerts such as suspicious logins, new device sign-ins, or unusual password activity.
These alerts can help you catch attacks early, especially if someone tries to access your account from a new location.
Open each alert and confirm whether the activity was yours.
If it was not, follow Google’s recovery guidance immediately, starting with a password change and account sign-out on all devices.
Improve your password if needed
Security Checkup may encourage you to strengthen your password if it is weak, reused, or exposed in a breach.
A strong password should be unique, long, and hard to guess.
Use a password manager to create and store a random password for your Google account.
Reusing the same password across services increases the chance that one breach can expose your email account too.
How often should you run Security Checkup?
A good practice is to complete Google Account Security Checkup every few months and anytime you notice unusual activity.
It is also worth running after changing phones, traveling internationally, or installing a new browser or extension.
You should also review your account right away if you receive login alerts you do not recognize, stop receiving expected security notifications, or lose access to a recovery method.
Common issues you may find during the checkup
Many people discover the same problems during a Google security review.
These are usually easy to fix, but ignoring them can create real risk.
- Old devices still signed in
- Inactive third-party apps with broad permissions
- Outdated recovery email addresses
- Weak or reused passwords
- Two-factor authentication turned off
Addressing these issues strengthens not only Gmail, but also every service tied to your Google login.
Why Google Account Security Checkup matters for everyday users
Google account security affects more than email access.
It can influence your cloud files, photos, browser data, Android backups, and identity verification for other websites that use Google sign-in.
That is why learning how to use Google account security checkup is so important.
It gives you a quick, structured way to verify the basics, remove risky access, and keep control of an account that may be central to your digital life.