How to Recover Your Gmail Account After Being Hacked
If you've been locked out of your Gmail account or suspect someone else has taken control of it, don't panic. Google has a well-established recovery process, and in most cases you can regain access — especially if you act quickly. This guide walks you through every step.
⏱ Time is critical. The sooner you start the recovery process, the more likely Google is to verify your identity. Don't wait — begin now.
Step 1: Go to Google's Account Recovery Page
Open a browser and navigate to accounts.google.com/signin/recovery. Enter the Gmail address you're trying to recover and click Next.
Google will attempt to verify your identity using one of several methods. The method offered depends on what recovery options you had set up before the account was compromised.
For best chance of success, it is important to begin recovery processes from a device that has previously been signed into your Google Account. Ideally, also be connected to the same internet / cellular service that it has also been signed on.
Step 2: Verify Your Identity
Google may offer one or more of the following verification methods:
Recovery Phone Number
If you had a recovery phone linked to your account, Google will send a verification code via SMS. Enter the code to prove your identity. This is the fastest path back in.
Recovery Email Address
Google may send a code to your backup email address. Check that inbox (including spam) and enter the code.
Last Known Password
You may be asked to enter the last password you remember. Even an older password can help Google confirm you're the account owner.
Security Questions or Identity Verification
In some cases, Google may ask additional questions such as when you created the account or other details. Answer as accurately as possible.
💡 Tip: Use a device and network (Wi-Fi) you've previously used to sign in. Google is more likely to trust familiar devices and locations during the recovery process.
Step 3: If Google Can't Verify You Immediately
If the standard recovery options don't work — for example, if the hacker changed your recovery phone and email — Google may ask you to wait and try again later. This is frustrating, but important:
- Try again after 24–48 hours — Google may offer different recovery options after a delay
- Use the same device and network each time you attempt recovery
- Don't create a new Google account with the same phone number, as this can complicate recovery
- Try different passwords you may have used in the past when prompted
If all automated options fail, you may be directed to a form where you can provide additional details to prove account ownership.
Step 4: Reset Your Password
Once Google has verified your identity, you'll be prompted to set a new password. Follow these rules:
- Use at least 16 characters — the longer the better
- Mix upper and lowercase letters, numbers, and symbols
- Do not reuse any password from another account
- Use a password manager to generate and store it securely
After resetting your password, Google will sign out all other sessions automatically.
What If You Can't Recover Your Account?
If Google's recovery process is unsuccessful after multiple attempts, consider the following:
- Keep trying the recovery form every few days — Google's system may offer new verification methods over time
- Contact Google Support if you have a Google Workspace account (paid plans have direct
🔒 Consider switching to Proton Mail for a more private and secure email experience. Proton Mail offers end-to-end encryption and is based in Switzerland with strong privacy laws.