PlayInfoBox

Home /Education /How to Run a Google Account Security Checkup

How to Run a Google Account Security Checkup

A Google account touches your email, photos, and sometimes payment details, so a periodic security checkup is worth the few minutes it takes.

  1. Open the Security Checkup page

    Go to myaccount.google.com in a browser, choose "Security" from the left-hand menu, and open the Security Checkup section.

  2. Review which devices are signed in

    Under "Your devices," check every device currently signed into your account and sign out of anything you do not recognize right away.

  3. Review recent security activity

    Look through recent important events on the account, such as a password change or a data export, to confirm you recognize each one.

  4. Check your two-factor authentication setup

    Under "2-Step Verification," confirm it is turned on and check which methods are registered β€” phone, security key, or authenticator app β€” turning it on if it currently is not.

  5. Review third-party app access

    Under apps and services with account access, remove the connection for anything you no longer use.

  6. Update your account recovery information

    Make sure your recovery email and recovery phone number are current, so identity verification goes smoothly if you ever get locked out.

Why it is worth checking every so often

A Google account is tied to a lot of personal information β€” email, photos, sometimes payment details β€” so running a security checkup every few months to catch an unfamiliar sign-in or a missing protection is a reasonable habit, not overkill.

Turning on 2FA does not have to add friction every time

A common worry is that two-factor authentication makes every login slower. In practice, most services let you mark a personal device as trusted, so you are only prompted for the extra step occasionally rather than on every single sign-in.

Frequently Asked Questions

Will turning on two-factor authentication make every login a hassle?

Not usually. You can typically register frequently used devices as trusted, so you are not asked for extra verification every single time you sign in.

What should I fix first after running the checkup?

Start with whatever the report flags as highest risk β€” typically an unrecognized signed-in device or two-factor authentication that is not turned on β€” before working through the lower-priority items.