By GulfInside | Updated 21 October 2026. If someone has accessed your Gmail account, act through Google’s official recovery tools rather than a person promising instant access. A compromised Google Account can affect Gmail, Drive, Photos and other services, so recovery and post-recovery security are both important.
Quick answer
Go directly to Google Account Recovery, follow the prompts, and use a familiar device and location when possible. Once back in, change your password, review devices and security activity, remove unfamiliar third-party access and check Gmail forwarding rules.
1. Start at Google’s official recovery page
Type the recovery address yourself rather than following a link in an unsolicited email or text. Answer questions as accurately as you can. Google’s recovery process varies according to the signals and recovery methods available for the account; no third party can guarantee success.
2. Use a familiar device
Google recommends using a device, browser and location where you commonly sign in. Avoid switching between unfamiliar networks or devices during repeated attempts unless necessary.
3. Check whether you are still signed in anywhere
If a trusted phone or browser is still signed in, open your Google Account security settings and review recent security activity. Do not sign out of your only working session before confirming how you will recover access.
4. Change the password after regaining control
Choose a unique, strong password not used on another website. If the old password was reused, update those other accounts too. Review recovery phone and email settings for changes you did not make.
5. Review devices and sessions
Open your Google Account’s device management section, inspect recent sessions and sign out of devices you do not recognize. Some activity entries can represent legitimate sessions, so examine details carefully.
6. Remove suspicious connected apps
Review third-party access and revoke permissions for apps or services you do not trust. Also inspect installed browser extensions and applications on your computer or phone.
7. Check Gmail settings attackers may change
Inspect forwarding addresses, filters, delegated access and account settings. Attackers may create rules that forward or hide incoming messages. Review Sent, Trash and Spam for unexpected activity.
8. Enable stronger sign-in protection
Consider a passkey or two-step verification supported by your account. Keep backup methods current and store recovery codes securely if provided. Never share verification codes with a caller claiming to be Google support.
If messaging accounts may also be exposed, follow our WhatsApp security checklist for passkeys and linked devices. Before removing files during device cleanup, review the Android storage guide to protect important backups and account data.
9. Scan devices and protect other accounts
Update your operating system and browser, remove suspicious software and check accounts linked to the affected Gmail address, especially financial, shopping and social accounts. Contact the relevant institution directly if you discover unauthorized transactions.
10. Beware paid recovery scams
Google states that it does not work with services claiming to provide account or password support. Do not disclose passwords or verification codes to anyone claiming they can bypass recovery checks.
Frequently asked questions
Can I recover Gmail without my old phone number?
Google may offer other verification methods depending on your account history and recovery settings. Follow the options displayed by the official recovery tool; no alternative is guaranteed.
What if the hacker changed my password?
Start the official recovery process, answer prompts accurately and use a familiar device if possible. After recovery, inspect security settings and remove unauthorized access.
How long does recovery take?
There is no universal timetable. Google’s checks and any security delays vary by account and situation.
Should I pay someone to recover my Gmail?
No. Avoid services that ask for credentials or claim special access to Google’s systems.
Sources
Google: Secure a hacked or compromised Google Account; Google: Tips to complete account recovery; Official recovery page. This article is general guidance and cannot guarantee recovery.
