Google account recovery & security

Getting locked out of a Google account is miserable — your email, photos, calendar, all behind one door. The good news: there's an order to attempt recovery that works far more often than random clicking. Here it is.

Locked out? Try things in this order

Start at accounts.google.com/signin/recovery on a device and Wi-Fi network you've used before. Google trusts familiar devices heavily — recovering from your usual laptop at home beats a friend's phone every time.
Answer with your last known password, even if it's old. An old correct password counts for more than a wrong current one.
Use the recovery email or phone if you set one up. This is where most recoveries succeed or die — skip to the section below if you never added one.
Guessing the account creation month is a real question in the flow. Check old emails to yourself for a rough date before you start.

If the flow fails, wait a full 24 hours before trying again. Repeated attempts in a row look like an attack and make the system stricter, not kinder.

There is no phone number to call. Anyone claiming to be "Google account support" on the phone is a scammer. Google's recovery is entirely self-service — which is exactly why setting up recovery options in advance matters.

The two settings that prevent most disasters

First: add a recovery phone and recovery email at myaccount.google.com → Security. Five minutes. This single step is the difference between a ten-minute recovery and a lost account.

Second: turn on 2-Step Verification, and during setup, download the backup codes and put them somewhere physical — a drawer, not your inbox. When people lose access with 2FA on, it's almost always because they lost the phone and never saved the codes.

Privacy settings worth ten minutes

While you're in myaccount.google.com, check three things. Ad personalization (Data & privacy) — turn it off if targeted ads bother you; it changes profiling, not the number of ads. Location History — off by default now, but old accounts may still have it on. And auto-delete for Web & App Activity: set it to 3 or 18 months and Google stops hoarding everything forever.

We update this page when Google moves these menus around. If a button isn't where we said, tell us — it helps the next person.