On October 30, 2026, Google put out a short nudge for every Gmail user: take two minutes and run a Google Security Checkup. Its pitch boils down to one question most of us have never asked out loud: “who, or what, can still get into my inbox?”
The answer is usually more than you expect. An old tablet you sold, a quiz app you signed into with Google three years ago, a recovery phone number from two carriers back. The google security checkup lines all of that up on one page so you can clean it out, and Google boils the job down to three steps: review signed-in devices, remove old third-party app access and confirm your recovery info.
What the google security checkup actually looks at
Think of it as a personalized to-do list for your Google Account, which is the same account behind Gmail, Photos, Drive and your Android phone. Google’s own account security guide says the checkup hands you recommendations based on your setup, such as adding recovery options, creating a passkey, turning on 2-Step Verification and cutting off risky app access.
It is not an antivirus scan, and it will not read your messages to hunt for problems. It looks at the doors into your account and tells you which ones are still propped open.
What you need before you start
- Your Google or Gmail password (or the phone that approves your sign-ins).
- A phone, tablet or computer with a web browser. The checkup lives at myaccount.google.com, so it works the same on Android, iPhone, Windows and Mac.
- About two minutes for a quick pass, a little longer if you find a pile of forgotten apps.
- Your current phone number and a backup email address, in case your recovery details need updating.
How to check who has access to your Gmail, step by step
Type the address yourself or use the link at the top of this page rather than tapping a link in an email. You can also get there from Google’s menus: sign in, click your profile picture at the top right, then choose Recommended actions. If that option does not show up, Google has nothing urgent for you, and you can still look things over by opening Manage your Google Account and picking Security & sign-in.
Step 1: Review signed-in devices
The first part of the google security checkup shows the devices currently signed in to your account. Go down the list slowly. Your phone and laptop should be there. A phone you traded in last spring, a library computer or a device you simply do not recognize should not.
Sign out anything you no longer own or cannot place. If a device looks truly unfamiliar, treat it as a warning sign and jump to the section below on suspicious activity.
Step 2: Remove old third-party app access
Every “Sign in with Google” button you have ever pressed can leave a connection behind. Google’s advice is to go through the list of services tied to your account and drop any you have stopped using. That includes linked apps that rely on older, less secure sign-in technology, which Google suggests switching off.
A good rule of thumb for families: if nobody in the house remembers what an app is, cut it loose. You can always reconnect a service later if it turns out somebody still uses it.
Step 3: Confirm your recovery information
Your recovery phone number and backup email do three jobs, according to Google. They make it harder for a stranger to take over the account, they let Google warn you about suspicious activity, and they get you back in if you are ever locked out.
Outdated details are the quiet weak spot here. If the recovery number belongs to a phone line you canceled, Google has no way to reach you when it matters most, so update it before you leave the page.
What the colored icons in your Google Account mean
Google flags how serious each recommendation is with an icon. Here is how to read them:
| Icon | What Google means | What to do |
|---|---|---|
| Blue exclamation point | A security tip | Handle it when you have a minute |
| Yellow exclamation point | An important step | Fix it during this checkup |
| Red exclamation point | An urgent notification | Deal with it right away |
| Green shield with a check mark | Your account is healthy | Nothing urgent; optional tips may still appear |
Extra protections worth adding while you are in there
Once the three core steps are done, the same google security checkup page may suggest a few upgrades. These are the ones that pay off most for a household:
- Passkeys. Sign in with your fingerprint, face or phone screen lock instead of a password. Because a passkey cannot be copied, written down or handed over, Google says it holds up better against phishing. Our guide on how to set up a Google passkey walks through it.
- 2-Step Verification. This stops someone who has stolen your password from getting in. Google steers people toward security keys or Google prompts over text message codes, which are easier to phish.
- Password Checkup. It flags saved passwords that are weak, exposed or reused across sites.
- Password Alert for Chrome. It warns you if you type your Google password into a site that is not Google, a common trick on fake login pages.
If you are already poking around your Gmail settings, it is also a fine moment to tidy up other features you never asked for, like turning off Help Me Write in Gmail.
If something in the checkup looks wrong
Spotting a strange device, an app nobody installed or recovery details you never entered during a google security checkup is a reason to act now rather than later. Change your password, sign out the device, remove the app and follow Google’s steps to secure your account from the same help center.
Google also suggests looking through your Gmail settings for unfamiliar activity. Someone who briefly got into an account may leave changes behind, so a quick scan of those settings is worth the extra minute.
Frequently asked questions about Gmail access
How do I know if someone has access to my Gmail account?
Open Security Checkup and review the signed-in devices and the third-party apps connected to your account. Anything you cannot recognize is a reason to sign it out, remove it and change your password.
Is a Google Security Checkup email real?
Google says it will not request your password by email, text or a phone call. To be safe, skip the link and type myaccount.google.com/security-checkup into your browser yourself.
Does Google Security Checkup scan my phone for viruses?
No, it reviews your account settings, such as devices, app access and recovery details. On Android, Google Play Protect is the feature that helps keep the phone safe from harmful apps.
Should you run a Google Security Checkup today?
Yes, especially if you share devices at home, recently swapped phones or cannot remember the last time you looked. People who run a google security checkup every few months can expect a quick green shield and move on. Everyone else should block out two minutes tonight, because locking an old door costs far less than recovering a hijacked inbox.
