How to Lock Down Your Google Account: Complete Security Checklist
Advertisement
Your Google account is the master key to your digital identity—holding access to password resets for bank accounts, primary emails, cloud photos, and Android device backups. Securing it requires more than just a strong password.
Quick Answer: Visit myaccount.google.com/security. Run Security Checkup, revoke inactive third-party app permissions, switch 2FA from SMS to Authenticator App or Security Keys, and generate 10 offline Backup Codes.
Step-by-Step Security Hardening
- Revoke Inactive Third-Party Access: Navigate to Security → Third-party apps with account access. Delete any quiz apps, old games, or unused productivity add-ons that have access to your Google profile.
- Transition to App-Based 2FA: SMS verification is vulnerable to SIM-swap attacks. Add Google Authenticator or hardware FIDO2 keys (e.g. YubiKey) and remove SMS as the primary authentication fallback.
- Download 8-Digit Backup Codes: Under 2-Step Verification, generate and print the 10 emergency backup codes. Keep them in a physical document safe in case you lose your phone.
Advertisement