Here, we explain how you can make sure your account is safe and secure.
To ensure the security of your Google account, you can:
Do a Security Checkup
Confirm your account activity
Access Security Checkup to get security recommendations for your account.
If you see a green icon for all categories, as shown on the right, it means your account is safe and secure. Just in case, open Third-party access and Your devices to make sure there's no access log from suspicious apps or devices.
If there are access logs from a device that you no longer use, see Remove your old or lost device below.
When there is a security risk, the checkup shows you a yellow icon. See Fix your security problem below.
If there is any device you no longer use or own under Your Devices, remove it to log it out.
Click and expand Your Device.
Find a device you'd like to remove and click ︙> Sign out on the right.
3. When you grant access to third-party apps, you may get a message that says some apps can still have access to your account. In that case, continue to step 4.
4. Click and expand Third-party access.
5. Click Remove access for each app.
Note: Since this will remove access to the apps from all your devices, you will be required to sign in again when you try to use those apps.
See also:
See devices that have used your account (Google Account Help)
While there are a number of possible security problems, we'll focus on three of the most frequent cases:
Case #1: Under Your devices, it says, "Remove your account from {your device}."
Case #2: Under Sign-in & recovery, it says, "Add ways to verify it's you."
Case #3: Under Third-party access, it says, "Turn off less secure app access."
When you haven't sign in to your account for a while on a device, the checkup recommends removing it for security.
For example, the image on the right shows that a Windows device you own is inactive for your Google account for a long time. Depending on your device, it will show you a different device name.
How to fix:
Remove the device from your account.
Note: When you have multiple signed-in devices, some of them with the same OS or apps could sometimes be identified as one device.
Expand Your devices.
Click Remove.
Expand X signed-in devices.
4. Find a device you'd like to remove and click ︙> Sign out on the right.
5. If you see a message in the image, click Sign out.
6. When you grant access to third-party apps, you may get a message that says some apps can still have access to your account. In that case, continue to step 7.
7. Click and expand Third-party access.
8. Click Remove access for each app.
Note: Since this will remove access to the apps from all your devices, you will be required to sign in again when you try to use those apps.
When you haven't set up a recovery email to your account, the checkup recommends adding one.
The recovery email can be used to make sure it's really you signing in or if there's suspicious activity in your account.
How to fix:
Expand Sign-in & recovery.
Next to Recovery email, click Add.
3. Enter your recovery email address.
4. Double-check your email and click OK.
5. Click Done.
6. Open the inbox of your recovery email. If there's an alert email, your setup is complete. From now on, Google will send a security alert to the address.
If you don't receive the message in a few minutes, go back to step 1 and try again.
When you use your Google local password to send or receive email messages, it is recommended that you turn it off.
This applies to people who turn on Less secure apps to send/receive emails via IMAP/POP with a certain email client or to change your sender (From) address to another address you own.
Note: While we recommended turning on Less secure apps to change your sender address when we started to deploy KUMail (Gmail), it is no longer the best way to do it.
How to fix:
Use your App password instead of signing in with a local password.
Expand Third-party access.
Click Turn off. This will make it impossible to send or receive emails with your Google local password.
Use your App password to set up again.
To use an email client with OAuth capability, see Set up your email client.
To send a message from another address you own, see Add another sender address (From address).
You can see how, when, and where your account is used by following the steps below.
Go to KUMail.
At the bottom of the page, you'll see the time of the Last account activity.
Click Details.
4. A new window will pop up to show you the activity on your account. Go through the list and make sure there's no suspicious access login history.
Hint: If an IP address starts with 133.3 or 130.54, the access comes from the on-campus network.
Also, see this FAQ: There are many suspicious access logs from 130.54.130.*** on my Garoon access history. Is my account being hacked?
Make your account more secure (Google Account Help)