Gmail Account Security: A 10-Minute Setup Checklist After You Get a New Account

A new Gmail account is only as safe as the first ten minutes you spend with it. Most lockouts we hear about were not caused by hackers. They happened because the owner skipped a few settings and then lost access to the one device or number tied to the account.

Work through this checklist as soon as you receive login details.

1. Change the password immediately

Whoever handed you the credentials, including us, should not still know the password. Pick a long passphrase of four or five unrelated words, or let a password manager generate one. Never reuse a password from another site.

2. Add your own recovery options

Open Google Account → Security → Ways we can verify it's you and add:

• A recovery email you control
• A recovery phone number you actually have access to
• A second recovery method, if Google offers one

Recovery details are what bring an account back when something goes wrong. Without them, Google has very little to go on.

3. Turn on 2-Step Verification

Use an authenticator app or a passkey rather than SMS where possible. Print or save the backup codes and store them somewhere offline. They are the safety net if your phone breaks.

4. Review devices and sign-in activity

Under Security → Your devices, sign out of anything you do not recognise. Check this page again a few days later. A clean device list is a good sign the account is fully yours.

5. Set up app passwords only if you need them

Email clients and tools that do not support modern sign-in may ask for an app password. Create one per tool and name it clearly (for example, "Thunderbird laptop") so you can revoke a single one later without touching the rest.

6. Keep the activity natural

Sudden bursts of activity from a brand-new location are what trigger Google's security checks. Sign in from the device and network you normally use, send a few messages, and build up usage gradually.

A quick summary

If anything looks off during setup, message our support team and we will help you work through it.

Related Guides

Still choosing an account? Read our guide to buying Gmail accounts, see Gmail accounts, or learn what phone verified really means.

Frequently Asked Questions

How do I secure a new Gmail account?

Change the password, add your own recovery email and phone, turn on 2-Step Verification, save the backup codes and review signed-in devices.

Is SMS or an authenticator app better for 2-Step Verification?

An authenticator app or a passkey is generally safer than SMS because phone numbers can be lost or hijacked.

What should I do if I lose my phone?

Use your backup codes or recovery email to sign in, then update your 2-Step Verification settings.