Whether
you just regained access to Gmail, or you want to make sure your
account is secure, take a minute to complete our Gmail security
checklist to make sure your mail security measures are up to date.
Check for viruses and malware
While no virus scanner can catch 100% of infections, it is still important to run a scan on your computer with a trusted anti-virus software (or install a program that runs in the background and scans continuously). If the scan detects any suspicious programs or applications, remove them immediately.
Make sure your operating system is up to date
Operating systems release patches to repair security vulnerabilities. Whether you use Windows or Mac OS, we recommend protecting your computer by enabling your automatic update setting, and updating when you get a notification.
Make sure to perform regular software updates
Some software updates aren't included in your operating system updates, but they are just as important. Software such as Adobe Flash, Adobe Reader, and Java release regular updates that may include repairs for security vulnerabilities.
Make sure your browser is up to date
To check for browser updates in Internet Explorer, select the Tools tab and click Windows Update. In Firefox, just click the Help tab and select Check for Updates.
Plug-ins, extensions, and third-party programs/tools
Check your browser for plug-ins, extensions, and third-party programs/tools that require access to your Plug-ins and extensions are downloadable computer programs that work with your browser to perform specific tasks. For example, you may have downloaded a plug-in or extension that checks your Gmail inbox for new messages. Google can't guarantee the security of these third party services. If those services are compromised, so is your Gmail password.
Change your password
If your account has been recently compromised, you should update your password now. In general we suggest you change it periodically, following these guidelines:
Pick a unique password that you haven't previously used on other sites or on Gmail. Just changing one character or number still counts as reusing your password.
Don't use a dictionary word or a common word that's easily guessable. Use a combination of numbers, characters, and case-sensitive letters.
Update your account recovery options
We all may forget our passwords at some point, so we strongly encourage that you update your account recovery options. To update these options, sign in to your Google Account by going tohttps://www.google.com/accounts and click Recovering your password.
- Recovery email address: We can use your recovery email address to communicate with you if you lose access to your account.
- SMS: We can send you a recovery code to your mobile phone number, which you can use to reset your password.
- Secret question: This option is only available if you can't use the above recovery options and only if haven't tried to sign in during the past 24 hours. An ideal answer to your security question is easy for you to remember, but hard for others to guess.
Turn on 2-step verification
2-step verification adds an extra layer of security to your account by requiring you to sign in with something you know (your password) and something you have (a code sent to your phone). To turn on 2-step verification, follow the instructions on the 2-step verification setup page.
Check the list of websites that are authorized to access your Google Account data
Make sure that the list of authorized websites are accurate and ones that you have chosen. If your Google Account has been compromised recently, it's possible that the bad guys could have authorized their own websites to access your account data. This may allow them to access your Google Account after you have changed your password.
To edit the list of authorized websites:
- Sign in on the Google Accounts homepage.
- Click the My Account link displayed at the top right of the page.
- Click Authorizing applications & sites. This page will list all third-party sites you've granted access to.
- Click the Revoke Access link to disable access for a site.
Use a secure connection (https) to sign in
In your Gmail settings, select 'Always use HTTPS.' This setting protects your information from being stolen when you're signing in to Gmail on a public wireless network, like at a cafe or hotel.
Check for any strange recent activity on your account
Click the Details link next to the 'Last Account Activity' entry at the bottom of your account to see the time, date, IP address and the associated location of recent access to your account.
Confirm the accuracy of your mail settings to ensure that your mail stays and goes where you want it to
Sign in to your account and click on the Settings link at the top to check the following tabs:
- General: Check Signature, Vacation Responder, and/or canned responses for spammy content
- Accounts: Verify your settings under Send mail as, which includes checking your reply-to settings, Check mail using POP3, and Grant access to your account.
- Filters: Check that no filters are sending your mail to Trash, Spam, or forwarding to an unknown account.
- Forwarding and POP/IMAP: Ensure your mail isn't sent to an unknown account or mail client.
Check your contacts for errors
Sign in to your account and click Contacts. If you don't see all of the contacts you expect to see, you canrestore your contacts to an earlier time period.
Final Notes:
- Watch out for messages that ask for your username and/or password. Gmail will never ask for this information.
- Never give out your password after following a link sent to you in a message, even if it looks like Gmail's sign-in page. Access Gmail directly by typing https://mail.google.com in your browser's address bar.
- Don’t share your password with other websites - Google can’t guarantee the security of other websites and your Gmail password could be compromised.
- Keep secrets! Never tell anyone your password, or your secret question and answer; if you do tell someone, change it as soon as possible.
- Clear forms, passwords, cache and cookies in your browser on a regular basis - especially on a public computer.
- Only select 'Stay signed in' if you're signing in from a personal computer.
- Always sign out when you've finished reading your mail.
Check for viruses and malware
While no virus scanner can catch 100% of infections, it is still important to run a scan on your computer with a trusted anti-virus software (or install a program that runs in the background and scans continuously). If the scan detects any suspicious programs or applications, remove them immediately.
Make sure your operating system is up to date
Operating systems release patches to repair security vulnerabilities. Whether you use Windows or Mac OS, we recommend protecting your computer by enabling your automatic update setting, and updating when you get a notification.
Make sure to perform regular software updates
Some software updates aren't included in your operating system updates, but they are just as important. Software such as Adobe Flash, Adobe Reader, and Java release regular updates that may include repairs for security vulnerabilities.
Make sure your browser is up to date
To check for browser updates in Internet Explorer, select the Tools tab and click Windows Update. In Firefox, just click the Help tab and select Check for Updates.
Plug-ins, extensions, and third-party programs/tools
Check your browser for plug-ins, extensions, and third-party programs/tools that require access to your Plug-ins and extensions are downloadable computer programs that work with your browser to perform specific tasks. For example, you may have downloaded a plug-in or extension that checks your Gmail inbox for new messages. Google can't guarantee the security of these third party services. If those services are compromised, so is your Gmail password.
Change your password
If your account has been recently compromised, you should update your password now. In general we suggest you change it periodically, following these guidelines:
Pick a unique password that you haven't previously used on other sites or on Gmail. Just changing one character or number still counts as reusing your password.
Don't use a dictionary word or a common word that's easily guessable. Use a combination of numbers, characters, and case-sensitive letters.
Update your account recovery options
We all may forget our passwords at some point, so we strongly encourage that you update your account recovery options. To update these options, sign in to your Google Account by going tohttps://www.google.com/accounts and click Recovering your password.
- Recovery email address: We can use your recovery email address to communicate with you if you lose access to your account.
- SMS: We can send you a recovery code to your mobile phone number, which you can use to reset your password.
- Secret question: This option is only available if you can't use the above recovery options and only if haven't tried to sign in during the past 24 hours. An ideal answer to your security question is easy for you to remember, but hard for others to guess.
Turn on 2-step verification
2-step verification adds an extra layer of security to your account by requiring you to sign in with something you know (your password) and something you have (a code sent to your phone). To turn on 2-step verification, follow the instructions on the 2-step verification setup page.
Check the list of websites that are authorized to access your Google Account data
Make sure that the list of authorized websites are accurate and ones that you have chosen. If your Google Account has been compromised recently, it's possible that the bad guys could have authorized their own websites to access your account data. This may allow them to access your Google Account after you have changed your password.
To edit the list of authorized websites:
- Sign in on the Google Accounts homepage.
- Click the My Account link displayed at the top right of the page.
- Click Authorizing applications & sites. This page will list all third-party sites you've granted access to.
- Click the Revoke Access link to disable access for a site.
Use a secure connection (https) to sign in
In your Gmail settings, select 'Always use HTTPS.' This setting protects your information from being stolen when you're signing in to Gmail on a public wireless network, like at a cafe or hotel.
Check for any strange recent activity on your account
Click the Details link next to the 'Last Account Activity' entry at the bottom of your account to see the time, date, IP address and the associated location of recent access to your account.
Confirm the accuracy of your mail settings to ensure that your mail stays and goes where you want it to
Sign in to your account and click on the Settings link at the top to check the following tabs:
- General: Check Signature, Vacation Responder, and/or canned responses for spammy content
- Accounts: Verify your settings under Send mail as, which includes checking your reply-to settings, Check mail using POP3, and Grant access to your account.
- Filters: Check that no filters are sending your mail to Trash, Spam, or forwarding to an unknown account.
- Forwarding and POP/IMAP: Ensure your mail isn't sent to an unknown account or mail client.
Check your contacts for errors
Sign in to your account and click Contacts. If you don't see all of the contacts you expect to see, you canrestore your contacts to an earlier time period.
Final Notes:
- Watch out for messages that ask for your username and/or password. Gmail will never ask for this information.
- Never give out your password after following a link sent to you in a message, even if it looks like Gmail's sign-in page. Access Gmail directly by typing https://mail.google.com in your browser's address bar.
- Don’t share your password with other websites - Google can’t guarantee the security of other websites and your Gmail password could be compromised.
- Keep secrets! Never tell anyone your password, or your secret question and answer; if you do tell someone, change it as soon as possible.
- Clear forms, passwords, cache and cookies in your browser on a regular basis - especially on a public computer.
- Only select 'Stay signed in' if you're signing in from a personal computer.
- Always sign out when you've finished reading your mail.
No comments:
Post a Comment