If your Gmail got hacked tomorrow, you could lose access to your:

[Sasha]

If your Gmail got hacked tomorrow, you could lose access to your:

- Bank logins
- Social accounts
- Business tools
- Cloud files
- Password resets

Your email is the master key to your life.

Here's the 30-minute setup that prevents this ↓

Step 1: Turn on 2FA

Go to:

Google Account → Security → 2-Step Verification

Use an authenticator app or passkey.

Do NOT rely only on SMS.

SIM swaps are real, and phone numbers are weak security.


Step 2: Add a passkey

Passkeys are one of the best upgrades you can make.

They use your device + biometrics instead of a password.

No code to steal.
No phishing link to trick you.
No “enter your 6-digit code” scam.

3: Generate backup codes

Go to:

Google Account → Security → Backup codes

Download or print them.

Store them somewhere offline.

Not in Gmail.
Not in Google Drive.
Not in screenshots.

If you lose your phone, these save you.

4: Check recovery email + phone

Go to:

Google Account → Security → Ways we can verify it’s you

Make sure your recovery email and phone are yours.

Old number? Remove it.
Old work email? Remove it.
Ex’s email? Definitely remove it.

Step 5: Review logged-in devices

Go to:

Google Account → Security → Your devices

Sign out of anything you don’t recognize.

Old laptop?
Shared computer?
Phone you sold 2 years ago?

Remove it.

Step 6: Check third-party app access

Go to:

Google Account → Security → Third-party apps with account access

Remove anything you don’t use.

Random AI tools.
Old Chrome extensions.
Dead SaaS apps.
Sketchy PDF converters.

Kill them.

Step 7: Lock down forwarding

In Gmail:

Settings → See all settings → Forwarding and POP/IMAP

Hackers love email forwarding.

They break in once, set up auto-forwarding, then quietly read your emails forever.

Check it manually.

Step 8: Check filters

In Gmail:

Settings → Filters and Blocked Addresses

Look for rules that:

- Auto-delete emails
- Forward security alerts
- Archive bank emails
- Hide password reset messages

This is how attackers stay invisible.

Step 9: Use a password manager

Your Gmail password should be:

- Unique
- Long
- Random
- Never reused anywhere else

If your Gmail password is also your Netflix password, fix that today.

Step 10: Create a separate “recovery email”

Use a separate email only for account recovery.

Not newsletters.
Not shopping.
Not social media.
Not public signups.

Just recovery.

Boring = secure.

[Mike]

Great advice thanks for sharing.