NEW: Discover Gmelius for Inbox Install

Gmail Security7 steps to protect your Gmail account

The purpose of this article is to help you strengthen the security of your Gmail account. We’ll show you some actionable and non-technical steps you can take to ensure that your Gmail account remains safe and private.

Did you know that half of US adults got hacked every year?

Imagine what it would be like if your Gmail account also got hacked.

Not a pleasant thought…

But don’t worry. There’s a solution.

Follow these 7 steps to ensure that your Gmail account is no longer at risk of being compromised.

STEP 1: Activate 2-Step verification

Google’s concern over account theft issues has resulted in the introduction of a security feature known as 2-Step Verification.

2-Step Verification provides an extra layer of security. Every time you wish to access your account, a code will be sent to your phone; thus making it impossible for another party to guess your password.

We beleive every Gmail accounts should have this activated. To do so, click here and follow the on-screen instructions.

Setup 2 step verification as a first step tooward Gmail security
Note that you’ll need a mobile phone to activite this feature. Should you lose your phone, you can create printable backup codes and a backup phone number as alternatives for accessing your account. You can also create an application-specific password for applications that don’t request a verification code.

It might sound annoying and probably will be the first few times but it’s certainly better than having your Gmail account hacked.

STEP 2: Detect and block email trackers

You may not be aware that many people and companies track emails they send, without your consent.

With this information, they know exactly when, where, and how many times you’ve read their message.

Pretty crazy, don’t you think?

This is a major privacy issue and in our opinion should not be the price you pay for using Gmail.

But fortunately you can protect your email privacy by using Gmelius.

Gmelius offers a feature that let’s you detect and block email trackers within your Gmail account. Learn more.

Gmelius blocks trackers

STEP 3: Update your Gmail security credentials

How many years ago did you create your Gmail account?

If it was a few years ago, your recovery details such as your backup phone number may have changed.

It’s vital that you monitor your security details and update your security questions, recovery options, and password and ensure that you have a strong password!

So, the first thing you’d want to do is go to the Sign-in and Security Checkup page and update your password.

But what’s a secure password, anyway?

A secure password:

  • Contains capital letters, numbers, and punctuation signs
  • Is a minimum of eight characters long
  • Does not contain a complete word
  • Does not contain your real name, your username, or your company name
  • Is completely different from previous passwords you’ve used

Sometimes, trying to remember a strong password can be difficult but there are ways and means of recalling good passwords. Check out this interesting article about passwords on ways of remembering your password.

How Often Should Gmail Passwords Be Changed?

Logically, we know that our passwords should be changed from time to time, but there’s no ideal answer on how often this should be. Check out this IT security expert’s opinion on password which summarizes things well:

You don’t need to regularly change the password to your computer or online financial accounts (including the accounts at retail sites); definitely not for low-security accounts. You should change your corporate login password occasionally, and you need to take a good hard look at your friends, relatives, and paparazzi before deciding how often to change your Facebook password. But if you break up with someone you’ve shared a computer with, change them all.

STEP 4: Revoke access to 3rd party apps

You may have signed up to a certain website using your Google credentials or installed third-party extensions.

Some of these may be compromising your account and you need to revoke access to the ones you no longer use or trust.

Head to Google’s Account Permissions page to revoke access to anything you don’t want to keep.

Revoke apps to remove

STEP 5: Check for suspicious activity

If Google notices suspicious activity in your account they’ll send you a notification. It may be that there are sign-ins from an unfamiliar location or an unfamiliar device.

But ideally you’ll also manually review your account at least once a month to make sure that no suspicious activity has taken place.

To review your account, click on the link ‘Details’ located on the right hand side of the footer of your mailbox.

Footer Gmail inbox

You’ll see a list of sign-ins and alerts that have been blocked, including sign-ins from new devices.

recent gmail activity

Should you notice unusual activity, try to recall why this activity seems unfamiliar, yet it’s still yours.

If you can’t recall the activity and you’re unsure as to why it exists, your best action is to change your password immediately.

STEP 6: Check account filters for forwarding emails

It’s important that you to ensure that there are no active filters in your account which may be forwarding your email to a third-party email address.

This check is simple: Go to your Settings’ page and click on the Filters tab. Look for filters you haven’t authorized and delete them.

Check for filters

In addition, check the Forwarding and POP/IMAP tab to ensure there’s no unauthorized forwarding address other than those approved by you.

STEP 7: Authenticate your emails when sending sensitive information

On receiving an email, you may notice that next to the sender’s email address there’s a small red padlock.

This indicates that the message is potentially unsafe.

Gmail red padlock

This red unlocked icon comes with emails that have not been authenticated by Transport Layer Security (TLS) encryption.

Don’t worry too much if you don’t understand how the technology works.

You only need to be concerned if you see this icon and the message has something to do with passwords or other sensitive information.

At this point you need to contact the sender of these insecure emails if want to continue exchanging messages with this person.

In conclusion

By taking the above simple steps you can be assured that your Gmail account is secured to the best of your ability.

But always be on the lookout for notifications from Gmail advising that you need to add additional security in order to stay on top of any new potential vulnerabilities.

  • Stay in control

    Gmelius protects your privacy.

  • Save time

    Gmelius boosts your productivity.

  • Focus

    Experience a custom-tailored inbox.

arrow_upwardTop Install Gmelius for Free Upgrade now

warningBrowser not supported!

Gmelius 6 is unavailable for your current browser but you can get it for:

  • Chrome
  • Safari 9+
  • Opera 15+

Just visit our website from one of the browsers mentioned above to install your copy of Gmelius 6.

Important notice

When ordering your Company plan, please ensure to enter a Google Apps email address whose domain name is the one of your organization. This condition is necessary to guarantee an unlimited number of premium activations on your company's different email accounts.


Subscription starts at the end of the 14-day trial period.

Why does Gmelius need to...

Read and change your data on mail.google.com

Gmelius needs this permission to add features to your inbox. It never stores, indexes or transmits information present in your email account or any sites you visit. All data stays on your computer, where it belongs. Feel free to read our Privacy Policy for more information.

Installation completed

Hey, Gmelius has been succesfully installed.

Sign into Gmail to start configuring it. Feel free to discover all the Gmelius features, visit our knowledge base and follow us on your favourite social network to never miss the release of an exciting new feature !

Update successfully completed

Hey, Gmail just got better with Gmelius 6.

Discover all the new features, e.g., Email Reminders and Send Later, and head to your Gmelius settings page to make your inbox even smarter. Don't forget to follow us to never miss a tip about Gmail & boost your productivity!

Sorry to see you go, Friend...

We feel bad that you're leaving, but you can help us feel better if you tell us what went wrong. Is it a feature missing, a bug, or a competitor?​ Do let us know.

Switching to Inbox? Try Gmelius for Inbox (beta)

re-Install

account_circle Successful authentication

Your credentials have been successfully updated. Feel free to close this tab and go back to your inbox. Thank you for using Gmelius!


In case of questions, .

Thank you!

You have succesfully upgraded to Gmelius . Two emails have been sent to :

  1. Your Premium activation details;
  2. A receipt for your purchase;

In case of questions, feel free to .

Good to know

All payment and credit card information that you submit for our products is processed through Stripe (certified PCI level 1, AES-256 encryption) and no credit card information is stored in our databases.

We are a Swiss-based company and cannot accept Discover cards (US only). We offer a 30-day full refund policy and you can cancel your subscription whenever you want. In case of questions, feel free to .

Processing data...

Oops. Something went wrong.

In case of questions, feel free to .

Do not close this tab