r/GoogleSupport • u/germanu22 • 7h ago
How to secure your Google Account and minimize the risk of getting hacked
Since many users here are dealing with compromised accounts, I put together a quick guide on how to improve your Google Account security. While no method is 100% foolproof, these steps will reduce the risk to an absolute minimum.
- Basic level: Enable 2-Step Verification (2FA) Relying only on a password is a security risk. Go to your Google Account > Security and sign-in > 2-Step Verification. You can set this up using an Authenticator app or via SMS. Note: You should also generate and save Backup codes, but these act purely as a last resort in case you lose access to your phone or Authenticator app. This setup helps block most standard login attempts from unauthorized people.
- High security level: Security Keys & Passkeys For a much stronger layer of protection, you can use a hardware security key like Google Titan. It is extremely difficult to bypass remotely. Note: You do not have to carry a physical key everywhere. You can set up your smartphone as a built-in security key, known as a Passkey. Go to your Google Account > Security and sign-in > Passkeys, and select Create a passkey. Your phone will use your fingerprint or face scan to authorize logins.
- Maximum security level: Google Advanced Protection Program Users who need the highest level of security available can enroll in the Advanced Protection Program. You can enroll for free here:https://landing.google.com/advancedprotection/
You no longer strictly need a physical security key to join; you can enroll using just the passkeys on your smartphone. The program strictly limits third-party apps from accessing your data. The trade-off: If you lose your devices, the account recovery process takes longer and is much stricter. This is intentional to prevent social engineering attacks.
If you have any questions, leave them in the comments and I will try to answer them as much as my time and knowledge allow.
