A Google account-recovery security hold is a delay while a recovery request is processed. It is different from a message that the account cannot be identified or that the evidence supplied was insufficient.
Read the state of this request
Keep the exact message and any instructions about timing or checking progress. Google’s guide says a hold can last a few hours or a number of days depending on risk factors. It does not promise the same waiting period for every account.
A delay gives the account owner time to respond if somebody else initiated recovery. It is a security measure, not proof that a human reviewer will call you or that approval is guaranteed at the end.
Keep the contact route available
Check the mailbox or other contact method specified during the request, including its spam folder. Preserve your own record of when the request was made. Avoid confusing a fresh verification message with an older attempt.
Read messages cautiously and return to Google’s official pages to act. Do not send a password, backup code, or identification document in an unsolicited email reply because the sender claims it can accelerate the hold.
When another attempt can help
Google says that if you regain access to another way to verify ownership during the delay, such as a device where you normally sign in, you can try recovery again using it. A familiar device and browser may provide better evidence than the environment used for the first request.
This is not a recommendation to submit the same request repeatedly or to rotate devices and locations. Follow any specific restriction shown on the recovery screen.
Do not confuse several different waiting periods
A recently changed recovery phone, a newly accepted recovery contact, a blocked sensitive action, and a recovery security hold can each have different rules. A seven-day period mentioned for one of those features is not a universal recovery timer.
If ordinary account access still works but only one settings change is blocked, investigate that sensitive-action challenge instead of assuming the whole account is under recovery.
After access returns
Review account activity, keep recovery information current, and add a backup sign-in method appropriate to your account. If you did not initiate the recovery request, use the account’s security controls promptly. Do not approve a request simply because it has been waiting for a long time.
Official references
Reviewed against Google’s official guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.