Google can continue offering previous recovery information for a short period after a change. An old phone number or email in a recovery prompt does not, by itself, prove that the update failed.
Check when the information changed
Google says it may send codes to previous recovery information for seven days after recovery information or other authentication factors change. Its recovery guidance also says changes can take up to seven days to take effect.
These protections can help an owner respond to an unauthorized change. They do not mean that an old number should remain in your current saved settings indefinitely.
If you can still open the account
- Confirm the full email address of the account you are inspecting.
- Open Security & sign-in and review the saved recovery phone and recovery email.
- Compare the saved values with the prompt you saw.
- Review other sign-in methods separately, including any 2-Step Verification phone number.
A general phone setting, a recovery phone, and a number used by a particular service may not all update together. Removing the number from one field is not evidence that every use has been removed.
If you are locked out
Use Try another way when offered rather than sending a code to a number you no longer control. Preserve familiar devices and existing sessions. Read any waiting instructions shown for the account.
If the masked email or phone looks unfamiliar, first check the username. A typing mistake can lead you to a different account’s recovery hints. Do not publish those hints or your full recovery information while seeking help.
If you did not make the change
Treat an unauthorized recovery-setting change as a potential compromise. Use Google’s account-security or recovery process from a trusted device, change the password if you can, and inspect unknown sessions and sign-in methods.
Do not wait seven days merely because an article mentions a transition period when the change was not yours. The transition explains some displays; it is not a reason to ignore evidence that another person altered your account.
Official references
- Set up recovery options
- How to recover your Google Account or Gmail
- Secure a hacked or compromised Google Account
Reviewed against Google’s official guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.