Recent security activity helps you review important Google Account events, including changes and sign-in-related warnings. Use it alongside device sessions and product-specific activity when investigating a concern.
Open the correct account’s security events
- Open Google Account directly on a trusted device.
- Confirm the complete account address.
- Select Security & sign-in.
- Open the recent security activity or security-events panel.
- Select an event to inspect its details.
Menu labels can vary. Google’s compromised-account guide calls the panel Recent security events and its control Review security events. Use the equivalent account-security section rather than a link from an unknown sender.
Read the event before responding
Compare its device, time, location, and described action with your own activity. A warning about an action being blocked is different from confirmation that the action succeeded.
Google sends alerts about several kinds of events, including a new-device sign-in, unusual sending activity, and blocked sensitive actions. Do not interpret every event as the same type of account access.
Respond to unfamiliar activity
Use the event’s option indicating that it was not you, then follow the secure-account steps. If appropriate, change the password, review recovery information, and inspect unfamiliar verification methods.
Preserve a brief private record of the event if needed, but do not delay containing an active compromise to collect screenshots of everything. Never include passwords, one-time codes, or complete private recovery links in a support report.
Review the other views too
Open Manage all devices to inspect active and recently used sessions. Gmail on a computer also provides Last account activity through its Details link, which has mail-specific access information.
These views answer different questions. Recent security activity is not a complete record of every message read or every file copied. A lack of a new alert does not by itself prove that no suspicious mail setting or app authorization exists.
If the account is managed, ask the administrator to investigate relevant organization logs and policies. After resolving the immediate event, check that recovery information and backup sign-in methods remain usable.
Official references
- Secure a hacked or compromised Google Account
- Respond to security alerts
- See devices with account access
Reviewed against Google’s official guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.