Verify it’s you when you complete a sensitive action

Important: If you’re a Google Workspace user or administrator, you can find instructions that are specific to Workspace accounts. If you have a Google Account through your workplace, you may have to verify it's you with your corporate device.

To help protect your account and data, you must verify it’s you when you complete sensitive actions. This is Google’s approach to provide multi-layered security.

Google uses this to help protect your account against damage that a hacker might cause. With this protection, even if a hacker gets your personal details or login info, they’ll still face a challenge before they complete any sensitive actions on your account.

Sensitive actions in your account settings:

  • View activity saved in your Google Account.
  • Change your password.
  • View saved passwords.
  • Turn on 2-Step Verification.
  • Download your data.

When you make sensitive changes within Google products, we may ask to verify your identity. Examples of sensitive changes include:

  • Change of channel ownership on YouTube Creator Studio.
  • Change of Google Ads account budget.
  • When you buy any other product or service from Google.
    • Example: Buy a Google Pixel or Nest device from Google Store.
  • In Gmail, when you create or modify sensitive email filters, add a forwarding address, enable IMAP access, or add a delegate. Learn how to delegate & collaborate on email.

To prove it’s you, have a device or security key available that's been registered to your account for at least 7 days. You can use:

  • A device associated with the recovery phone number for your account
  • A device that's signed in to your Google Account
  • For accounts with 2-Step Verification turned on:

Important: If you can’t verify it’s you, Google may not allow you to complete the sensitive action for a period of 7 days. This delay is to make sure your account and data stay protected.

  • In the 7 day period: You can still use and access your account but you won’t be allowed to update any sensitive information or complete sensitive actions unless you verify it’s you.
  • After the 7 day period: You can access the relevant sensitive action even without the verification.

We understand that in some cases, legitimate owners of the account might lose access to a phone or a phone number. We only limit access to the sensitive actions and for a period of 7 days. To continue your purchase in some purchase flows, you can use the guest checkout.

Fix problems

If you’re signed in to your Google Account but can’t verify it's you to complete an action, go to the relevant section below.

You get a "Sensitive action blocked" message

To protect your account, you may be blocked when you complete some sensitive actions when at least one of these items hasn’t been associated with your Google Account for at least 7 days:

  • Device used to sign into your Google Account
  • Phone number
  • Security key

If you don’t get the option to verify it’s you, you can:

You can't use your device

Your Android device is offline

If you're signed in to an Android device that isn't connected to the internet, you can still use it to verify it's you.

  1. Select the sensitive action you are trying to complete.
  2. On the "Verify it's you" screen, tap More ways to verify and then Get a security code on your Android phone.
  3. Follow the on-screen instructions.

Learn how to get security codes on your Android device.

Your device isn't available

If you can't use your device, you can try again from another device you use often and follow these steps.

You don't get a prompt on your device

If you don't get a prompt within a few minutes:

  1. Make sure your device is connected to the internet.
    • To get prompts, you need Wi-Fi or mobile data turned on.
  2. Confirm that you're signed in to your account on your device.
  3. Go to the sign-in screen and then tap Resend.
Tip: If you've recently updated sensitive info, wait a full 7 days after you've made the update and try again. If you still don't get a prompt, tap Try another way and select a different option.
You don't get a text

If you don't get a text within a few minutes:

  1. Make sure you have the phone associated with the correct recovery phone number on your account.
  2. Make sure you have a strong network signal or that the phone is connected to Wi-Fi.
  3. Go to the sign-in screen and select Resend.
  4. If you still don't get a text, select More ways to verify and then Get a security code on your Android phone.
Tip: If you've recently updated sensitive information, wait a full 7 days after you've made the update and try again. Learn more about how to get a security code on your Android device.

Can't sign in to your Google Account

If you can’t sign in to your Google Account to use Google services like Gmail, Drive, or Photos, learn how to recover your Google Account.

Search
Clear search
Close search
Google apps
Main menu
10408868542006650404
true
Search Help Center
true
true
true
true
true
70975
false
false