Google Urges Gmail Users to Run Security Checkup
Google is promoting its Security Checkup tool, which reviews devices, recovery methods and connected apps in about two minutes.
Updated on Nov. 1, 2026 in Cybersecurity
Live Poll
Have you checked which apps and devices can access your email account recently?
Google published a blog post on October 30 urging Gmail users to run its Security Checkup tool. The checkup lists signed-in devices, recent security events, sign-in and recovery methods, and third-party apps with account access, which users can revoke.
Why it matters
The push comes as Google warns that Gmail's delegation feature, which gives another person direct access to an inbox, does not expire when a password is changed and is not affected by two-factor authentication. Google is framing the checkup as routine preventive maintenance rather than a response to a specific new vulnerability.
The checkup takes roughly two minutes and surfaces signed-in devices, recent security events, sign-in and recovery methods, and third-party app permissions on one screen. Users can revoke third-party app access directly from the tool or from myaccount.google.com.
The players
Google is the technology company that operates Gmail and the Security Checkup tool, and has offered versions of the checkup for years as part of its account security features.
The details
Users can reach Security Checkup through myaccount.google.com or by searching for it while signed in. Google has offered some version of the tool for years, and the new promotion highlights delegation access and connected apps as areas users often overlook.
Timeline
October 30, 2026: Google publishes blog post promoting Security Checkup.
November 1, 2026: GCN publishes article on Google's Security Checkup push.
Security Pattern
Google's promotion of its Security Checkup extends a tool it has offered for years, now highlighting Gmail delegation access that survives password changes. The push follows a broader industry pattern in which account-review features are promoted as routine maintenance alongside reports of automated sign-in attacks, such as the Storm-0940 campaign that attempted more than 2,250 Microsoft 365 tenants.
Running the checkup takes about two minutes and lets users remove third-party apps and review recovery methods they may have forgotten. Gmail delegation access granted to others remains active after a password change, so users should review it separately.
The takeaway
Two minutes spent reviewing connected apps and recovery methods can close access that password changes alone will not remove. Delegation access in particular needs to be checked directly in Gmail settings.
Further reading
Explore more Cybersecurity coverage for context on account protection and sign-in threats.
More information
Review your account at Google Security Checkup and connected app access to see devices, recovery methods and third-party app permissions.
Source note: This article includes information reported by GCN.
Live Poll
Have you checked which apps and devices can access your email account recently?
