Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

You can strengthen a personal Google Account without buying anything: review Google’s Security Checkup, update recovery details, choose a phishing-resistant sign-in method, and remove unnecessary app access. Keep a reliable recovery route as you make changes; no single setting guarantees that an account cannot be compromised.

How do I make my Google Account more secure?

Start with Google’s account controls, then address sign-in and recovery. The labels and available options can vary by account, device, and region. Work or school Google accounts may also have options controlled by an administrator.

  1. Open Security Checkup and review its personalized recommendations. Google may flag actions with different urgency levels.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  2. On your Google Account’s Security & sign-in page, review recognized devices and the sign-in methods listed for your account. Remove access or investigate anything you do not recognize.

    #1 Best Overall
    Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
    • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
    • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
    • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
    • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
    • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
  3. Set or confirm your recovery phone and email before changing sign-in methods. Use contact details you can regularly access.

  4. Use a unique password that you do not reuse on another site. Google’s Password Checkup can identify weak, exposed, or reused credentials saved in your Google Account; a password manager can help create and manage unique passwords.

  5. Add a passkey or enable 2-Step Verification, based on the devices and methods available to you. If you use password-plus-second-step sign-in, prefer a stronger second step than SMS where available.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  6. Remove apps and browser extensions you no longer need, avoid unknown apps or download sources, and keep your devices and software current using the device maker’s guidance.

    Rank #2
    Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
    • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
    • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
    • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
    • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
    • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
  7. Treat unexpected messages, calls, and websites cautiously, even when they appear to come from someone you know. Do not use urgent links in suspicious messages; go directly to your Google Account to check for alerts.

Google Account Help describes a recovery phone number and email address as “powerful security tools.” They help with access and account security, so do not treat recovery details as disposable clutter.

How should I set up account recovery?

Visit your Google Account’s recovery settings and add a personal recovery phone and an email address you use and can reach independently. A recovery method is useful only if it is still yours, accessible, and not dependent on the account you are trying to recover.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Do not use a Google Voice number as your recovery phone. If you are locked out of the Google Account that provides that number, you could also lose access to the recovery code sent there.

    Rank #3
    Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
    • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
    • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
    • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
    • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
    • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
  • Keep both recovery details current. Google may offer different recovery options depending on your region, account, and device.

  • Allow for delays after changing authentication or recovery details: changes may take up to seven days to take effect, and a newly added method may face additional trust checks.

Passkey or 2-Step Verification: which should I use?

A passkey is a cryptographic sign-in credential associated with a device or synced credential system—not simply another password. Google says, “With passkeys, you can sign in to your Google Account with your fingerprint, face scan, or phone screen lock, like a PIN.” The device must be unlocked to use the passkey.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For a Google Account with 2-Step Verification, signing in with a passkey bypasses the separate second step because the passkey verifies possession of the device. That can make sign-in simpler, but it changes the sign-in flow. Setting up a passkey does not delete your existing sign-in factors.

Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Method How it works Useful consideration
Passkey Use a passkey and unlock its device with a fingerprint, face scan, or screen-lock PIN. Resists phishing better than a password. Availability depends on supported operating system and browser versions; some cross-device uses also need Bluetooth or synced credential support.
Password plus 2-Step Verification Enter your password and then complete a separate verification step. Google recommends choosing a stronger second step than SMS where available and lists security keys as its most secure verification step.

Choose a method you can use reliably and keep a recovery route available. Device and browser compatibility can affect which passkey options appear. For accounts managed by a workplace or school, an administrator may restrict sign-in methods.

When does a physical security key make sense?

A physical key is an optional way to add a second step to 2-Step Verification. Google supports FIDO1 or FIDO2 security keys for that purpose. To create a passkey on the key itself, it must support FIDO2. Register the key to your account before relying on it; Google notes that a newly added key may take seven days to become available at sign-in.

If you choose keys, Google recommends having a primary and a backup. Consider the connector and capabilities of the devices you actually use: USB-A, USB-C, and NFC are not interchangeable on every device, and compatibility depends on device, operating system, and browser. Google’s Titan range includes USB-A/NFC and USB-C/NFC versions, but a particular version is not guaranteed to work with every device.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Who should consider Advanced Protection?

Google positions Advanced Protection as a stronger option for people at elevated risk of targeted attacks, including journalists and activists. It requires a passkey or security key, limits third-party app access, applies stronger checks to suspicious downloads, and tightens account recovery. Google says enrollment is free; someone who chooses physical keys may need to buy them.

Best Value
Yubico - YubiKey 5C - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB, FIDO Certified - Protect Your Online Accounts (5C)
  • POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Before enrolling, consider whether the required sign-in method and stricter recovery process suit your devices and circumstances. Advanced Protection is not a substitute for keeping recovery information current.

What should I do if I think my account was compromised?

Use Google’s account recovery process if you cannot sign in. If you can still access the account, follow Google’s steps for securing a hacked or compromised account. After regaining control, review recent activity and account details, remove anything you do not recognize, and revisit Security Checkup.

Google warns that it does not work with services that claim to provide account or password support. Do not give those services your password or verification codes.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Official Google guidance

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.