· 9 min read
Locked Out of Your Google Account? What Actually Works
A new phone, a hacked account or a recovery form that keeps saying no. Here is what to try when Google won't let you back in, in the order I would try it, and what to set up now so it never happens to you.
Jump to section
If Google won’t let you back into your account, you are far from alone. I answer questions on Reddit most days, and getting locked out of Gmail or a Google account comes up more than almost anything else. A new phone, a lost code, a hacked account or a recovery form that keeps saying no.
Someone I know broke their phone. They bought a replacement and restored everything from the backup, but they couldn’t sign in to Google. Everything else came back, but the one account that held their email and their photos wouldn’t let them in. That is the most common story I see, and it catches people out because they did everything right with the backup.
This guide covers the five problems that come up again and again, what to try for each one, and the few things you can set up today so it doesn’t happen to you. It is for personal Google accounts. If your account comes from work or school, skip to the box below the table.
Short answer: go to g.co/recover, Google’s own account recovery page, and:
- Use a phone or computer you have signed in on before, on your home Wi Fi, with any VPN turned off.
- Answer every question, even if you have to guess. Choose Try another way if a step asks for something you don’t have.
- If it says no, wait a few days before trying again. Trying over and over makes it harder.
- Never pay anyone who says they can get you in. Only Google can.
Before you start:
- Find your oldest device. An old phone, tablet or laptop that is still signed in to your Google account is the most useful thing you can have. Google trusts it far more than anything new.
- Be at home. Use the Wi Fi you normally use, and turn off any VPN. A familiar place helps.
- Have your details ready. Your recovery phone number, any old passwords you remember and roughly when you made the account.
- Use only Google’s own pages. Type g.co/recover or accounts.google.com yourself rather than clicking an advert.
Which Problem Do You Have?
| What you see | What it usually means | Where to start |
|---|---|---|
| New or replacement phone, and Google wants a prompt or code from the old one | Google doesn’t know the new phone yet | 1. New or broken phone |
| You know your password but Google keeps saying “Verify it’s you” | A new device or place looks risky to Google | 2. The verify it’s you loop |
| Your password no longer works and the recovery phone or email isn’t yours | Someone else got in and changed things | 3. Hacked account |
| “Google couldn’t verify this account belongs to you” | Recovery didn’t have enough to go on | 4. Recovery keeps saying no |
| “Your account has been disabled” | Google thinks a policy was broken | 5. Disabled account |
Work or school account? If your address ends in your company’s or school’s name rather than gmail.com, the account belongs to them. Their IT team or office can reset your password and sign out every device in a couple of minutes, which is much quicker than anything Google can do for you. Contact them first.
1. A New or Broken Phone
This is the one that caught out the person I mentioned. Restoring a backup brings back your apps, photos and messages, but Google treats the new phone as a stranger. If your account has 2-Step Verification, it may try to send a sign in prompt to your old phone, which is sitting in a drawer with a cracked screen.
Look for another signed in device
If you have a tablet, a laptop or an old phone that is still signed in to Google, the prompt may go there instead. On a computer you can also open your Google Account security page while you are signed in and check how you sign in.
Choose Try another way
On the sign in screen, select Try another way. Google lists the other ways it can check it’s you. The usual ones are:
- A text or call to your phone number. If you kept the same number and moved your SIM to the new phone, this often works straight away.
- A backup code. If you saved the eight digit backup codes when you set up 2-Step Verification, each one works once.
- A security key or passkey. If you set one up, it can be used on the new phone too.
- Google Authenticator. If the app was backed up to your Google account, the codes come back when you sign in to the app. If it wasn’t, the codes were only on the old phone.
If the old phone still turns on, use it
A phone with a broken screen is often still working underneath. If it still turns on and gets a signal or Wi Fi, the sign in prompt can still arrive there.
Go to account recovery
If none of that works, go to g.co/recover and follow the steps. Section 4 below has the tips that make the biggest difference.
Good to know: Google can also ask a recovery contact to help. This is a friend or family member you choose in advance. When you are locked out, Google shows you a code and your contact confirms it on their phone. They never get into your account. It has to be set up before you need it, so it’s in my list at the end.
2. The “Verify It’s You” Loop
This one is very common, and it is Google doing its job a little too well. When a new phone or computer signs in, Google sometimes blocks it from changing anything important for a while. The idea is to stop a thief who grabs your phone from changing your password and locking you out before you can react. It is annoying when you’re the real owner.
What usually gets you through:
- Do it from the device you have used Google on the longest, ideally one that was signed in well before the new one.
- Be on your home Wi Fi with any VPN switched off.
- Give it time. Use the device normally and the block usually lifts on its own. Each failed attempt can restart the clock, so try once, and if it says no, leave it for a few days.
- While you wait, check your recovery phone number and recovery email are right at myaccount.google.com.
3. A Hacked Account
If your password suddenly stops working, or you get an email from Google saying your recovery phone or email changed and it wasn’t you, act quickly. The person who got in will try to change everything so that Google sends its codes to them instead of you.
Start recovery straight away
Go to g.co/recover from a device you have used before. If Google offers to send a code to a phone or email you don’t recognise, choose Try another way until it offers something of yours. If you got a security alert email from Google, it may have a link to say it wasn’t you, which starts the same process.
Once you are back in, close every door
- Change your password to one you have never used anywhere else.
- Go to Security Checkup and sign out of any device you don’t recognise.
- Put your own recovery phone number and recovery email back.
- In Gmail on a computer, open Settings and check Forwarding and POP/IMAP, Filters and Blocked Addresses and Accounts and Import for anything you didn’t add. A forwarding address or a filter is a common way to keep reading your mail after you have changed the password.
- Look through your Sent folder so you know who might have been sent scams in your name, and let them know.
Watch out: your Gmail address is probably the reset address for your bank, your shopping and your social media. Once you are back in, change the passwords on those too, starting with anything that holds money.
4. Recovery Keeps Saying No
“Google couldn’t verify this account belongs to you” is the message people dread. It doesn’t mean the account is gone. It means the recovery form didn’t have enough to be sure, and there are a few things that improve your chances next time.
- Use a device and place Google knows. This makes more difference than anything else. An old laptop on your home Wi Fi beats a brand new phone on mobile data.
- Answer every question. If you aren’t sure of an old password or when you made the account, give your best guess rather than skipping it.
- Use an email address you can check. Google may write to you about the request, so give one you can actually open.
- Don’t keep trying. Several attempts in a row look like someone guessing. Leave it a few days between tries.
- Try a recovery contact. If you set one up, it gives Google another way to check.
Google doesn’t offer phone support to help you sign in, so there is no one to call. Google’s own tips for completing account recovery are worth reading before your next attempt.
5. A Disabled Account
This is different from being locked out. Google has turned the account off because it thinks a rule was broken. When you sign in at accounts.google.com, you should see a message saying so.
- Sign in, and select Start appeal if Google offers it.
- Explain clearly and politely why you think it was a mistake. Stick to the facts.
- Give an email address that works and isn’t the disabled one, so Google can reply.
- Check that address, including the spam folder, while you wait.
Google says it reviews appeals, but there is no timetable you can rely on and no one to chase. This is the case where having your own copy of your mail matters most, which brings me to the part I would really ask you to do.
Watch out for recovery scams: search for “Google account recovery” and you will find adverts, phone numbers and “recovery experts” offering to get you back in for a fee. Google doesn’t charge for recovery, and nobody outside Google can unlock your account. Never give anyone your password, a code Google sends you or remote access to your computer.
Do This Before You Need It
Every one of the problems above is easier if you set a few things up while you can still get in. It takes about ten minutes, and I would do it today.
Check your recovery phone and email
In your Google Account, go to Security and check your recovery phone number and recovery email are current. A recovery email should be a different account you can still open, not another Gmail you have also forgotten the password to.
Save your backup codes
Under Security, open 2-Step Verification, then Backup codes. Google gives you ten codes. Print them or save them in your password manager, somewhere that isn’t your phone.
Add a second way to sign in
Don’t rely on one phone. A passkey saved in a password manager that syncs, or a security key on your keyring, keeps working when a phone breaks. I use YubiKeys, and my YubiKey guide shows how to add one to Gmail.
Add a recovery contact
Under Security, look for Recovery contacts and add someone you trust. Google introduced this in October 2025 for eligible personal accounts, so you may not see it on every account yet.
Keep your own copy of your mail
Use Google Takeout to download your mail, photos and files every few months. If the worst happens, you still have your history, even if the account itself is gone.
Why I Don’t Keep Everything in One Google Account
I used Gmail for years, and it became the place for personal mail, accounts, receipts and the password resets for almost everything else. When I moved away from Gmail, privacy was the main reason, but reading these Reddit posts every week has given me another one. When one account holds your email, your photos and the sign in for everything else, losing it is a very bad day.
I’m not saying everyone should leave Google. Plenty of people are happy there, and the steps above will keep most of them safe. But it is worth thinking about what would happen if that one account went. Using your own email domain means your address stays yours even if a provider locks you out, and I write more about that risk in email as a single point of failure.
Frequently Asked Questions
Can I phone Google to get back into my account?
No. Google doesn’t offer phone support for signing in to personal accounts. Any phone number claiming to be Google account support is almost certainly a scam.
How long does Google account recovery take?
Sometimes a few minutes if Google is happy straight away. If it needs more checks, it can take several days, and Google may email the address you gave it.
I restored my new phone from a backup. Why can’t I sign in?
A backup brings back your apps and data, but Google still sees a new device. It wants to check it’s you, usually with a prompt on your old phone or a code. Choose Try another way and use your phone number, a backup code or another signed in device.
Should I just make a new Gmail account?
Only once you have given recovery a fair go over a week or two. A new account won’t have your old mail, and every site that uses your old address for password resets will still be pointing at it.
Is a text message code safe enough?
It is much better than nothing, but a passkey or security key is safer and doesn’t depend on your phone number. I would keep the phone number as a backup and add one of those as well.
The Bottom Line
Most people who get locked out do get back in, but it usually takes patience, the right device and not trying too often. The best fix is the ten minutes before it happens: check your recovery details, save your backup codes, add a second way to sign in and keep your own copy of your mail. Do have a go at that today, while you can still get in.
Sources: Google: tips to complete account recovery, Google: fix common issues with 2-Step Verification, Google: avoid getting locked out, Google: recovery contacts, Google: recover a disabled account.
Note: This guide contains no affiliate links. Google changes its sign in screens often, so the exact wording you see may differ.
Paul O'Brien
I've spent over 25 years working hands-on with email, DNS and cloud infrastructure. I test email providers and privacy tools for real, then tell you what they're good at and where they fall short.
More about meMore like this
You're subscribed. New articles come by email, as I publish or every Thursday. Change how often



Comments