Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I keep getting messages that my sign in to my gmail account has failed. I am not trying to get into my account. I did go in and change my password this morning because of that. What do I do now? I would guess it has been at lest 10 times.

share|improve this question

closed as off-topic by Xander, TildalWave, Gilles, Adnan, Rory Alsop Sep 21 '13 at 21:32

  • This question does not appear to be about Information security within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

3  
This question appears to be off-topic because it is outside of the scope of IT Security, and should be direct to GMail/Google support instead. –  Xander Sep 21 '13 at 16:36

2 Answers 2

Gmail has a helpful feature called "Last Account Activity" that shows you what has been happening with your account. It's found on the bottom right of the gmail window.

Full details are at https://support.google.com/mail/answer/45938?hl=en.

With this, you can get a rough idea of where the activity is coming from. This will help rule out two possible issues: your little brother (or wife, or room mate, or whoever) trying to log on to your computer when you're not there, or a old machine of yours somewhere that is trying an old password.

Beyond that, if some anonymous person on the Internet is trying to log onto your mail, there isn't much you can do to stop them trying.

But there are things you can do to make sure your gmail account is even more strongly protected than it is now. Even though they are failing now, it's always wrth looking to see if there is more you can do.

Google have a checklist of things to do to "harden" GMail at https://support.google.com/mail/checklist/2986618?hl=en&ref_topic=1669043.

Four of their suggestions are particularly important:

  • Choose a strong password (make it longer and more random).
  • Enable HTTPS.
  • Make sure all your software, including your malware protection, is up-to date
  • Turn on 2-step authentication

This last option is very applicable to your problem. With 2-step enabled, an attacker will need both your password and access to your mobile phone in order to log on as you.

share|improve this answer

Somebody can try to login to your account as many times as they like. Ensure you have a strong password and that's about all you can do to protect yourself. The fact they know your email address doesn't really matter and if your password is strong, there is no problem.

You could also setup 2 factor authentication to further protect yourself: http://scotthel.me/PasswordSecurity

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.