I have received this email from Google:
Someone just used your password to try to sign in to your Google Account firstname.lastname@example.org. Details: Sunday, July 9, 2017 11:27 AM (France Time) ******, France Google stopped this sign-in attempt, but you should review your recently used devices
Google was right! Someone has my password and tried to login to my account.
I changed my password, but I wonder whether the attacker can use "Enter the last password you remember" option of the Google to regain her access to my account? Can I disable this option for my account?