How to Recover Access to a Locked Google Account

If you cannot sign in to Gmail, YouTube, Google Drive, Google Photos or another Google service, the safest solution is Google’s official Account Recovery page. It can help when you have forgotten your password, lost access to your phone, cannot receive a verification code or suspect that someone changed your account details.

Start at accounts.google.com/signin/recovery. Enter the affected Gmail address or phone number and follow the questions. Do not give your password, OTP, recovery code or verification prompt to anybody claiming they can unlock the account for a fee.

First, identify what “locked” means

Different sign-in problems require different steps. Before trying repeatedly, check the message Google displays:

• Forgotten password: You know the email address but cannot remember the password.
• Lost phone or verification method: You know the password but cannot receive a code or approve a sign-in.
• Suspicious activity: Google has blocked or challenged the sign-in because it appears unusual.
• Account takeover: Someone may have changed your password, recovery phone number or recovery email.
• Disabled account: Google says the account has been disabled or suspended. This is different from simply forgetting a password.

The recovery page is the correct starting point for most of these situations. If Google specifically says that the account is disabled, look for the appeal or review option shown in the sign-in message rather than creating multiple new recovery attempts.

How to recover the account step by step

1. Open Google’s official recovery page

Type the address yourself or use a trusted bookmark. Be careful with search results, social-media messages and adverts that imitate Google. Check that the address is on the google.com domain and that the connection uses HTTPS.

2. Enter the correct account details

Enter the Gmail address, Google Account email address or phone number linked to the account. If you are unsure of the email address, use Google’s username-recovery option where available. You may need the recovery phone number or recovery email and the name used on the account.

3. Answer as many questions as possible

Google may ask for an old password, a recovery email address or another way to confirm that you own the account. Give your best accurate answer. An old password that you genuinely used is generally more useful than several guesses.

Do not skip questions simply because you cannot answer one immediately. If a method is unavailable, choose another offered option. Google does not always display every option on every attempt, so the available choices may depend on the information connected to the account.

4. Use a familiar device and connection

Try recovery from a phone, tablet or computer where you previously signed in. If possible, use the same browser, home or office network and general location you normally used. This may help Google recognise the sign-in as legitimate.

For readers in Nigeria, this could mean trying the phone you normally use for Gmail, YouTube or Android services rather than a borrowed device. If you are abroad, use a device and connection you regularly used before travelling, when practical. Avoid constantly switching between VPN servers, browsers and unfamiliar devices during recovery.

5. Check your recovery email and phone

Look for Google’s message in the recovery email account or SMS on the linked phone. Check the spam, junk and promotions folders if you are expecting an email. Make sure the phone has network service and that you entered the correct country code if a phone number is requested.

Never forward a verification code to another person. Google support will not need you to read your one-time code aloud to a stranger.

6. Set a new password if Google approves the recovery

Create a strong, unique password that you have not used on another website. A long phrase made from unrelated words can be easier to remember than a short, complicated password. Do not use your name, birthday, phone number, football club, business name or a predictable pattern.

After changing the password, review the account’s security settings. Check recent device activity, signed-in sessions, recovery phone number, recovery email and two-step verification methods. Remove devices or methods you do not recognise.

What to do if you lost your phone or cannot receive a code

If the old phone is lost, stolen or damaged, try another recovery method shown by Google. You may still have access to:

• A recovery email address.
• A device where you are already signed in.
• Backup codes that you saved when enabling two-step verification.
• A security key or another approved verification method.
• Your mobile network account, if replacing the SIM can restore access to the same number.

Contacting your network provider may help you replace a lost SIM, but the provider cannot reset your Google password. Protect your SIM and email account as well, because control of either can affect account recovery.

If you think the account was hacked

Use the recovery process immediately and secure the email account connected to Google. Once you regain access:

1. Change the Google password and any other account using the same password.
2. Sign out unfamiliar devices and sessions.
3. Check whether the recovery email, phone number or two-step verification settings were changed.
4. Review Gmail forwarding rules, filters and sent messages for activity you did not create.
5. Check Google Drive, Photos, YouTube and other services for unfamiliar activity.
6. Run a security check on the phone or computer and remove suspicious applications or browser extensions.

If the attacker also controls your recovery email or phone number, secure those services first. Do not continue entering sensitive details on a link sent by the suspected attacker.

When Google says the account is disabled

A disabled account is not normally fixed by repeatedly guessing the password. Read the notice carefully and use the official review or appeal route provided by Google. Give truthful information and explain the problem briefly. Avoid paying an unofficial “agent” who promises guaranteed restoration.

If the account belongs to a school, employer or organisation, the administrator may control access. In that case, contact the organisation’s authorised Google Workspace administrator. A personal Gmail recovery process may not restore an organisation-managed account.

Common mistakes that reduce your chances

• Entering random passwords repeatedly instead of using information you know is accurate.
• Trying recovery from many unfamiliar devices and locations at once.
• Using a VPN that makes your sign-in location change repeatedly.
• Creating a new account and assuming it will restore access to the old one.
• Paying people on WhatsApp, Facebook, Telegram or X who promise a guaranteed unlock.
• Sharing passwords, OTPs, backup codes, identity documents or screen recordings with strangers.
• Clicking urgent “your Gmail will be deleted” links without checking the web address.

How to protect the account after recovery

Turn on two-step verification and keep more than one secure recovery method where Google allows it. Store backup codes privately and do not save them in a public note, chat or shared device. Keep your phone’s operating system and browser updated, use a screen lock and review account security activity occasionally.

For anyone using Google services for job applications, scholarships, creator work, online shopping or business, account recovery is especially important. A single Gmail account may contain application messages, documents, payment notifications and social-media recovery links. Use a unique password and separate important accounts where practical.

The safest next move

Use Google’s official recovery page, provide consistent information from a familiar device and protect every verification code. If the account is disabled, follow the review route shown by Google instead of relying on unofficial helpers. Recovery may not be immediate, but avoiding scams and keeping your details consistent gives you the best legitimate path back into the account.