Primary-account guide
How to secure Gmail
Your primary email can reset many other accounts. Secure it using Google’s own account controls; HackProof does not need or request mailbox access.
Start with Google Security Checkup
- Open Google Security Checkup yourself. Go to myaccount.google.com/security-checkup and verify the address bar before signing in.
- Review recent security activity and devices. Sign out sessions you do not recognize. If something looks wrong, change the password from a trusted device.
- Check recovery phone and email. Remove anything unfamiliar and make sure you still control the recovery methods listed.
- Add a strong second factor. Prefer a passkey or hardware security key; an authenticator app is also stronger than password-only access.
- Review third-party access. Remove apps and services you no longer use or do not recognize.
Look for mailbox persistence after an incident
If you suspect takeover, also review forwarding addresses, filters, delegated access, and sent messages. Attackers sometimes create rules that hide security alerts or forward future mail.
Why HackProof does not connect to Gmail
Reading Gmail messages requires restricted OAuth scopes. A production app with server access to restricted data may need Google verification and an annual third-party security assessment. The first HackProof release avoids that data and trust surface entirely.