Google - suspicious sign-in prevented

Forums › Android › Google - suspicious sign-in prevented

martyyn

1284 posts

Uber Geek

Subscriber

# 141032 27-Feb-2014 16:28

I just received notification via email and on my phone about an attempt to access my gmail account from England.

From what I can see of the email it looks legit, there is nothing obvious about it being a phishing email and given I got a notification on my phone as well you would think it was legit.

It's time I changed my password anyway, so I logged in to gmail from a fresh browser, changed the password, received another to say my password had been changed successfully and moved on.

I'm now however getting notifications on my phone (galaxy nexus) that I cant log in and 'action is required'. But I can still log fire up any Google app with no problems.

Should I be worried ?

Stu

Hammered
5285 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 995607 27-Feb-2014 16:32

I take it you've changed your password in your phone to match the password you just set in your browser?

kingjj

Baby Get Shaky!
1643 posts

Uber Geek

Trusted

Subscriber

# 995628 27-Feb-2014 17:07

Are you using App passwords for devices connected to your google account?

redmouse

69 posts

Master Geek

Subscriber

# 995629 27-Feb-2014 17:09

Do you ever use a VPN? That can cause Google to see you login from overseas, even when you're at home.

martyyn

1284 posts

Uber Geek

Subscriber

# 995631 27-Feb-2014 17:10

App passwords was the key :)

I decided to set up 2-stage authentication and so I set one up for the phone, had to wait a while for the text (and did a call in the end) but that's just this minute processed.

That was an interesting half an hour !

martyyn

1284 posts

Uber Geek

Subscriber

# 995633 27-Feb-2014 17:12

I connect to a work VPN from home sometimes, but I don't use Gmail at all on that laptop.

With my email address being similar to my username its possible someone just typed one too many y's

richms

22433 posts

Uber Geek

Trusted

Subscriber

# 998106 3-Mar-2014 12:49

Except to get that notification they have to have your correct password. You aren't one of those lazy people who use the same password in several sites are you?

Richard rich.ms

martyyn

1284 posts

Uber Geek

Subscriber

# 998125 3-Mar-2014 13:03

richms: Except to get that notification they have to have your correct password. You aren't one of those lazy people who use the same password in several sites are you?

Are you saying in order for Google to send me the notification the person in England has to know my password ?

After this I'm no longer as lazy as I was previously :)

richms

22433 posts

Uber Geek

Trusted

Subscriber

# 998129 3-Mar-2014 13:06

Yes. They have blocked the login because it was dodgey. Check your authorized apps because a friend who had this happen had something authorized to his contacts and stuff. They will probably have tried the login from many locations and been successful.

Chances are some flakey php forum or something has had their user base dumped and you used your Gmail and same password on it.

Richard rich.ms