It looks like this is a known issue, and Google is on top of it.
From the product forums:
We've gotten reports about some users being signed out of their accounts unexpectedly. We're investigating, but not to worry: there is no indication that this is connected to any phishing or account security threats.
Please try to sign-in again at accounts.google.com ...
Whilst it is possible to unlink other computers through the web interface, as slhck noted, this leaves all of your files where you don't want them. Depending on the sensitivity of your files (and how much work you want for yourself) you can:
Back up all Dropbox files locally
Delete any sensitive files from your Dropbox
Wait for the sync to remove these ...
Google found that security questions were not really secure at all as most of the answers can be found with a simple Google search. For example Sarah Palin had her Yahoo! account hacked because someone simply Googled her birthday, ZIP code and where she met her spouse.
Google has completely removed support for security questions and one only had the ...
Go to https://www.dropbox.com/account#security and here under My devices, unlink the machines you no longer own:
Note that the computer, according to Dropbox:
will no longer stay in sync, but it will keep a copy of any file it currently has.
Google offers quite a few tools to help you keep unwanted persons out of your account, but some of them only work if you activate and use them.
Keep your Account Recovery Options up to date
Mobile telephone number: If you forget your password, or if there is unusual activity on your account, Google can send you a security code via SMS for you to prove you ...
You can create redundant code before your device is lost or a reason.
Deactivate MFA, then configure and enable a virtual MFA device for use. Make a secure backup of the secret configuration key or QR code.
For example, if you lose the smartphone where the virtual MFA app is configured.
Google Authenticator → Set up account → Enter provided key
According to Google Support:
Removing trusted computers from your list
You can remove computers from your set of trusted computers at any
time. To do so, sign in to your account and go to your 2-step
verification settings page. Under the “Advanced” section, you’ll have
the choice to remove the computer you’re using at the time or all
Alternatively, go to https://myaccount.google.com > Apps with account access > Manage Apps
You will be prompted for your password. After that, you're shown a list of all sites you've used Google to authenticate with, and applications that have access to your account.
Clear the browser's cookies (and perhaps cache/history).
'Trust this computer' option doesn’t work
For computers you trust, Google recommends you select the "Trust this computer" option when you are asked for a verification code. When you check this box, you won’t have to enter a code every time you sign in to your account from that computer.
I have found the answer here.
In Calendar: Click the gear, select "Settings",
Find the "Automatically add invitations to my calendar" section,
Set its value to "No, only show invitations to which I have responded".
As far as I can tell, you can't directly change your password the web site or the Android app (I don't know about iOS). You can, however, request that they reset your password.
Log out of the web site (if you're currently logged in)
Instead of logging back in, click "Forgot password"
Follow the instructions
Authenticator works even when you don't have any sort of network available for your smartphone.
I don't know about your mobile provider, but I don't trust mine to deliver SMS messages in anything that resembles a timely manner.
Beyond that, it is more secure, as you've noted.
You really can't stop them from trying but you can make your account more secure. For GMail / Google account I would setup the 2 step authentication. The 2 step process links your smartphone to your account so when you log in and get through, google will also send you a pin to your smartphone from which you will then verify. Much more secure.
It's because you might have some other security alerts into your account that you haven't reviewed yet.
Here's a simple way to do that:
Go to https://myaccount.google.com/security-checkup
You will see this security checkup box:
Click on the unresolved issues.
Click on the 3 dots menu on top right of the specific issue and choose ...
As far as I can tell, there's no backup codes option, though I too would like to see one. This article describes your next best option:
All I had to do was go to the Unusable Authentication Device page and fill out just two fields of a simple form providing my Primary phone number I used to register my AWS account and then select the problem I encountered ...
No, not everything with everyone. That would be wrong and insane
Here's from official documentation: (click on link to see everything, I'll just quote up a few paragraphs)
WITH OTHER PAYPAL USERS
When transacting with others, we may provide those parties with
information about you necessary to complete the transaction, such as
your name, account ID, ...
From the G Suite Administrator Help:
Sign in to your Google Admin console.
Sign in using an administrator account.
From the Admin console dashboard, go to Security and then Basic settings.
To see Security on the dashboard, you might have to click More controls at the bottom.
Under Less secure apps, select Go to settings for less secure apps.
In the ...
Google is probably using information that it has not specifically requested of you during the password reset process in order to verify your ownership of the account. Specifically, tokens stored on your computer, and your IP address.
I had a similar experience to yours, which initially alarmed me, and tested the above theory by using the Tor browser to ...
That you aren't seeing the option to enable the 2-factor authentication in your settings page may indicate that the Administrator for your Google Apps for your domain hasn't enabled the feature to be used by people in your Google for Business instance.
If that is the case, the answer to your question would be:
The administrator for your Google Apps ...
I would configure the account to enable IMAP so that you can download messages (with their attachments) from Gmail using an email program such as Thunderbird, Apple Mail or Microsoft Outlook.
Using a mail client with IMAP gives you an alternate method to access mail messages; GMail labels, Drafts and Sent Messages will appear as folders in the email program....
Use an alternate browser than your regular one
Open a private browsing tab or window - all browsers have them (Chrome calls it "Incognito window", for example)
Browse to your spam folder and view messages - do not confirm the "show images" option!
Close private tab - nothing got saved to your machine
Google does not provide us any way to manually set the expiration limits of the verification cookies. This is an excellent case to offer up to them as a suggestion for them to add and option during issue time to auto revoke the code after a certain amount of time.
Until Google implements some form of expiration control you could as manually change the ...
HTTP cookies are the most common. They are usually written and read by the site you are visiting (the "first party"), but also (depending on your browser and browser settings) written and read by third-party elements on the page you are visiting.
Also common are small image elements, served from various tracking servers (these are common in commercial ...
As I know, logging into Google does not give sync permission to the browser unless you sign in to "Google Chrome" which you may be prompted for, when opening Google Chrome browser. So pay attention if you are prompted for such a thing.
Also on a public machine, I recommend using Incognito mode for Chrome (by pressing CTRL+Shift+n) and Private Browsing mode ...
No, you can't do that. There is nothing in Gmail's settings to restrict from where your account can be accessed.
Really, you shouldn't have to. Google already does some checking to see if your account is being accessed from wildly divergent locations.
According to the Google Online Security Blog:
You may remember that a while back we launched remote sign ...