Google has issued an urgent alert to Gmail users, advising them to change their passwords immediately to protect their accounts. This comes after the tech giant confirmed that hackers are exploiting compromised passwords, resulting in numerous “successful account breaches”.
This alert follows a major security breach that exposed vulnerabilities, with Google’s Salesforce database reportedly hacked, as noted by Forbes. Consequently, “all 2.5 billion Gmail users are now at risk”. Adding to the worry, scammers are using Google’s AI to pose as support staff, targeting users via fraudulent emails and calls.
Even before these security incidents, Google had recommended users enhance their account security by upgrading to more secure measures. This includes using advanced forms of two-factor authentication (2FA) that don’t rely on SMS, and crucially, enabling passkeys as the default sign-in method.
Stay informed with the latest updates. Follow KT on WhatsApp Channels.
The Importance of 2FA
Despite these recommendations, many users still depend on passwords with only basic 2FA, leaving them susceptible to attacks via fake sign-in pages designed to capture passwords. Some attackers even bypass 2FA by tricking users into revealing their codes or completely circumventing the authentication process.
Recent security breaches involving companies like Amazon and PayPal highlight that weak passwords pose significant risks, especially when reused across multiple accounts. Google also reports that only 36% of users regularly update their passwords, underscoring the need for proactive password management.
Protecting Your Gmail Account
Google advises updating your password immediately if it hasn’t been changed this year. Use a standalone password manager instead of one built into your browser to create and store a secure new password. Additionally, switch your 2FA method to an authenticator app and, if not already done, set up a passkey for enhanced security.
Once passkeys are enabled, consistently use them as your primary access method. If you encounter any sign-in window requesting a password on a device with a passkey, consider it suspicious. Moreover, avoid signing in through email links, even if they seem to be from Google, as these could be phishing attempts.
By implementing these measures now, you can greatly reduce the risk of account breaches and ensure your Gmail account stays secure.
