Your Security

Your security comes first in everything we do.

If your data is not secure, it is not private. That is why we make sure that Google services like Search, Maps, and YouTube are protected by one of the world’s most advanced security infrastructures.

Encryption keeps your data private while in transit

Encryption brings a higher level of security and privacy to our services. When you do things like send an email, share a video, visit a website, or store your photos, the data you create moves between your device, Google services, and our data centers. We protect this data with multiple layers of security, including leading encryption technology like HTTPS and Transport Layer Security.

Our cloud infrastructure protects your data 24/7

From custom-designed data centers to undersea fiber cables that transfer data between continents, Google operates one of the world’s most secure and reliable cloud infrastructures. And it is continuously monitored to protect your data and make it available when you need it. In fact, we distribute data across multiple data centers, so that in the event of a fire or disaster, it can be automatically and seamlessly shifted to stable and secure locations.

Threat detection helps protect our services

We continuously monitor our services and underlying infrastructure to protect them from threats, including spam, malware, viruses, and other forms of malicious code.

We do not give governments direct access to your data

We never give “backdoor” access to your data or our servers that store your data, period. That means no government entity, U.S. or otherwise, has direct access to our users’ information. There are times when we receive requests for user data from law enforcement agencies. Our legal team reviews these requests and pushes back when a request is overly broad or does not follow the correct process. We have worked hard to be open about these data requests in our Transparency Report.

Security is built into all of our services

From auto-updates to spam blockers, Google services are designed with security at their core.

Encryption extends out of photo of Eiffel Tower

Gmail encryption keeps emails private

Since day one, Gmail has supported encrypted connections, which makes it harder for bad guys to read what you are sending. Gmail also warns you about possible security risks, like when you receive an email that was not sent over an encrypted connection.

Gmail Email envelope sets off security scanner warning sign

Gmail spam protection filters out suspicious emails

Many malware and phishing attacks start with an email. Gmail security protects you from spam, phishing, and malware better than any other email service. Gmail analyzes patterns drawn from billions of messages to identify characteristics of emails that users marked as spam, then uses those markers to block suspicious or dangerous emails before they ever reach you. You can help by selecting "Report Spam" for suspicious emails that you receive.

Machine learning and artificial intelligence help Gmail’s spam filter get ever more accurate. It now keeps 99.9% of spam out of your inbox.

Chrome Browser with security update progress

Chrome automatically updates your browser security

Security technologies are always changing, so staying safe means staying up to date. That is why Chrome checks regularly to make sure that the version of the browser you are using is updated with the latest security fixes, protections from malware and deceptive sites, and more. Chrome updates automatically, so you have the latest Chrome security technology protecting you.

Google Play keeps potentially harmful apps off your phone

One of your device’s biggest security vulnerabilities can be the apps you install on it. Our detection system flags potentially harmful apps before they ever reach the Play Store. If we are not sure whether an app is safe, it is manually reviewed by members of the Android Security Team. As we refine our detection system, we reevaluate apps that are already on Google Play and remove those that could be harmful so they don’t end up on your device.

Google blocks malicious and misleading ads

Your online experience can be ruined by ads that carry malware, cover content you are trying to see, promote fake goods, or otherwise violate our advertising policies. We take this problem very seriously. Every year our combination of live reviewers and sophisticated software blocks nearly a billion bad ads. We also give you tools to report offensive ads and control what types of ads you see. And we actively publish our insights and best practices to help make the Internet safer for all.

Keep your Google Account even more secure

We provide tools like the Security Checkup to make it easy for you to control your account security.

Secure your account with the Security Checkup

The first thing you can do to protect your Google Account is take the Security Checkup. We built it to help you verify that your recovery information is up to date and that the websites, apps, and devices connected to your account are ones you still use and trust. If anything looks suspicious, you can change your settings or password immediately. The Security Checkup takes just a few minutes, and you can take it as often as you like.

Take the Security Checkup

Gmail receives suspicious activity alert

Get alerts about suspicious activity

To protect your account from bad guys, we keep an eye out for unusual activity and notify you when something does not seem right. For example, if an unknown device attempts to sign in to your account or if your account recovery information is changed, we contact you right away to confirm that this activity is yours. Notifications are sent to you via email, but you can also sign up to receive text messages on your phone.

Device and browser sign in with same verification code

Strengthen your sign-in to prevent attacks

A strong password deters hackers and keeps your account protected. To create a good password, make sure that it is unique, that it contains a mix of letters, numbers, and symbols, and that you are using it only on Google.

We also help you keep your account more secure by offering 2-Step Verification. With 2-Step Verification, it takes more than your password to sign in to your account. This can be a six-digit code that is sent to your phone or, for even more protection against phishing, a Security Key you insert into the USB port of your computer.

Browser shows passwords protected in Chrome

Protect yourself with these password security tools

Allowing Chrome’s built-in password manager to remember your passwords for different websites will make it easier for you to use strong, unique passwords for each site. You can also add Password Alert, a Chrome extension that helps you avoid phishing attacks by warning you when you enter your Google password on a non-Google site.

Google Maps on browser locates lost phone that has been locked down remotely

Safeguard your account when you lose your phone

If your phone is ever lost or stolen, simply visit My Account to protect your data in a few quick steps. Whether you have an Android or iOS device, you can locate and lock it, change your password, add a custom message to the home screen, or even erase all the data on your phone.