Blogs on Gmail and Google Accounts

Wednesday, November 4, 2026

Passkeys in Google Account FAQ

Claude Passkeys google accounts blogger · HTML

Introduction

Before you read

This article is not affiliated with or endorsed by Google LLC. It primarily is written for personal Google Accounts and not Google Workspace accounts for work or school. It primarily seeks to improve the knowledge about passkeys in general and for passkeys in Google Accounts in particular.

Google’s account passkey and password processes may change at any time, or without prior notice, so check the relevant Help Center articles or other publicly available Google documents for the current steps.

This article explains what passkeys are, how to set one up safely, and where they fall short. Part 1 covers the basics and whether a passkey suits you. Parts 2 and 3 cover preparation and setup. Parts 4 and 5 cover what to do if you lose access or are about to give up a device. Parts 6 to 8 cover management, limits, and common questions.

Part 1: What Passkeys Are and Whether You Need One

1.1 What a Passkey Is

A passkey is a pair of cryptographic keys, and it is not a piece of hardware. Each passkey is tied to the site or app it was created for. One half of the pair is shared with the site, and the other half stays private, stored either on your device or in your password manager. For a Google Account, that means your passkey never works on a fraudulent site, and there is no password to type or steal.

1.2 Types of Passkeys and How They Are Created

A passkey for your Google Account can come from four places.

1.2.1 Passkeys Created in a Browser, on Mobile or Desktop

Creating a passkey works only in a browser. On the device where you want the passkey, open your browser and go to myaccount.google.com/signinoptions/passkeys. Tap or click Create a passkey, then follow the prompts.

1.2.2 Passkeys Created Automatically on Mobile Devices

On some phones, a passkey can appear without you creating it. On an Android device signed in to your account, a passkey may be registered for you automatically. To avoid sign-in problems, make sure these are in place:

Android: Android 9 or newer, with a screen lock turned on (fingerprint, face unlock, or PIN). You also need to be signed in to your Google Account on the phone.
iPhone and iPad: iOS 16 or newer, with iCloud Keychain turned on. After you create your first passkey, a later sign-in may prompt you to create one for that device.

1.2.3 Passkeys Created on a Physical Security Key

Tap or click Create a passkey, then Use another device, and follow the prompts. The key must support FIDO2, and you will enter its PIN or touch its fingerprint sensor.

1.2.4 Passkeys Created in a Third-Party Password Manager

Password managers such as 1Password, Dashlane, LastPass, and Bitwarden can store passkeys. If a passkey you removed from your Google Account still prompts you at sign-in, check your password manager and remove it there.

Helpful information: passkeys for other sites

This is separate from your Google Account passkey. When you sign in to an app or site with a password saved in Google Password Manager, it may create a passkey for you, and it shows a notification when it does. You can turn this off in Google Password Manager. You do not need to change anything on the website or app itself.

1.3 Whether You Need One

If you sign in to your Google Account on a phone or computer you control, a passkey can make daily sign-in quicker and reduce how often you type a password. It is also more secure than the passwords most people use. A passkey cannot be guessed or reused, and it only works on the site or app it was created for, so it cannot be handed to a fake site the way a typed password can.

It is less useful if you share devices, or if you cannot keep a second device or backup method ready. Read Part 4 before you decide.

Part 2: Before You Set One Up

2.1 Use Only Devices You Control

Create passkeys only on personal devices that you control. Even after you sign out of your Google Account, anyone who can unlock a device with a passkey can sign back in with it. Do not create one on a shared or borrowed device.

2.2 Know What Changes

Creating a passkey opts you in to a passkey-first, password-less sign-in. Your password stays on the account. Until you are comfortable with how passkeys work, you can leave “Skip password when possible” off in your security settings and keep using your password as before.

2.3 Check Your Passkeys After You Sign In

After you have signed in to your account on an Android device, go to your Google Account, select Security, and under “How you sign in to Google,” choose Passkeys. The page lists the devices that hold a passkey for your account. A passkey may already be there from the sign-in, even if you did not set one up. Checking this list is a quick way to see the sign-in options you have created or enabled for this account across different devices.

2.4 Plan Your Way Back In

Before you create a passkey, check whether 2-Step Verification or Advanced Protection is already on for your account, and check your recovery phone number and recovery email address. If 2-Step Verification is on, backup codes can serve as a second step. If Advanced Protection is on, only a backup security key works as the second step, so make sure you have one before you create a passkey. Part 4 explains how each option works.

Part 3: Setting Up and Signing In

3.1 Creating a Passkey

Go to myaccount.google.com/signinoptions/passkeys. Select Create a passkey, then Continue. You will be asked to unlock your device to finish. Do this only on a device you control.

3.2 Signing In with a Passkey

Enter your username on the Google sign-in page. If passkeys appear in a list, select the one you want to use. If you would rather use your password, select Try another way.

3.3 Signing In on a Computer with Your Phone

On the computer’s sign-in page, enter your username, select Try another way, then Use your passkey. A QR code appears on the computer. Scan it with your phone’s camera or a QR scanner app, then tap Use passkey. Verify with your fingerprint, face, or PIN. Keep Bluetooth turned on for this to work.

Part 4: If You Lose Access

4.1 Passkeys with Advanced Protection and No 2-Step Verification

With Advanced Protection on, signing in requires a passkey or security key, and your password alone will not get you in. If you lose the device with your passkey and have no other passkey, security key, or signed-in device to sign in with, you will need to recover the account. Recovery takes extra steps to verify your identity and can be delayed for a few hours or a number of days. A recovery phone number and recovery email address on the account help with this. A backup passkey or security key stored somewhere safe lets you sign in without going through recovery.

If you lose a device with a passkey, consider taking the steps in Part 6.

Important information

Recovery delays are set by Google, and the references in Part 9 explain how they work. Do not rely on a fast recovery. Keep a backup passkey or security key in a safe place before you need it.

4.2 Passkeys with 2-Step Verification On

With 2-Step Verification on, you can sign in with your password and a second step, such as a Google prompt on a device you are already signed in on, a verification code, a backup code, or a security key. If you lose the device with your passkey, you can still sign in as long as you can complete one of these steps. If you cannot, you will need to recover the account, and recovery can be delayed. Turning on 2-Step Verification can make a recovery delay longer.

Part 5: Before You Reset, Sell, or Trade In a Phone

Before you reset, sell, or trade in a phone that has one of your passkeys, remove that passkey from your Google Account to prevent sign-in issues. The steps are in Part 6.

If that phone is the only device with a passkey for your account, it is the only thing standing between you and access to your account. Before you let go of it, make sure you can still sign in on another device or with a backup method.

Pro tip

A second signed-in device can be a lifeline if your passkey device is lost, stolen, or damaged. If you do not have one, treat your passkey device as your main key and look after it closely. Backup options for that situation are covered in Part 4.

Part 6: Managing and Removing Passkeys

To see the devices that hold your passkeys, go to myaccount.google.com/signinoptions/passkeys, or open your Google Account, select Security, and under “How you sign in to Google,” choose Passkeys. Select the device you want to remove, then choose the remove option. You may be asked to verify your identity first.

If you still see a device you no longer use, or one you do not recognize, remove its passkey. If you still want to use passkeys on your other devices, you can keep the “Skip password when possible” setting on. If you would rather always start with your password, turn it off. Decide which of these fits how you sign in.

If you often choose “Try another way” when signing in, the passkey option will be offered less often. To change that, sign in with a passkey several times. For more on this, see Google’s Help Center article on signing in with a passkey.

Pro tip

Removing a passkey you created affects only that passkey on that device. For a passkey created automatically on Android, sign the device out of your account instead. If a passkey prompt still appears after you remove one, check your password manager and your Google Account settings.

Part 7: Caveats and Limits

7.1 Shared and Borrowed Devices

Do not create a passkey on a shared or borrowed device. Anyone who can unlock that device may be able to use the passkey to sign in to your account. If you have already done this by mistake, remove the passkey from your account as soon as you can.

7.2 Browser and System Requirements

Passkeys need a current operating system and browser. Google’s Help Center lists Chrome 109 or later, Safari 16 or later, Edge 109 or later, and Firefox 122 or later. A device without a screen lock cannot use its passkey until the lock is turned on.

7.3 The Wait for a New Passkey

A newly created passkey may take up to seven days before it works at sign-in. A trusted passkey or physical security key can sometimes speed up this process.

7.4 Incognito and Private Browsing

Some browsers and systems do not let you create or use a passkey in a private window. If a passkey option does not appear, try a normal window.

Part 8: Common Questions

8.1 Can I See the Passkey Itself?

No. A passkey’s private part stays on the device or in the password manager where it was created, and the account holds only the public part. You cannot write it down or copy it out.

8.2 Does Adding a Passkey Remove My Other Sign-In Options?

No. Adding a passkey does not change or remove your existing recovery or sign-in options.

8.3 Can I Use a Passkey on a Computer?

Yes, if your phone has the passkey. You can sign in on a computer by using the passkey on your phone, provided Bluetooth is on and the two devices are close together.

8.4 Do I Need to Understand How Passkeys Work?

No. You need to know where your passkeys are stored, which second steps are on your account, and how to recover your account if you lose a device.

8.5 Why Does Google Keep Offering to Create a Passkey?

Once you create your first passkey, your next sign-in on a device that supports passkeys may ask you to create one for that device too. You can decline, and you can turn these prompts off by changing the “Skip password when possible” setting.

8.6 Why Was a Passkey Created on My Android Phone When I Did Not Set One Up?

Android phones can create passkeys during the sign-in process, on the phone itself. If you have another device signed in to your account, use it to remove the passkey. Go to Your devices, select Manage all devices, choose the phone, and sign it out.

Important information

If this phone is your only device, signing it out means removing your Google Account from the phone. Your email, contacts, calendar, and settings are removed from the phone, but they stay with Google, and you can get to them again by signing in to the account on any other device or in a browser. For up to six hours after signing out, you can still use the passkey on this phone. After that, the passkey cannot be used to get into your account on this phone, and you will need another sign-in option.

Part 9: References and Sources

Get Google’s strongest account security with the Advanced Protection Program. https://support.google.com/accounts/answer/7519408?hl=en (Used in: 4.1)
Why your account recovery request is delayed. https://support.google.com/accounts/answer/9412469 (Used in: 4.1, 4.2)
Common questions with Advanced Protection Program. https://support.google.com/accounts/answer/7539956 (Used in: 2.4, 4.1)
Fix common issues with 2-Step Verification. https://support.google.com/accounts/answer/185834 (Used in: 2.4, 3.2, 4.2)
Sign in with a passkey instead of a password. https://support.google.com/accounts/answer/13548313 (Used in: 1.2.2, 1.2.3, 2.3, 3.1, 3.2, 3.3, 6, 7.2, 7.3, 7.4, 8.6)
Sign in if you lost your security key. https://support.google.com/accounts/answer/9153624 (Used in: 4.1, 4.2)
NIST SP 800-63B-4: Digital Identity Guidelines, Authentication and Authenticator Management. https://csrc.nist.gov/pubs/sp/800/63/b/4/final (Used in: 1.3)
Syncable authenticators, NIST SP 800-63B-4. https://pages.nist.gov/800-63-4/sp800-63b/syncable (Used in: 1.3)
FIDO Alliance Design Guidelines. https://fidoalliance.org/design-guidelines/ (Used in: 6)
Use passwords and passkeys across your devices. https://support.google.com/pixelphone/answer/6197437 (Used in: 1.2 helpful information box)

Conclusion

A passkey is one of the strongest sign-in tools available for a personal Google Account, because it cannot be guessed, reused, or handed to a fake site. Its value depends on preparation: using only devices you control, keeping a second sign-in method ready, and knowing how to remove a passkey when a device is lost, sold, or reset.

About the author

Somnath Datta has helped users with Gmail and Google Account recovery in the Google Help Community since 2012. A Diamond Product Expert and Mentor for both the Gmail and Google Account Help Communities, he also writes practical guides on Gmail and Google Account topics. Read more of his work on his Google Help Community profile.

Last reviewed: October 30, 2026

Tuesday, October 27, 2026

Understanding spam and unsolicited email in Gmail

Before you read

This is an independent blog and is not affiliated with or endorsed by Google LLC.

This article on identifying and managing spam and unsolicited emails in Gmail covers personal Gmail addresses ending with @gmail.com. Information and features may differ for Google Workspace accounts or other email services.

Introduction

You've probably noticed that emails you don't want keep showing up in your inbox. Many of them are spam, but not all of them are the same kind of problem. Some messages are technically spam, sent in bulk and flagged by Gmail's systems. Others are legitimate but unwanted, like a marketing email you never signed up for. This article starts by explaining what spam is and how Gmail identifies it, then moves on to the unsolicited mail that falls outside that category, and finally covers what you can do about both.

Part 1: Understanding spam

What spam means

In the industry, spam usually means unsolicited bulk email: the same or similar messages sent to very large numbers of people who never asked for them, often to sell something, spread malware, or steal personal information. Spam is defined by how it is sent and what it is designed to do, not by how much you dislike it.

How Gmail detects spam

Gmail does not rely on a single test. It combines several layers of evidence.

The first layer is authentication. Protocols called SPF, DKIM, and DMARC help verify that a message really came from the domain it claims to come from. SPF checks whether the sending server is authorized by the domain's records. DKIM checks a cryptographic signature attached to the message. DMARC requires that the visible sender domain line up with the domains checked by SPF or DKIM, and it lets domain owners state what should happen to messages that fail.

The second layer is blocklists and sending infrastructure. Servers and IP addresses that have been used for abuse in the past can carry that reputation with them. A message can be treated with suspicion because of where it came from, even if the sender and the content look clean.

The third layer is content. Patterns in formatting, text, links, and images can resemble known spam. Excessive exclamation marks, hidden text, and links that do not match the text around them are examples of the signals involved.

The fourth layer is behavior. Gmail looks at how many people delete, ignore, or report messages from a particular sender or resembling a particular message. When large numbers of users react this way, the sender's future mail is more likely to be treated as spam.

How Gmail shows you its decision

Gmail gives you clues about the authentication results in the message itself. On the web and in the mobile app, you can see "mailed by" and "signed by" indicators that show which domains were involved. For all messages Gmail flags as spam, Gmail displays a banner above the email highlighting the reason it flagged that particular message.

Helpful information

The "mailed by" and "signed by" indicators are useful clues, but they don't prove by themselves that a sender is trustworthy. Always consider whether the message is what you would expect from that sender.

How Gmail reads mail differently from you

When you open an email, you judge it the way a person does. You look at who it's from, what it says, and whether it sounds like something you expected. Gmail's incoming spam algorithm looks at the message differently. It checks authentication signals, sending infrastructure, patterns in the formatting and links, and how many other users have deleted or reported similar messages. None of these checks asks whether the message seems reasonable to you.

That difference explains some results that can seem backward. A message that looks perfectly ordinary to you, from a familiar company with correct spelling and a clean layout, can still be sent to spam if its sending server has a poor reputation or it fails authentication. In the other direction, a message that looks obviously suspicious to you can land in your inbox because it passes the technical checks and few people have reported it. The algorithm is not reading the message the way you do, so a message's appearance is only one clue among many.

This is why the next two sections matter. Mistakes happen on both sides, and you have a part to play in correcting them.

False positives: legitimate mail sent to spam

A false positive happens when a message you wanted is sent to Spam. You can correct this in several ways:

Move it to your inbox. Open the message in Spam and select "Not spam," or use "Move to Inbox." Gmail will usually learn from this choice.
Add the sender to your Google Contacts. Messages from people in your contacts are less likely to be filtered as spam in the future.
Create a filter that sends their messages to your inbox. Use the search options to enter the sender's address, then select "Never send it to Spam."
Mark it as safe (Gmail on the web only). On some warnings, the Gmail web interface offers a "Looks safe" option. This is not available in the Gmail mobile app, so you'll need a computer to use it.

Pro tip

Adding a sender to your contacts and using a "Never send it to Spam" filter work well together for people you hear from often, such as clients or family members.

Important information

Be careful when a message comes from someone you already know. A trusted contact's account can be hacked and used to send spam, and an address can also be forged or made to look similar to a real one. If a message seems unnatural, such as an unexpected link, a request for money, or wording that doesn't sound like them, check the "mailed by" and "signed by" indicators. Then contact the person through another channel to confirm. Don't reply or open links until you've checked.

False negatives: spam that reaches your inbox

A false negative happens when spam gets past Gmail and lands in your inbox. You can help Gmail learn from it:

Report as spam. Select the message and use the "Report spam" option. This tells Gmail that similar messages should be filtered in the future.
Report as phishing. If the message tries to get you to share passwords, financial details, or other personal information, or pretends to be a company or person you trust, use "Report phishing" instead.

Important information

Never click links or reply with personal information in a suspicious message, even to "unsubscribe" or "verify" something. Reporting is safe, but interacting with the message can expose you.

Part 2: Unsolicited mail beyond spam

Not all unwanted email is spam. Unsolicited mail is legitimate: the sender is a real company or person, and the message follows the rules, but you never asked to receive it. Examples include marketing emails from a store you bought from once, newsletters you signed up for years ago and forgot about, and cold outreach from someone who found your address and wants to pitch you something.

Because these messages are not technically spam, they usually reach your inbox, and that is the correct behavior. Gmail cannot tell whether you want a particular marketing email, so the decision is yours. You can manage it in two ways:

Block the sender. Open a message from them, select the More menu, and choose the option to block. Blocked senders' messages go to Spam from then on.
Create a filter. Use the search options to define a group of messages, such as all emails from a particular sender or domain, so you can manage them together.

Pro tip

Blocking stops one sender's messages. A filter can cover a whole group, such as every message from a particular domain, so use it when a sender uses several addresses.

If an unsolicited message also looks like spam or phishing, you can use the reporting options described in Part 1: reporting as spam or reporting as phishing.

Part 3: Answers to common questions

I am an external sender, but my emails typically go into recipients' Spam. Gmail flags my emails as spam. How do I resolve it?

Successful delivery to other providers doesn't mean Gmail will treat your mail the same way. Start with Google's Email sender guidelines. Next, read the Sender requirements & Postmaster Tools FAQ, then set up Google Postmaster Tools to check your spam rate, reputation, and authentication results. Finally, use the Gmail troubleshooter for senders with email delivery issues to identify the specific cause and what to fix.

We cleaned up our domain after a hack, so why are emails still marked as spam?

Gmail does not necessarily restore delivery immediately after a security problem is fixed. First make sure the compromise has been fully contained and that your email authentication and sending infrastructure are correctly configured. Then continue sending legitimate mail and monitor your spam rate, reputation, authentication status, and delivery errors where Google Postmaster Tools provides that information.

Can Google manually whitelist our domain?

For messages being delivered to personal Gmail addresses, there is no sender-level whitelist that guarantees a domain's messages will always bypass Gmail's spam filtering and reach recipients' inboxes. Gmail evaluates incoming messages using its own filtering systems.

Why are our emails landing in category tabs like "Promotions" or "Updates"?

Category tabs are part of the normal inbox, not Spam. Recipients can move your email to their Primary tab by dragging the message over and clicking "Yes" when Gmail asks to apply it to future emails. Being placed in a category does not mean Gmail considers the message to be spam.

Our messages to Gmail are bouncing back and not delivering at all.

Check the bounce-back message for the SMTP response code and the accompanying error text. These details can help identify whether the problem involves authentication, sender reputation, policy requirements, message content, or another delivery issue. Use Google's troubleshooting resources to investigate the error and determine the appropriate next step.

Why did Gmail suddenly start marking emails from our domain as spam?

A sudden change in spam filtering can have several possible causes, including changes in sending volume or behavior, authentication problems, message content, sender or domain reputation, recipient spam reports, or changes in the way the sending infrastructure is configured. Check Google Postmaster Tools when data is available and look for changes in spam rate, reputation, authentication, or delivery errors. Also consider whether anything recently changed in your email system, domain configuration, or sending practices.

Why do I still get marketing emails after I unsubscribe?

Start by checking whether you actually subscribed. In Gmail on the web, open Manage subscriptions to see the mailing lists you have signed up for. If you willingly subscribed and then unsubscribed, Gmail sends further messages from that sender to Spam. If you don't recognize the subscription, the mail is probably unsolicited rather than spam, so use the block and filter options described in Part 2.

Why am I getting spam that appears to come from my own address?

Spammers can forge the From address, so a message can appear to come from your own account. This doesn't mean your account has been hacked. Check the "mailed by" and "signed by" indicators, and read the banner at the top of the message. Don't reply or open any links.

About the author

Last reviewed: October 28, 2026

Using Gmail Templates to Simplify Everyday Email

Before you read

This is an independent blog and is not affiliated with or endorsed by Google LLC.

This article explains how to use Gmail Templates with a personal Gmail address ending with @gmail.com. Templates are available in Gmail on a computer, but not in the Gmail mobile apps. The guidance here is for informational purposes only.

1. Everyday Email Tasks You Can Simplify with Templates

If you often find yourself typing the same information in different emails, answering similar questions, acknowledging receipt of messages, sharing the same instructions or links, or explaining a process that people frequently ask you about, Gmail Templates can help simplify these everyday tasks. They let you save commonly used message content and reuse it whenever you need it, rather than composing the same response repeatedly.

Here are some situations in which Gmail Templates may be particularly useful:

Answering frequently asked questions: Save standard explanations for questions you receive regularly, so you can reuse the relevant response instead of rewriting it each time.
Acknowledging messages: Prepare routine acknowledgments or confirmations for situations in which you want to let someone know that you've received their email.
Sharing instructions and information: Keep frequently requested instructions, explanations, links, or other useful information ready to insert into your messages.
Sending newsletters and regular updates: If you regularly send newsletters, magazine-style emails, or periodic updates, you can save a template containing the standard layout, headings, introductory text, and other recurring elements. You can then update the content for each new issue without having to recreate the entire message.
Responding to recurring requests: If people regularly ask you for the same documents, resources, or details, a template can help you provide the relevant information consistently.
Sending routine follow-ups and reminders: Save standard wording for follow-up messages, reminders, or requests for additional information that you send regularly.

The following sections show how these situations can be handled by inserting a template into a message yourself or by setting up a filter to send a template response automatically. Before relying on automatic responses, also review the guidance on overlapping filters and attachments and other template behavior.

2. Setting Up and Managing Templates in Gmail

Before you can use Gmail Templates, you need to enable the feature in Gmail settings. Once enabled, you can create templates, save different versions for different purposes, update existing templates, and delete those you no longer need.

2.1 Enable Templates

Gmail Templates must first be enabled in Gmail settings. You can do this using Gmail on a computer.

Open Gmail in your web browser.
Click the Settings gear icon in the upper-right corner, then select See all settings.
Open the Advanced tab.
Find Templates and select Enable.
Scroll to the bottom of the page and click Save Changes.

Gmail Settings: Advanced tab with Templates enabled

Gmail will return you to your mailbox. The Templates option will now be available from the More options menu in the message-composition window.

2.2 Create and Save a Template

Once Templates is enabled, you can create your first template.

In Gmail, click Compose to open a new message.
Enter the message content you want to save. You can format the text to suit the purpose of the template.
At the bottom of the composition window, click More options (the three-dot menu).
Select Templates → Save draft as template → Save as new template.
Enter a name for your template and save it.

Gmail Templates menu: saving a new template

Gmail Templates: naming and saving the new template

Your template is now available to reuse when composing messages or configuring a filter-based automatic response.

Choose a descriptive name that will help you identify the template later, particularly if you plan to create several templates for different purposes.

2.3 Edit or Overwrite a Template

You may eventually need to correct information, update a link, revise an explanation, or change the wording in a saved template. Rather than deleting it and starting again, you can overwrite the existing template.

Click Compose and enter the revised message content. You can also insert an existing template into the composition window first and then make your changes.
Click More options at the bottom of the composition window.
Select Templates → Save draft as template.
Under Overwrite Template, select the template you want to update.
Click Save to replace its saved content with the revised version.

Gmail Templates menu: overwriting an existing template

Helpful Information

Before saving, make sure you have selected the correct template to overwrite. This replaces its saved content with the revised version.

2.4 Create Separate Template Variations

Sometimes you may need different versions of the same basic message for different situations—for example, separate acknowledgments for different types of requests or different versions of a regular newsletter.

To create a variation, compose the revised message and save it using More options → Templates → Save draft as template → Save as new template. Give each version a descriptive name so you can identify the right one when you need it.

Gmail Templates menu: save as a new template

2.5 Delete a Template

If a template is no longer useful, you can remove it from Gmail.

Click Compose to open a message.
Click More options → Templates.
Select Delete template.
Choose the template you want to remove.
Confirm the deletion by clicking Delete.

Gmail Templates menu: choosing Delete template

Gmail Templates: selecting and confirming deletion

Important Information

Before confirming, check that you have selected the correct template. Deleting it removes it from your saved templates.

3. Using Templates Manually and Automatically

3.1 Using Templates Manually

Gmail Templates let you save commonly used message content and reuse it whenever you need it. Instead of typing the same information repeatedly, insert a saved template into a new message and customize it as needed.

3.1.1 Insert a Template into a Message

To use a saved template in a new email:

Open Gmail on your computer and click Compose to open a new message.
Position the cursor in the message body where you want the template content to appear.
Click More options (the three-dot menu) at the bottom of the composition window.
Select Templates and choose the saved template you want to insert from the list.

The content of the selected template will be inserted into your message.

Gmail Templates menu: inserting a saved template into a message

You can now use the inserted content as it is or make changes before sending the message.

3.1.2 Customize the Message Before Sending

A saved template does not have to be used exactly as originally written. You can modify its inserted content to suit the particular recipient or situation.

For example, if you use a template to answer a frequently asked question or share instructions, you can add the recipient's name, include details specific to their request, remove information that does not apply, or update the wording before sending. A template for a recurring request can also provide the standard explanation or links while leaving room to include the particular document or resource the person needs. Newsletters and regular updates are another manual-use example: insert the recurring layout and introductory text, then revise the issue-specific content before sending.

These changes apply to the message you are composing. If you want to change the saved template itself so that the revised content is available for future use, follow the instructions in Section 2.3, Edit or Overwrite a Template.

Manual insertion is especially useful when you want to decide when a response is sent or review its details first—for example, when sending a follow-up or reminder, acknowledging a particular message, or tailoring an answer to a person's question.

3.2 Automatically Sending Template Responses

You can also use Gmail Templates to send responses automatically when incoming messages match criteria you specify in a Gmail filter. Instead of selecting and inserting a template yourself each time, you configure a filter to determine which messages should trigger the response and choose the template Gmail should send.

This approach can be useful when you regularly receive similar inquiries, want to provide standard information to selected senders, or need to notify people who continue to contact an email address you no longer use. For example, you might automatically acknowledge messages from selected contacts or send the same basic information to people whose messages match a filter. Use this approach only when the prepared response is appropriate for every message that meets the filter criteria; messages that need individual attention are better handled manually.

Before proceeding, make sure Templates is enabled and that you have created and saved the message you want Gmail to send. If you need help creating a template, refer to Section 2.2, Create and Save a Template.

3.2.1 Automatically Replying to Messages from Specific Email Addresses

There may be situations in which you want Gmail to send an automatic response when you receive a message from a particular email address.

For example, if a particular contact regularly sends the same type of inquiry, you might configure a filter to send a standard acknowledgment or a prepared explanation automatically. This is suitable only if the same response makes sense for every message from that sender; if the question or requested information varies, inserting a template manually gives you the opportunity to tailor the reply. To notify everyone who writes to an old address, regardless of sender, use the recipient-based approach in the next subsection instead.

Gmail can do this using Templates and Filters together. The template contains the response you want to send, while the filter identifies incoming messages from the sender or senders you specify.

Step 1: Create a Filter for the Sender

You can create a Gmail filter using the search options beside the Gmail search box.

Open Gmail on your computer.
Click the Show search options icon to the right of the search box.
In the From field, enter the email address of the sender whose messages should trigger the automatic response.
Click Create filter.

Gmail filter creation: entering a sender address in the From field

Step 2: Choose the Template to Send Automatically

After clicking Create filter, Gmail displays the available actions for messages that match your criteria.

Select Send template.
Open the template-selection menu and choose the template you created for this purpose.
Click Create filter to save the rule.

Gmail filter action: selecting Send template

The filter is now configured to send the selected template when an incoming message matches the sender criterion.

You can review your saved filters later under Settings → See all settings → Filters and Blocked Addresses.

Automatically Replying to Multiple Senders

You do not necessarily need to create a separate filter for every sender if you want all of them to receive the same automatic response.

To include several senders in the same filter, combine their email addresses in the From field using Gmail's uppercase OR operator. For example:

person1@example.com OR person2@example.com

Replace these example addresses with the actual addresses you want to include.

This allows either specified sender to match the criterion, so the same template can be used for messages from both addresses.

Gmail filter: combining multiple sender addresses with OR

Step 3: Test the Automatic Response

Before relying on the filter, test it by sending a message from one of the specified email addresses to your Gmail address.

Check whether the expected template response is sent. If you have included multiple senders, test the relevant addresses as well.

Testing the automatic response from a specified sender

If the response does not behave as expected, review the filter under Settings → See all settings → Filters and Blocked Addresses and check both the sender criterion and the selected template.

3.2.2 Automatically Replying to Messages Addressed to You in the To or Cc Fields

The preceding method is useful when you want to respond automatically to selected senders. But what if you want to send a standard response to incoming messages addressed to your Gmail address, regardless of who sent them?

For example, after changing your contact email address, you might want to inform people who continue to email your old address that they should use your new one. Another possibility is sending a standard acknowledgment to people who contact you with inquiries, or sharing the same basic instructions with everyone whose message meets the filter criteria. Keep the wording general enough to be appropriate for all messages that match; if a request needs a tailored answer, insert a template manually instead.

You can configure a Gmail filter for this purpose by entering your own Gmail address in the To field rather than identifying particular senders.

Step 1: Create and Save a Separate Template

First, prepare the response you want to send to these incoming messages and save it as a template.

For instance, if you have changed your contact address, your message might explain that you now use a different address and ask the sender to update their contact information.

Give this template a descriptive name that distinguishes it from the template used for selected senders. You can follow the instructions in Section 2.2, Create and Save a Template.

Using a separate template allows you to provide a different response for this broader group of messages.

Step 2: Create a Filter Using Your Gmail Address

Open Gmail on your computer.
Click the Show search options icon to the right of the search box.
Enter your own Gmail address in the To field.
Click Create filter.

Gmail filter creation: entering your address in the To field

A filter using your address in the To field can match messages where your address is listed as a direct recipient (To) or a copied recipient (Cc). It does not cover messages where your address is included only in the Bcc field.

Step 3: Select the Template and Save the Filter

After clicking Create filter:

Select Send template.
Choose the template you created for this type of automatic response.
Click Create filter to save the rule.

Gmail recipient-based filter: selecting Send template

Gmail will now use this template when an incoming message matches the filter criteria.

Step 4: Test the Filter

Send test messages from another email address, making sure your Gmail address is included in the To field or the Cc field as appropriate.

Check that the expected template response is sent. You should also test messages that should not match the filter, particularly if you have several filters configured.

4. Important Limitations and Caveats About Gmail Templates

4.1 Check for Overlapping Filters

If you create both types of automatic response described in Section 3.2, the same incoming message may match both filters.

For example, one filter might send a template to messages from a particular sender, while another sends a different template to messages addressed to you in the To or Cc fields. A message from that sender may satisfy both sets of criteria. The sender could receive more than one automatic response, depending on how Gmail processes the matching filters.

Before relying on these rules, consider which messages each filter is intended to handle. Test combinations that could overlap and check that they do not produce redundant or confusing replies.

Gmail saved filter definition for a sender-based automatic response

Gmail saved filter definition using multiple sender addresses

4.2 Limitations of Filter-Based Automatic Responses

Filter-based template responses are best suited to messages that can be answered reliably with the same prepared information. They are not a substitute for reviewing and handling messages that need an individual response. Before enabling a rule, consider whether the selected criteria are narrow enough to avoid sending a canned reply to messages for which it would be irrelevant. Test representative messages and review the filter if the response is sent unexpectedly or not sent when expected.

4.3 Attachments and Other Template Behavior

In tests conducted for this article: Attachments were not included with a manually inserted template response or with automatic template responses sent through filters. The configured Gmail signature also did not appear in filter-sent template responses. Results may vary with Gmail configurations or future changes, so treat these as observed behavior rather than a guarantee for every account.

Helpful Information

If a message needs an attachment, do not assume that inserting a saved template will include it. Add the attachment separately when composing a manual message. Do not rely on a filter-sent template response to include an attachment. Similarly, if an automatic response needs a signature, do not assume Gmail will append the configured signature to the filter-sent template response.

When composing a message manually, you can choose or change the signature before sending it.

4.4 Keeping Templates Accurate and Appropriate

A saved template can become outdated when a link, contact address, instruction, or other detail changes. Review templates periodically and update the saved version when necessary, using the instructions in Section 2.3. Before sending a manually inserted template, check that its details are appropriate for the recipient and situation, as explained in Section 3.1.2.

For filter-based responses, take extra care that the saved wording is suitable for every message that can match the filter. Avoid including private or case-specific information in a response that may be sent automatically to a broader group.

4.5 When Templates Are Not the Best Solution

Choose the response method according to the task. If you need to tell people that you are away and provide a standard absence message, consider Gmail’s Vacation responder rather than setting up a filter for that purpose.

Gmail Templates can provide reusable wording and a simple layout for a small, manually managed newsletter or recurring update. For larger campaigns that require mailing-list management, unsubscribe handling, sophisticated layouts, or campaign analytics, a dedicated email-marketing service may be more appropriate.

For Google's instructions, see Create a template in Gmail.

About the author

Last reviewed: October 27, 2026

Monday, October 12, 2026

The Google Account Recovery Handbook

Introduction

Before you read

This handbook covers personal Google Accounts only, not accounts managed by a work or school. It is an independent resource and is not affiliated with or endorsed by Google. Google does not publish how it makes recovery decisions, so what follows describes how recovery is generally understood to work. It is not authoritative, and no outcome is guaranteed.

When you cannot sign in to your Google Account, Google aims to verify that the person requesting access is the legitimate owner, usually through the most secure verification method enabled on the account.

Google offers no email, chat, or phone support for recovering a personal Google Account, and nobody else can do the recovery for you. Be suspicious of anyone who offers to do it for you, especially after you have posted about your problem publicly. See section 1.3.10 for how to spot recovery scams.

Part 1 explains the basics and how to prepare. Part 2 covers specific situations and includes questionnaires to help you assess where you stand.

Part 1: Understanding Google Account Recovery

1.1 Understanding Google Account Recovery

Google Account recovery is a security process. The steps you see depend on your circumstances and on the recovery options Google presents. Google may ask questions, confirm information, or require verification steps, and some requests involve a waiting period.

Answer as accurately as you can. If you are unsure, give your best estimate rather than guessing randomly. If another verification option is offered, consider whether you can use it.

Pro tip

Always start from Google’s Account Recovery troubleshooter, whether this is your first attempt or a retry, rather than the generic sign-in page.

1.2 The 2 Important Things to Keep in Mind

During account recovery, Google uses the information provided and other available signals to assess whether it can verify that you own the account. It is recommended to use a device, browser, network, and location you commonly use to sign in.

Another important determinant is knowledge of the current password and access to the necessary recovery and verification options, if they are enabled on your account.

These recommendations can help you complete the process, but they do not guarantee a successful recovery. Google may still be unable to verify that the account belongs to you.

1.3 Best Practices

1.3.1 Keep Your Recovery and Verification Information Up to Date

Out-of-date recovery information is behind the situations in sections 2.2.3 and 2.2.4. To prevent this, add a recovery phone number and recovery email address to your Google Account where available, and a recovery contact if the option is offered to you. Set these up before you need them. Review them periodically, and update or remove any that have become obsolete, such as an old phone number, an email account you no longer use, or a contact who is no longer reachable. Make sure you can actually access every option you have registered.

If you use two-step verification or the Advanced Protection Program, review those methods too, including phone numbers, authenticator apps, passkeys, backup codes, and security keys, and remove any you can no longer use.

1.3.2 Save Your Password Securely

Forgetting your password leads to the situation in section 2.2.2, and combined with lost recovery options, to the one in section 2.2.4. To prevent this, store your password in a reputable password manager, make sure you can access that manager when you need it, and avoid reusing the same password across accounts.

Pro tip

If you change your password, update the saved entry so you do not accidentally use an outdated one. If you write your password down as a backup, keep it somewhere secure, separate from your devices and away from other people.

1.3.3 Set Up Multiple Verification Methods

Having only one method is what makes the situations in sections 2.2.5 and 2.2.8 so difficult. To prevent this, set up more than one verification method wherever available, and check from time to time that each one still works.

1.3.4 Save Your Backup Codes Safely

A saved backup code is one of the options reviewed in section 2.2.5. To prevent being locked out, generate backup codes if you use two-step verification and store them securely. Each code works only once, so keep track of the ones you have used, for example by striking them off your list, and protect unused codes from unauthorized access.

1.3.5 Keep Your Physical Security Keys Safe

Losing your physical security keys can leave you in the difficult situation described in section 2.2.5. To prevent this, be very mindful of where you keep them if your Google Account is enrolled in the Advanced Protection Program and you use physical security keys. Store your keys in safe places where you can find them when needed, and protect them against loss, theft, or unauthorized access.

Pro tip

If you have two physical security keys, use one as your primary key and keep the other in a separate, secure place. This ensures that you have a backup available if your primary key is lost or unavailable.

1.3.6 Use Familiar Devices and Networks

Recovery attempts from an unfamiliar setting are one reason attempts keep failing, as described in section 2.2.7. To prevent this, use a device, browser, and network you regularly use when signing in or recovering your account, if possible. This may help Google recognize your usual sign-in environment, but it does not guarantee recovery.

1.3.7 Prepare Before Resetting or Replacing a Device

Losing a device without a plan leads to the situation in section 2.2.8. To prevent this, make sure you know your password before you reset, replace, or dispose of a device. Where relevant, transfer or set up authenticator apps, passkeys, and other verification methods on the new one.

Important information

Resetting or replacing a device can affect passkeys, Google prompts, authenticator codes, security keys, and other verification or recovery options. Before making changes, consider how you will access your Google Account afterward.

1.3.8 Review Your Account Security Regularly

Unnoticed unfamiliar activity can lead to the situation in section 2.2.9. To prevent this, periodically review your recovery information, signed-in devices, and recent security activity, and follow Google’s recommended steps if you notice anything unfamiliar.

Helpful information

Google Account Security Checkup can help surface certain security issues, unfamiliar activity, or settings that need attention. It cannot guarantee that every compromise will be detected, so respond to security alerts and investigate anything suspicious.

1.3.9 Prepare for Unexpected Loss of Access

If preparation fails, section 2.2.12 describes what to do when an account cannot be recovered. To prevent reaching that point, think ahead about how you would sign in if your phone were lost, your recovery email became unavailable, or you forgot your password. Check that you can access your recovery methods and know which alternative verification options you have set up.

1.3.10 Be Wary of Recovery Scams

Scammers reply to public posts on social media and forums, posing as Google support or helpful experts, and ask for money, passwords, or codes. Check the profile’s age, whether the handle or email exactly matches, and whether the name or photo is a lookalike. A verified badge is not proof of legitimacy. If someone you did not contact offers to recover your account, assume it is a scam. Avoid posting screenshots that show your email address, phone number, or codes.

The same care applies in the Google Help Community. Well-meaning but inexperienced volunteers may ask for personal information. Never post your password, codes, phone number, full email address, ID documents, or other personal details publicly. Genuine helpers do not need them. This applies to everyone, including Product Experts and Mentors. A badge shows a track record, not a need to see your private details.

Part 2: Recovering Your Google Account in Specific Situations

2.1 The Questionnaires

There are two sets of questions below. These are for your own use. You do not submit them anywhere, and they do not point you to a specific scenario. Writing down your answers may help you see what you have and what may be missing.

The first set, in section 2.1.1, is the basic set for any account recovery situation. The second set, in section 2.1.2, is supplemental and applies only to accounts with two-step verification or the Advanced Protection Program.

2.1.1 Basic Account Recovery Questionnaire

If you are able to answer the following questions, writing down your answers may help you better assess your account recovery situation and understand the challenges you may be facing.

When did you last access the account?
Do you have two-step verification enabled on the account?
Do you currently have access to this account from any other device? For example, an old device that you may have stored away.
Do you remember your password?
Do you currently have access to the recovery phone number and recovery email address associated with your account, if these are configured?
Are you trying to sign in from a familiar device and a familiar network, such as your home or work Wi-Fi?
What is the exact sequence of steps you go through when trying to sign in to or recover your account? Describe each step in the order you follow.
Were you offered a “Try another way” or “More ways to verify” option? If so, what alternative verification options were offered, and what happened when you clicked on each of them? If you tried more than one option, describe what happened with each.
What is the exact final message you received from Google? Write down the message displayed when you could no longer proceed.

2.1.2 Supplemental Questions for Accounts with Two-Step Verification or the Advanced Protection Program Enabled

If your account has two-step verification enabled or is enrolled in the Advanced Protection Program, you may also find it helpful to answer the following supplemental questions.

What additional security features have you enabled on your Google Account? For example, two-step verification or the Advanced Protection Program. List the applicable features.
Which verification methods or security features have you set up on your account? List the options you have enabled, as applicable. For example, Google prompts, authenticator codes, backup codes, passkeys, or physical security keys.
Which of these verification methods or security features can you currently access or use? Identify the options that are still available to you and those you can no longer access.

2.2 Recovering Your Google Account in Specific Situations

If Google’s standard recovery steps did not work for you, find the situation below that matches your problem, then read the options suggested for it. These options go beyond what the standard help pages cover, but none of them is guaranteed to work, and your results may differ. If you have not yet tried the standard process, begin with Google’s Account Recovery troubleshooter, as described in section 1.1.

If you get stuck at any point, go to the basic questionnaire in section 2.1.1 and write down your answers. It helps you assess for yourself whether you have what is needed to complete verification, even if you do not fully understand how the process works.

Important information

Never share your password or verification codes, and treat anyone offering to recover your account for you as a scam. See section 1.3.10 for how to spot recovery scams.

2.2.1 If you have forgotten your email address

If you cannot remember the email address of your Google Account, here are places to look:

A device where you may still be signed in
Your browser or password manager’s saved logins
A message from someone you have emailed, who can look up the address in their inbox
Old receipts or welcome emails from services you signed up for with that address

If you have more than one account, try the variations of your name you might have used.

2.2.2 If you have forgotten your password

If you know your email address but cannot remember your password, look for it in these places:

A browser that may have saved it, such as Chrome, Safari, Firefox, or Edge
A password manager, such as 1Password, Bitwarden, Dashlane, or LastPass
A device where you are still signed in. Avoid signing out of it until you have checked your recovery options
Your memory of older passwords. When Google asks for a password, enter the last one you remember, even if it is old

Important information

Knowing your email address or a previous password does not guarantee that you will be able to recover the account.

2.2.3 If you have lost access to your recovery phone or email

Losing a recovery method does not necessarily mean your account is lost. Depending on your situation:

If you can still sign in, on this device or another, update your recovery phone number and email address right away. Avoid signing out of any device where you are still signed in.
If your old phone number is gone, contact your mobile carrier to ask whether it can be restored to you
If your recovery email is gone, try recovering that email account through its provider

The options available depend on your account setup and circumstances.

2.2.4 If you have forgotten your password and lost access to your recovery phone or email

This is the most difficult situation. Google generally tries to verify that the person requesting access is the legitimate owner, usually through the most secure verification methods enabled on the account. If you can no longer provide your password or reach any recovery method, you may be unable to pass either check, and recovery may be extremely difficult, if not impossible.

If you still want to try, your best chance is to go back and regain one of the two. Start with the forgotten password section (2.2.2) and the lost recovery phone or email section (2.2.3), and work through the options listed in each. Neither is guaranteed to work.

2.2.5 If you have two-step verification or the Advanced Protection Program enabled

Accounts with two-step verification or the Advanced Protection Program have stricter security requirements. If you are having trouble signing in or recovering one, start with the basic questionnaire in section 2.1.1 and the supplemental questions in section 2.1.2. Your answers will help you assess for yourself whether you have what is needed to complete verification.

Important information

If you have two-step verification turned on, your password is the first step of signing in. If you have forgotten your password, you automatically fail that first step, and your other available verification options may not be enough to get you in.

Then review these practical options to see what you still have:

A device where you are still signed in
A saved backup code
A passkey
A physical security key

If you still have at least one of these options, you may have enough to attempt verification. If your answers and this list show that you have lost all of them, recovery may be extremely difficult, if not impossible.

2.2.6 If Google asks you to wait

Some recovery requests involve a delay before Google lets you continue. While you wait:

Follow the instructions Google gives you for your request
Keep access to the email address you provided, since Google may send a password-reset link to it once the wait is over
Check your inbox, including spam, for updates
Do not make any more recovery attempts until the wait is over, as further attempts may interfere with the request
If you regain another way to verify your identity, follow Google’s current guidance on whether you can try again

2.2.7 If your recovery attempts keep failing

Check the basics. Review the account address, the information you entered, and the verification options available
Use a familiar setting. If possible, use a device, browser, and network you commonly use
Do not assume one change caused the failure. Google does not disclose the precise reason for every unsuccessful attempt
If you cannot identify the cause, go to section 2.1 and answer the questions that match your account’s recovery and verification settings. Answer them truthfully. They may help you see which problem is holding back your recovery the most
Consider pausing. Some users in online communities report that waiting before trying again helped, but this is anecdotal, not official guidance, and no waiting period guarantees success. Follow any instructions Google gives you

2.2.8 If you have lost your phone or other trusted device

Check whether you are still signed in on another device. If you are, avoid signing out of it until you have reviewed your recovery options
Check whether you have another way to verify your identity through the “Try another way” or “More ways to verify” options
If the lost device is an Android phone, you can use Google Find Hub to locate or secure it, where available
If the lost device was your only way to verify your identity, your recovery options may be limited

2.2.9 If your Google Account has been hacked

Important information

If you believe your financial information or identity documents may have been exposed, contact your bank or financial institution promptly. If you suspect identity theft or other criminal activity, consider reporting it to your local authorities.

First, work out which of these applies to you:

Your YouTube channel has also been hijacked (see 2.2.9.1)
Your hacked account has been placed under parental supervision by the hacker (see 2.2.9.2)
Neither applies (see “If none of these applies” below)

2.2.9.1 Hijacked YouTube channel

Post about it in the YouTube Help Community, where Product Experts can review your case and escalate it to Google if it qualifies. Once you have access to your account, also follow Google’s guidance for hijacked channels.

2.2.9.2 If your hacked account is placed under parental supervision by the hacker

Check whether your recovery flow asks for approval from a parent you do not recognize. This can mean supervision was added to your hacked account without your knowledge. This is a known issue. Other users have reported it, and it has been escalated to Google. There are currently no known workarounds, so do not pay anyone who claims they can fix it.

If none of these applies

Follow the standard account recovery process, starting with Google’s Account Recovery troubleshooter, as described in section 1.1. Then go to section 2.1 and answer the questions that match your account’s recovery and verification settings. If you regain access, follow Google’s guidance for securing a hacked account.

Pro tip

The chance of recovering a hacked account may decrease with time. If you cannot recover your account within a few days of the hack, your chances may become progressively smaller.

2.2.10 If you have AdSense

Having an AdSense account does not create a separate recovery process for the Google Account behind it. If you cannot sign in to that Google Account, follow the recovery steps in section 1.1.

If your AdSense account has also been compromised, or you have an AdSense-specific access issue, see Google’s guidance for compromised AdSense accounts and use the AdSense login troubleshooter.

Helpful information

AdSense support does not replace Google Account Recovery when you have lost access to the underlying Google Account. The support options available may depend on your issue and eligibility, and having an AdSense account does not guarantee direct contact with an AdSense support representative.

2.2.11 If your Google Account has been disabled

A disabled Google Account can be due to a perceived violation of Google’s Terms of Service or a product-specific policy, or to unusual activity on the account. Google explains the reasons here. Find the reason shown to you, then go to the matching section below.

2.2.11.1 Disabled for a perceived policy violation

Unless the violation is severe enough that Google is required to delete the account, you are usually given a chance to appeal.

Submit the review appeal. The appeal form is the channel Google provides for contacting the review team. Note when you submitted it and whether you received a response. Google may not review a new appeal while one is pending
If no email arrives after a couple of weeks, the original decision has most likely been upheld
You may submit further appeals.

Pro tip

Phrases such as “I don’t know how it happened,” “I’m sorry it happened,” or “it won’t happen again” add no value to an appeal. If you appeal again, resubmitting the same information is unlikely to change the result.

In all cases, the review team’s decision is final and binding.

2.2.11.2 Disabled for unusual activity

Account recovery is the process for restoring access, and the usual rules apply. If you do not have access to your recovery options and a setup the system considers familiar, recovery can be very difficult, if not impossible.

2.2.12 If you still cannot recover your account

There is no guaranteed path to recovering a Google Account. There can be situations, through the actions of the user or of Google, whether inadvertent or intentional, where there is no realistic chance of recovering the account. If that is your situation, you must accept the loss and consider creating a new account.

Once you have created it, secure it with the necessary options, following the best practices in section 1.3, so that it remains accessible in the future. You can then move things over from the old account, such as payments, subscriptions, and other necessary connections.

Conclusion

This handbook is meant to help you understand how Google Account recovery is generally understood to work, and to see which options are realistically open to you. The scenarios in Part 2 help you identify your situation, and the questionnaires in section 2.1 help you assess for yourself what you have and what may be missing. The best practices in section 1.3 help you prepare, so that you are less likely to need recovery at all.

No guide can guarantee a result, but knowing where you stand and what to expect can help you make better decisions, avoid scams, and spend your effort where it counts.

About the author

Last reviewed: October 26, 2026