There is a moment that arrives for most Gmail users eventually: the password will not work, the phone with the code is lost or stolen, or a message says someone signed in from an unfamiliar place. What happens next depends on a setting that takes two minutes and that most people in Bangladesh have never opened. A recovery email is a second address to which Google sends a code so you can prove the account is yours and set a new password. Without it — or a recovery phone — Google has no safe way to know you from the person trying to break in, and accounts stay locked.
On a computer
- Open Gmail and click your profile picture at the top right.
- Click Manage your Google Account.
- Choose Security in the left-hand menu.
- Scroll to Recovery email and click it. Google will ask for your password.
- Type the alternative address in the box and click Next. A verification code is sent to that address.
- Enter the code. The address is now your recovery email.
On the Gmail app
- Tap your profile picture or initial at the top right.
- Tap Manage your Google Account, then Security.
- Scroll to Recovery email, tap it, and confirm with your fingerprint, face or password.
- Enter the alternative address, tap Next, and type the code that arrives there.
Which address to use
Use an account you control and check occasionally — a second Gmail, an Outlook or Yahoo address, or a family member’s address if you have no second one of your own. Do not use a work address you may lose when you change jobs, and do not use the same account as a recovery address for itself, which Google will refuse anyway. If the recovery address itself has a weak password, it becomes the back door: an attacker who gets in there can reset your main account.
Finish the safety net
While you are on the Security page, three more items make the account genuinely recoverable. Add a recovery phone — codes by SMS reach you even without data. Turn on 2-Step Verification, which stops most account theft outright. And download the backup codes: ten one-time passwords that work when you have neither the phone nor the recovery email, printed and kept somewhere other than your wallet. For a country where the Gmail account is also the login for bKash, Facebook, the university portal and the passport application, this is not optional housekeeping. It is the difference between an inconvenient afternoon and losing everything at once.
