How to Find Out Who Is Accessing Your Gmail

Revoke access permissions for unused apps and services

You've probably given several websites and services access to some of your Gmail information so that they could do their job better. As time passes, though, you may no longer use those services, but that doesn't mean they can't still access your Gmail account. Audit that access periodically and use Gmail's built-in security tools to revoke inappropriate permissions.

This particular Gmail-management function resides in the web browser, not your app. You'll need access to a desktop-class browser to perform these procedures.

Find Apps That Can Access Your Gmail Account

To find out which websites and apps have been granted access to your Gmail account data in the past:

  1. Visit the Permissions page of your Google Account control panel.

    Google Account security settings
  2. Review the apps in the Third-party apps with account access section. Click any app that shows that it has access to Gmail to display in-depth information about that app's access. To revoke access, click or tap Remove Access.

    Google Account access-revocation screen
  3. Repeat this process with the other two sections on the screen:

  • Signing in with Google shows the apps into which you can authenticate using Google as your credentials. Those services can only see your name, profile photo and email address; they cannot access your account.
  • Google apps shows the apps made by Google that access your Google Account information.

You may not want to remove access to some sites or apps. For example, if you see that Gmail syncs with another email provider service or app that you set up and use, you probably don't want to deny the other provider permission to access your Gmail. If you no longer use that email provider or app, you should remove access.

What Google Apps See

The third section of the authorized services page includes a section for Google apps. Although these are all apps that are currently or were at one time trusted, if you no longer use them, you should remove access, as they likely have full access to your Google account. For example, if you use the Google Chrome browser, it has full access to your account. Full access means the app can view the names of your contacts, see your private Gmail correspondence, and read attachments.

What Information Is Protected in Full Access

Sites and apps that have been granted full access to your Google account can't delete your account, change your password, or use Google Pay to request, send, or receive money.

Locate and Remove Gmail Delegates

You may have delegated to someone such as an administrative assistant at your business permission to handle your Gmail account in the past, which allowed him or her to read, send, and delete emails on your behalf. This person enjoys broad but limited access to your account. The person cannot change your Gmail password or participate in a chat as you. If you've been through a string of assistants over the past few years, find out which people still have access to your Gmail account.

Access the Accounts and Import tab of your Gmail account by visiting the site through the Gmail Settings menu or by using a shortcut link:

Review the names that appear in the Grant access to your account section. Revoke access by selecting a name then clicking Delete.

Recent Activity on Your Account

You can find out which services or apps have accessed your Gmail account recently:

  • Open Gmail.
  • Click Details at the bottom of the page under Last account activity.
  • Look in the Date/Time column of the Activity on this account screen to see the most recent connections.
  • Look in the Access Type column and click Show details under any entry to see information that includes an indicator as to which app or service it was. Some of the entries provide a direct link to Manage Account Access, where you can remove access if you desire.
  1. From your Gmail inbox, click Details at the bottom-right side of the screen.

    Gmail inbox
  2. Review the data in the pop-up window. For any item in the list, click Show details to reveal additional contextual information. In the expanded item view, click Manage Account Access to return you to the list of authorized apps, from where you can revoke the app's permissions if necessary.

    Gmail account-activity detail screen