How to Find Out Who Is Accessing Your Gmail

Revoke access permissions for unused apps and services

Woman checking email on laptop
Marc Romanelli / Getty Images

You've probably given several websites and services access to some of your Gmail information so that they could do their job better. As time passes, though, you may no longer use those services, but that doesn't mean they can't still access your Gmail account.

Frankly, Gmail remembers a lot that you probably don't. And fortunately, Gmail not only remembers who you granted access to but also makes identifying them and revoking all rights easy.

Find Apps That Can Access Your Gmail Account

To find out which websites and apps have been granted access to your Gmail account data in the past:

  1. Go your Google account's authorized services page. Log in to your Gmail account if prompted.
  2. Look in the Third-Party apps with account access section to find the services and sites that can access your Google account, or Gmail email and address book. Not every app or site may have been granted equal access. Look specifically for sites with the notation Has access to Gmail.
  3. Click the name of a site, service, or app to open an information screen that shows additional information about the contact. It includes the date you gave permission and provides a method to report a suspicious app or service.
  4. If you no longer use or need the services listed in the information screen, Click Remove Access to block any unwanted or unrecognized services.

You may not want to remove access to some sites or apps. For example, if you see that Gmail syncs with another email provider service or app that you set up and use, you probably don't want to deny the other provider permission to access your Gmail. If you no longer use that email provider or app, you should remove access.

Signing In With Google

The authorized services page also has a section titled Signing in with Google. If you use your Google account to sign in to other sites or apps, they can access your email address, name, and profile picture. Click on any listed item to expand it and see additional information that tells you exactly what the app or service can see and when you gave it access.

What Google Apps See

The third section of the authorized services page includes a section for Google apps. Although these are all apps that are currently or were at one time trusted, if you no longer use them, you should remove access, as they likely have full access to your Google account. For example, if you use the Google Chrome browser, it has full access to your account. Full access means the app can view the names of your contacts, see your private Gmail correspondence, and read attachments.

What Information Is Protected in Full Access

Sites and apps that have been granted full access to your Google account can't delete your account, change your password, or use Google Pay to request, send, or receive money.

Locate and Remove Gmail Delegates

You may have delegated to someone such as an administrative assistant at your business permission to handle your Gmail account in the past, which allowed them to read, send, and delete emails on your behalf. This person has your password and broad but limited access to your account. The person cannot change your Gmail password or participate in a chat as you. If you've been through a string of assistants over the past few years, you may want to find out which people still have access to your Gmail account:

  • Click the Settings gear in Gmail.
  • Select Settings from the appearing menu.
  • Go to the Accounts and Import tab. People with access to your Gmail account are listed with their Gmail addresses under Grant access to your account.
  • You can revoke access by selecting a name and clicking Delete.

Recent Activity on Your Account

You can find out which services or apps have accessed your Gmail account recently:

  • Open Gmail.
  • Click Details at the bottom of the page under Last account activity.
  • Look in the Date/Time column of the Activity on this account screen to see the most recent connections.
  • Look in the Access Type column and click Show details under any entry to see information that includes an indicator as to which app or service it was. Some of the entries provide a direct link to Manage Account Access, where you can remove access if you desire.