Google confirms major Gmail account update.
CFOTO/Future Publishing via Getty Images
It has taken 20 years to arrive, but at long last, Google has started rolling out a major ID update for Gmail users. As of March 31, Google users in the U.S. will be able to change Gmail email address without opening a new account. This means you can keep your original Gmail address but change it to a new primary address, while the original becomes an alias and all incoming emails continue to arrive. Yes, you will no longer be tied to that potentially embarrassing or inappropriate email address. And that’s a good thing. It can also be a bad thing, as security experts have been warning: attackers are using Gmail address functionality as bait in phishing attacks designed to take over your Google account and your Gmail inbox along with it. Here’s what you need to know.
ForbesGoogle Confirms High-Risk Update For 3.5 Billion Chrome UsersBy Davey WinderGmail Address Changes Bring New Risk Of Hack Attacks
Your Google account holds the key to your Gmail inbox and all the messages and data contained within. No wonder, then, that it’s such a big deal when that account gets hacked, as FBI Director Patel is currently finding out after an Iran-based hacking group compromised his personal Gmail account. Anything that leaves your account open to attack must be understood for you to be protected against it. This is why awareness of an important new Gmail update that introduces primary email addresses for billions of users is so critical. Knowing how to change your Gmail address is key to avoiding being tricked into leaving your account open to a hacker takeover.
“If you choose,” Google has confirmed, “you can change your Google Account email that ends in gmail.com to a new address that ends in gmail.com.” While the update has not yet rolled out globally, it has now arrived in the U.S., although the security warnings apply to every user. In fact, it could be argued that those who are yet to gain the ability to change address are at more risk from attack as they are more likely to be looking for a way to achieve it.
You can check, and it’s the only official method, to see if you can change your address yet as follows:
Go to your Google account, select Personal Info | Email | Google Account email, and you’ll see a Change Google Account email option. If there is no such option, the update has not yet arrived in your region.
ForbesYour Gmail Account Will Be Deleted If You Ignore This EmailBy Davey WinderProtecting Your Gmail Account From Address Change Hackers
Where does the security risk enter the equation? Simple: attackers are sending carefully-crafted, often using AI, emails to Gmail users, from seemingly legitimate Google addresses, that claim you can now change your address and, you guessed it, include a link that needs to be clicked to take you to the security checks and option to do so. The security option isn’t checking the validity of your ID, it is stealing your credentials and using them in an attempt to hack your Google account.
These attacks are not new, but they are now more dangerous than ever, given the ongoing rollout of this feature and the media attention that such a major Gmail update inevitably brings along for the ride.
Take a Google and Gmail account security check now.
Davey Winder
To protect yourself and your Gmail account from such attacks, you are recommended to run an official Google security checkup that will give you options for securing the account. “Users can protect themselves from credential theft by turning on 2-step verification and adopting passkeys as a stronger and safer alternative to passwords,” a Gmail spokesperson said.