How to set up Gmail safely for an elderly parent

Before you start

• Do it together, on your parent's own phone or computer. It is their account.
• Have their phone nearby. Google may send codes to it.
• Write down any backup codes and store them somewhere safe at home.
• These steps are for a personal Gmail account. Work or school accounts may be managed by an administrator.

Step 1: Add a recovery phone and recovery email

Google uses these to send a code if your parent is ever locked out, and to alert them about suspicious activity.

1. Open the account

   Go to myaccount.google.com and tap Security & sign-in.

2. Add the phone

   Under "How you sign in to Google," tap Recovery phone and add your parent's mobile number.

3. Add the email

   Tap Recovery email. Google suggests an address that is different from the one they sign in with. Many families use the adult child's email here.

Step 2: Turn on 2-Step Verification, or use a passkey

A password alone is easy to steal with a fake login page. A second step stops most of those attacks.

1. Turn it on

   In Security & sign-in, under "How you sign in to Google," choose Turn on 2-Step Verification and follow the steps.

2. Choose Google prompts

   With Google prompts, a sign-in request pops up on their phone and they tap Yes or No. This is simpler for many older adults than typing codes.

3. Or create a passkey

   A passkey lets them sign in with a fingerprint, face or phone screen lock instead of a password. Google says passkeys can't be shared, copied or written down, which makes them more secure against phishing. They work on iPhones with iOS 16 or later.

Step 3: Run Security Checkup

Go to myaccount.google.com/security-checkup. It gives personal recommendations, like removing old devices or apps they no longer use. Google suggests doing it regularly. A good habit is to run it together a few times a year.

While you are there, check Gmail for strange forwarding or filters. Our guide to stopping scam emails in Gmail shows where to look.

Step 4: Set up Inactive Account Manager (optional)

This is planning, not scam protection, but families often ask about it. Inactive Account Manager lets your parent choose what happens to their account if it goes unused for a set time. They can pick up to 10 people to be notified or to receive parts of their data. Contacts are not told anything until the waiting period ends.

Your parent sets it up themselves on the Inactive Account Manager page in their Google Account, and can change it any time.

Step 5: Simplify the inbox

1. Use inbox categories

   On a computer, click the Settings gear. Under "Inbox type," choose Default, then Customize. Keep Primary and turn off tabs they do not need, like Social or Promotions, so the inbox feels less crowded. Mail in a turned-off tab shows in Primary instead, so try it and adjust.

2. Unsubscribe from clutter

   In the iPhone Gmail app, tap Menu, then Manage subscriptions, and unsubscribe from real newsletters they no longer read.

3. Star the senders that matter

   Create a filter that stars mail from their real bank, pharmacy and family. Real messages are easier to spot when they stand out.

Step 6: Make the text bigger

Small text makes it harder to read a sender's address carefully. On iPhone, go to Settings, Display & Brightness, Text Size and drag the slider. For even larger text, go to Settings, Accessibility, Display & Text Size, Larger Text. Apple says this applies in apps that support Dynamic Type.

Step 7: Add a safety net for scam emails

A well-secured account can still receive scam emails. If your parent has an iPhone, OwlGuardian can screen their Gmail and quarantine suspicious messages before they see them. You get an alert as their Trusted Contact and decide what to release. You see only flagged emails, never their normal mail.

It is $4.99 a month per protected person after a 30-day free trial. It works with Gmail today, with Outlook and Hotmail in beta, and it does not block calls or texts.

Questions people ask