A Google Account is a user account that provides access to Google-owned services such as Blogger, YouTube, and Google Groups. A Google Account is required to use Gmail, but account holders are not required to use Gmail and it is possible to create a Google Account without Gmail. Accounts in EU countries used to employ the 'googlemail.com' domain instead of 'gmail.com' because Google did not own the trademark. Google recently resolved the domain dispute, and now all users login with the Gmail domain, or by using an existing address from another provider.
After a Google Account is created, users can add other Google applications. Account settings are stored in one place, but many applications may store their own settings. Applications that may be accessed using a Google Account include:
YouTube and Blogger maintain their own accounts for users that registered with the services before Google bought them. However, effective April 2011 YouTube users are now required to link to a separate Google Account if they wish to continue to log into that service.
Users with a Google account can create a publicly accessible Google profile, which they can use to control how they are presented on Google products to other Google users. A Google profile can be linked to a user's profiles on various social-networking and image-hosting sites, as well as user blogs.
A Google Account can also be used by third party service providers. These providers can delegate user authentication to Google.
Google may block an account for various reasons, such as "unusual activity" or entering an age "not old enough" to own a Google account. Reactivation is possible using web-forms, providing proof of identity through valid photo ID, or a small credit card payment (at a cost of 0.30 USD). Other methods (such as sending a fax or uploading some requested document) require human interaction and may take some "days or a couple of weeks" to be accomplished.
While creating a Google account, users are asked to provide a recovery email address to allow them to reset their password if they have forgotten it, or if their account is hacked. In some countries, such as the United States, the United Kingdom and India, Google may also require one-time use of a mobile phone number to send an account validation code by SMS text messaging or voice message when creating a new account.
Google also offers a 2-step verification option—for additional security against hacking—that requests a validation code each time the user logs into their Google account. The code is either generated by an application ("Google Authenticator") or received from Google as an SMS text message, a voice message, or an email to another account. Trusted devices can be "marked" to skip this 2-step log-on authentication. When this feature is switched on, software that cannot provide the validation code (e.g. IMAP and POP3 clients) must use a unique 16-character alphanumeric password generated by Google instead of the user's normal password.
On June 5, 2012, a new security feature was introduced to protect users from state-sponsored attacks. Whenever Google analysis indicate that a government has attempted to compromise an account, a notice will be displayed that reads "Warning: We believe state-sponsored attackers may be trying to compromise your account or computer."
Third party use
A provider of a web application which requires users to log in can delegate this work to Google. When a user tries to gain access to a secure resource on the third party website they are redirected to the Google Accounts login page. Here they will see an explanation of why they need to log in with their Google credentials. Any data which is to be shared with the third party will also be listed on this screen. Once authentication has succeeded the user is redirected back to the referring site along with a token identifying them as having logged in via Google.
- Libbenga, Jan (January 31, 2007). "Google loses European GMail trademark battle". The Register.
- Google's answer on googlemail vs gmail for EU. Retrieved on 2010-07-14[dead link]
- "Even More Google Products". Google. Retrieved 9 July 2013.
- "Why Connecting your YouTube and Google Accounts Matters". YouTube Blog. March 24, 2011. Retrieved on 2011-08-05
- "About the Sign in Request Page". Retrieved 2015-07-01.
- "Gmail Help Section".
- "Google account help page".
- "Google accounts help page".
- "Google account help page".
- "Gmail sign up procedure". LatestCrunch.in. 2012. Retrieved 2012-07-17.
- Google (2009). "I don't have a mobile phone, can I sign up?". Retrieved 2009-07-08.
- "2-step verification : How it works". Google. 2012. Retrieved 2012-07-17.
- Fallows, James. "Hacked". Atlantic Monthly. Archived from the original on 26 December 2011. Retrieved 26 December 2011.
As email, documents, and almost every aspect of our professional and personal lives moves onto the “cloud”—remote servers we rely on to store, guard, and make available all of our data whenever and from wherever we want them, all the time and into eternity—a brush with disaster reminds the author and his wife just how vulnerable those data can be. A trip to the inner fortress of Gmail, where Google developers recovered six years’ worth of hacked and deleted e‑mail, provides specific advice on protecting and backing up data now—and gives a picture both consoling and unsettling of the vulnerabilities we can all expect to face in the future.
- "More on 2-step verification". Google. 2012. Retrieved 2012-07-17.
- "Please Turn On Two-Factor Authentication". LifeHacker. Aug 8, 2012. Retrieved 14 August 2012.
- "9 Google Apps Security Secrets For Business". informationweek.com. Retrieved 14 August 2012.
- "Google Online Security Blog". Official Gmail Blog. Retrieved 5 June 2012.
- CBC News (6 June 2012). "Google to warn users of 'state-sponsored attacks'". Canadian Broadcasting Corporation. Retrieved 6 June 2012.