Google, Apple and Microsoft security checkup: step by step

How to run Google Security Checkup, iPhone Safety Check and Microsoft's Recent activity page to spot strange access and lock down your accounts in minutes.

2026-10-31

Your Google, Apple or Microsoft account is the master key to your phone, email, photos and often your bank's password reset. Whoever takes it over can reset almost everything else. All three companies offer free, official tools to review who has access, which devices are connected and how you would recover the account. Give each one five minutes.

How do you run Google Security Checkup?

Go to myaccount.google.com/security-checkup. Google walks you through recovery phone and email, passkeys, 2-Step Verification (it recommends a security key or Google prompts over text codes), third-party app access, device screen locks and, for people at risk of targeted attacks, Advanced Protection. Then run Password Checkup at passwords.google.com.

What is iPhone Safety Check?

Find it at Settings > Privacy & Security > Safety Check (iOS 16 or later, Apple Account with two-factor authentication). Emergency Reset stops sharing with all people and apps at once and lets you review emergency contacts, connected devices and trusted numbers and change your Apple Account password. Manage Sharing & Access reviews people and apps one by one, including location. Quick Exit closes Settings instantly while keeping your changes, which matters if someone close to you is monitoring your phone.

How do you check a Microsoft account?

The Recent activity page shows when and where your account was used over the last 30 days. If you see unusual activity, choose "This wasn't me" and Microsoft will ask you to change your password and update security info. Microsoft also recommends the Authenticator app, going passwordless, adding a backup verification method and using "sign out everywhere" for lost devices. It says it will never ask for your password by email.

What should you check on all three accounts?

Item	Google	Apple	Microsoft
Where	myaccount.google.com/security-checkup	Settings > Privacy & Security > Safety Check	Microsoft account > Security > Recent activity
Connected devices	Yes	Yes	Yes (remove trusted devices)
Recovery	Recovery phone and email	Trusted numbers and emergency contacts	Backup verification methods
Passwordless sign-in	Passkeys	Passkeys, Face ID/Touch ID	Authenticator, Windows Hello, security key
Third-party access	Linked apps	People and apps you share with	Sign-ins by access type

Doing all three takes about fifteen minutes. For older relatives, sit with them in person, run the checks together and write down where recovery codes are kept, so they are not tempted to read codes aloud to a caller claiming to be support staff.

What should you do if something looks wrong?

Don't click links in messages claiming your account was hacked; open the account yourself.
Remove unknown devices and apps.
Set a new unique password and turn on passkeys or 2FA.
Check recovery email and phone, which attackers often change.
If money is involved, call your bank using a number you look up yourself; in the US see IdentityTheft.gov and credit freezes.

Repeat every three months and after changing phones. Compare tools in our free password manager guide, and see stolen phone settings, Tips and the Radar.