Particle.news

Download on the App Store

Google Rolls Out Recovery Contacts, Phone-Number Sign-In and New Messages Safeguards

The rollout responds to more convincing scams by adding human verification to account recovery.

Overview

  • Recovery Contacts is live for eligible personal Google Accounts, letting users designate trusted people who confirm a 15‑minute code to help restore access without exposing any account data.
  • Operational details reported by outlets include support for up to 10 recovery contacts, a seven‑day wait before reusing a contact, and the ability to serve as a recovery contact for up to 25 others.
  • Sign in with Mobile Number begins a global gradual launch, identifying accounts by phone number and verifying on a new Android device using the previous device’s lock‑screen passcode instead of a password.
  • Google Messages now blocks visits to links in suspected spam texts unless marked "not spam," and Key Verifier is available on Android 10+ to confirm contact device keys via QR codes to deter impersonation and SIM‑swap attacks.
  • Google says Workspace, Advanced Protection, and child accounts are not eligible for Recovery Contacts, and it applies additional device, location, and IP checks with potential security holds to reduce misuse.