A recent email from Google has prompted users to enhance their account security by designating a "trusted contact." This feature allows users to choose a close person—like a family member or friend—who can assist in recovering access to their account if they are unable to do so themselves. The idea is similar to having someone with emergency keys to your home or a reference at a notary, someone who can help in a crisis. However, the role of a trusted contact is more active than symbolic, as they can approve account access resets without the user being present.
Once a person is added as a trusted contact, the designation remains active unless the user intentionally removes them. This means that even if the relationship with that person changes or deteriorates, the contact still holds the ability to act on the user’s account. Google advises users to review their list of trusted contacts at least once a year and to use two-factor authentication as an additional layer of security.
The feature, while intended to help users regain access to their accounts, also carries potential risks. If the trusted contact’s account is hacked or if the contact acts with bad intentions, they could gain unauthorized access to the user's Google account. This makes the choice of who to designate as a trusted contact especially important.
Google’s message about this feature focuses on simplicity and ease of understanding, which may leave some users unaware of the full extent of the power they are granting. Without clear warnings about the possible consequences, users might not fully grasp the responsibility involved. Experts recommend checking the list of trusted contacts regularly, selecting individuals with stable relationships and known digital habits, and removing a contact immediately if the relationship changes. Pairing this feature with two-factor authentication is also strongly advised to ensure that the trusted contact is not the only security layer protecting the account.
Google's Trusted Contact Feature Raises Security and Privacy Concerns
AI-rewritten from original reportingHow it works
googlesecuritytrusted-contacttwo-factor-authaccount-security



