Google Recovery Contacts: A Trusted Friend Can Now Help You Unlock Your Account

Losing access to a Google account can be a nightmare, especially when it holds years of emails, photos, and documents. To make the recovery process simpler and more secure, Google has launched a new option called Google Recovery Contacts, allowing users to nominate a trusted friend or family member to help verify their identity if they get locked out.

Announced on October 15, 2025, the feature is part of a broader update to Google’s account protection tools. It adds a human touch to cybersecurity, almost like the “phone a friend” lifeline from Who Wants to Be a Millionaire?, but this time, the prize is regaining control of your digital life.

How It Works

The Recovery Contacts feature is being rolled out gradually. Once available, users can set it up through the Security section in their Google Account settings. They can then select a reliable person, a close friend, spouse, or family member who will receive an invitation to become their recovery contact.

If the user ever loses access to their account, Google will send a verification prompt to that contact’s device. Once the friend confirms the user’s identity, access can be restored and the password reset.

While the tool could save countless users from frustrating lockouts, it also raises questions about how much more relational data Google will now collect.

Security Experts Urge Caution

Experts advise users to treat Recovery Contacts as an extra safety net, not a replacement for other security measures. Setting up two-factor authentication, a recovery email, and a backup phone number remains essential.

Any system that depends on trust can be exploited. We’ve seen similar tactics used in email compromise scams, where attackers manipulate people instead of technology.

-Aaron Rose, Security Architect Manager at Check Point Software

Other Google Security Updates

Recovery Contacts is one of several security upgrades Google has released this month. The company is also enhancing device-based account recovery, which lets users regain access through their registered phone number. If the feature is enabled, Google can verify identity using the previous device’s PIN or unlock pattern, adding another personal layer of authentication.

Google is also tightening defenses in Google Messages, a frequent entry point for phishing scams. A new link-vetting feature automatically checks suspicious URLs in text messages and alerts users if they appear malicious.

These are positive steps forward. Blocking known phishing sites before users click can prevent many common attacks, but people still need to stay alert. Technology alone can’t replace awareness.

Lance Spitzner, Director of SANS Workforce Cybersecurity Training

To complement these measures, Google has launched a new educational game called “Be Scam Ready.” The interactive experience teaches players how to spot scams through short, real-world scenarios designed to sharpen instinct and caution.

Human-Centered Security

By involving trusted contacts and familiar devices, Google is trying to make recovery processes less mechanical and more user-friendly. Still, the effectiveness of Recovery Contacts will depend on users’ judgement. Choosing the wrong contact or falling for social engineering could expose new weaknesses.

What It Means for Users

For millions of Google users, these updates mean faster account recovery, fewer locked-out frustrations, and better protection against phishing scams. But they also bring new considerations, especially about how much personal data users are comfortable sharing across Google’s interconnected systems.

As the rollout continues, the question remains: can trust itself be securely digitized? For now, at least, Google seems to believe it can, and that sometimes, even online, it’s worth phoning a friend.

ALSO READ: Google Refuses to Fix Gemini Security Flaw That Could Leak Your Sensitive Info, Says It’s “User’s Responsibility”