How to Fix Google's "Try Signing In From a Device You've Used Before" Error: Google Account Recovery Guide

If Google account recovery keeps showing "Try signing in from a device where you've signed in before", you are not stuck forever. The message simply means Google needs stronger proof that the account belongs to you. In this guide I explain what triggers it, the official steps, how long the wait can take and which traps to avoid.
What does the "use a device where you've signed in before" message mean in Google account recovery?
This message means Google account recovery could not confirm your identity with the answers you gave. Google asks you to retry from a phone, tablet or computer you have used with this account, ideally from a familiar location, because a known device is one of the strongest ownership signals it has.
In other words, the message is not a ban and not a permanent lock. The system is telling you: "Come back from somewhere I recognise." However, many people panic when they see it and retry dozens of times in one afternoon. That behaviour usually makes things worse.
I see this screen often with clients who manage business accounts. The pattern is almost always the same: they changed phones, the recovery number went stale, or 2-Step Verification codes still go to a device they no longer have. So the fix starts with collecting the evidence you still hold.
Why does Google show this warning?
Google runs every recovery request through a risk assessment. Your device, browser, location, IP address, old passwords and recovery details all feed into it. When those signals look weak, the system points you towards a stronger one, namely a familiar device.
For example, if you have used the account for years on a laptop in Istanbul and you now try to recover it from a brand-new phone abroad, Google may treat the request as suspicious. After all, an attacker would produce exactly the same picture. Therefore the system stays cautious.
The warning appears most often in these situations:
- You switched phones and wiped or sold the old one.
- Your recovery phone number no longer belongs to you.
- You never added a recovery email, or you cannot access it either.
- Recovery attempts run with a VPN on or from another country.
- You made many failed attempts in a short time.
That caution can feel frustrating. Still, the same mechanism protects you: even if someone steals your password in a data breach, they will struggle to get in without a familiar device signal.
How do you start Google account recovery through the official page?
There is only one official route: Google's own account recovery page. Type g.co/recover into your browser and it takes you straight there. No other website, app or "support hotline" can run this process on your behalf.
First, you enter your email address or phone number. Then Google asks a series of questions: the last password you remember, a code sent to your phone, a code sent to your recovery email and so on. The key rule here is simple: do not skip questions. Instead of tapping "Try another way" straight away, give your best possible answer to each one.
Also, prepare your setup before you start. Google's tips to complete account recovery steps recommend using a computer, phone or tablet where you frequently sign in, the same browser you usually use and a location where you normally sign in. Those three signals often decide whether the warning disappears.
What should you do if you still have the old device?
If the old device still works, your job is much easier. In practice, charge it and connect it to your usual Wi-Fi network. Then open the browser you always used on it. If that was Chrome, continue with Chrome; if it was Safari, stay with Safari.
- Check whether the Google account is still signed in; if so, change the password from there.
- If not, go to g.co/recover on that same device.
- Turn off any VPN or proxy and avoid private browsing windows.
- Answer every question and enter the last password you remember.
- Once you are back in, update your recovery details immediately.
Meanwhile, the old phone may also display a Google sign-in prompt on its lock screen. If you see one and you started the request yourself, approve it. That way Google sees directly that the device is still in your hands.
Which options remain if the old device is gone?
If the old device got lost, broke or was reset, you still have options. However, you now need to strengthen the other signals. Google can still recognise you; it just wants more evidence.
- Try from the network you use most, such as your home or office connection.
- Think about other devices that might still have an active session: an old tablet, a work laptop, a smart TV.
- If you can access your recovery email, prioritise that route.
- If the recovery number still belongs to you at your carrier, reactivate it with a new SIM card.
People often overlook that last point. Losing a phone does not mean losing the number. If your carrier issues a replacement SIM for the same number, SMS codes reach you again. So check the status of your line before you panic.
How does the familiar device and location signal work in practice?
Specifically, Google remembers the devices you sign in with for a while. Browser cookies, device identifiers and connection details all form part of that memory. As a result, a request coming from the same laptop, the same browser and the same home network looks familiar to the system.
That memory has limits, though. If you cleared browser data, reset the device or have not used it for a long time, it may lose its familiar status. So "my old computer" is not always enough; what matters is that the computer used the account fairly recently.
Location follows a similar logic. Google knows which city and which network you usually sign in from. For instance, if you sign in from the office network every weekday, trying recovery at the office may carry more weight than trying at home. In short, think of the signals as puzzle pieces: the more pieces that fit, the better your chances.
On the other hand, a single strong signal sometimes covers every gap. A device where you are still signed in is often the shortest path back.
What information should you gather before a recovery attempt?
Recovery attempts that start without preparation often fail halfway. So before you open g.co/recover, grab a pen and note the following details.
- Every old password you remember, from newest to oldest.
- Phone numbers that the account has used at any point.
- Email addresses you have used as recovery addresses.
- Roughly which month and year you created the account.
- A list of the devices you used most with the account.
If you kept passwords in a password manager, check its history as well. Some password managers keep previous versions of changed passwords, and that detail helps a lot on the recovery form.
Preparing this list takes about fifteen minutes, so it is time well spent, but it saves you from guessing under pressure. Finally, run the recovery at a calm moment: at your desk, on your usual connection, not on mobile data while commuting.
How long does Google account recovery take?
Google does not always complete recovery requests immediately; sometimes it applies a security hold. According to the official explanation, the delay can range from a few hours to a number of days, depending on a variety of risk factors. Google uses that window so the real owner can deny an unauthorised request.
During the delay, Google uses your recovery info to notify you that someone requested account recovery. In other words, the system deliberately gives the legitimate owner time. You can read the details on the page explaining why your account recovery request is delayed.
The only thing to do during that time is to be patient. Sending the same request again does not speed anything up. On the contrary, every new attempt may affect your risk score. The "30-day wait" that circulates on forums is not an official fixed period, so do not rely on any exact number of days.
Which mistakes lower your chances of recovery?
In my experience, most failed recoveries come from user mistakes rather than from the system. The good news is that you can avoid all of them.
- Trying from several devices and browsers within the same hour.
- Opening the recovery page with a VPN switched on.
- Rushing through questions with "I don't know".
- Choosing a different recovery method on every attempt.
- Sharing a password or verification code with anyone else.
The last point matters most for security. Google never calls you and asks for a verification code. If you get such a call, the caller is most likely trying to take over your account. Therefore only use codes on your own screen, for a process you started yourself.
Impatience is another common mistake. Opening new requests while you wait for an answer makes it harder for Google to evaluate the earlier one. Moreover, each new request tells the system that you are unsure.
Are third-party "account unlock" services safe?
No. People or websites that promise to "guarantee" access to your Google account have no more access to Google's recovery system than you do. Google does not offer a human-assisted personal unlock service for consumer accounts; the process runs automatically and relies only on the evidence you provide.
What's more, these services usually ask for your password, verification codes or a photo of your ID. Handing over that data can make you lose the account entirely instead of recovering it. You also have little chance of getting your money back.
Let me be clear on this: do not outsource Google account recovery to anyone. With my team, we only help clients plan the process; we work out which device to use, which details to gather and what to do during the wait. The account owner always performs the recovery on their own device.
How does 2-Step Verification change the recovery process?
Recovery is harder on accounts with 2-Step Verification, because Google wants a second proof on top of the password. That proof can be a phone prompt, an SMS code, an authenticator app code, a security key or backup codes.
If you ever saved your backup codes, now is the time to find them. After that, each backup code works once and lets you pass the second step. Also, if you moved your authenticator app to a new phone, codes may come from there.
Google's page on common issues with 2-Step Verification lists the official options for when you lose your phone. However, if none of those options is available, you need to return to the recovery page and lean on familiar device and location signals.
Which recovery method works best in which situation?
The table below summarises which route to prioritise depending on what you still have. It combines Google's official guidance with what I observe in practice.
| What you still have | Recommended route | Relative strength |
|---|---|---|
| Old device with active session | Change the password directly on the device | Very strong |
| Old device, signed out | g.co/recover on the same device and browser | Strong |
| Active recovery number | Verify with an SMS code | Strong |
| Recovery email only | Email code from a familiar network | Medium to strong |
| Backup codes | Pass 2-Step Verification with a backup code | Strong |
| None of the above | Complete the form fully from a familiar location | Low to medium |
Do not read the strength column as an exact rate. Google does not publish figures; the column only shows which evidence tends to weigh more. In short, start with the strongest evidence you have and do not mix several methods at once.
What should you watch for when filling in the recovery form?
The form consists of the questions Google asks you. Think of every answer as a point in your favour. That is why you want to give as many accurate details as possible.
For the password question, type the most recent password you remember. If you are unsure, enter your closest guess and pay attention to upper and lower case. If Google asks when you created the account, an approximate month and year also helps. For example, you can anchor the date to when you bought your first smartphone or started university.
Google may also ask for a contact email. Next, give an active address where you can respond quickly. Then check that inbox's spam folder regularly, because a reply from Google that lands in spam can quietly stall the whole process.
Does a different browser or incognito mode change the result?
Yes, it can. An incognito window does not use the cookies and session history your browser has stored. As a result, Google sees the request as coming from an entirely unfamiliar browser.
Likewise, the same applies to a freshly installed browser. For instance, if you have used Chrome for years and try recovery in Firefox for the first time, you weaken the familiarity signal yourself. So always open the browser you are used to, in a normal window.
Keep an eye on browser extensions too. Ad blockers or privacy extensions sometimes stop the recovery page from working properly. If a button does not respond, disable the extensions temporarily in the same browser instead of switching browsers. Put simply, during recovery you want to look familiar, not anonymous.
What if Google account recovery fails?
If you see "Google couldn't verify this account belongs to you", Google lets you try again. However, retrying immediately under the same conditions usually produces the same result. Improve the conditions first.
- Wait a few days and make no new attempts in that time.
- Find a familiar device or network, such as an office computer or a family member's PC you used before.
- Write down your old passwords on paper.
- Ask your carrier whether the recovery number is still active.
- Once everything is ready, make a single careful attempt.
If every official route fails, Google's suggestion is to create a new account. That is a painful outcome, especially when a Business Profile, an ads account or a YouTube channel sits on the old one. That is why the preventive steps later in this guide matter so much.
Why is recovery more critical for business accounts?
Losing a personal Gmail account is annoying; losing a company's main Google account can stop operations. That account is often linked to Google Business Profile, Google Ads, Search Console, Analytics and a YouTube channel.
For example, if the only admin of an ads account loses access, campaigns keep running but nobody can change the budget. That is why, in Google Ads management, one of the first things my team checks is whether the account has at least two admins. The same rule applies to Search Console properties.
A single owner on a Business Profile is also a serious risk. When we handle reviews or Google review removal requests, an unreachable owner can drag the process out for weeks.
How do Workspace accounts handle recovery?
If you use a Google Workspace account on your company domain, the process differs from a personal Gmail account. Password reset rights usually sit with your organisation's administrator.
So, first of all, contact your IT lead or Workspace admin first. The admin can reset your password from the Admin console or generate backup verification codes for 2-Step Verification. That route is far quicker than repeated g.co/recover attempts.
In small businesses, however, the admin account is often the owner's own account. If the admin loses access, a separate process based on domain verification applies. That is why I always recommend at least two super admins to Workspace clients. A single admin is like a door with only one key.
How can you avoid seeing this warning again?
The best recovery is the one you never need. If you can access your account today, you can complete the list below in ten minutes.
- Update your recovery phone number and recovery email.
- Set up at least two 2-Step Verification methods.
- Download backup codes and keep them offline.
- Use a strong, unique password; the password generator can help.
- Add a passkey or a security key if you can.
This way you keep at least one backup route even if you lose your phone. Also, do not wipe your old device the moment you switch. Reset it only after you confirm you can sign in to every account on the new one.
In what order should you switch phones?
Messy phone switches cause this warning more than anything else. Because of that, here is the order I follow and recommend.
- Make sure the Google account is signed in on the old phone.
- Add the account to the new phone and approve the sign-in prompt from the old one.
- If you use an authenticator app, transfer the accounts to the new device.
- Run a Security Checkup once from the new device.
- Use the new phone for a few days, then reset the old one.
This order gives Google time to learn the new device as familiar too, so you build a bridge between old and new. In addition, avoid porting your number to another carrier in the same week, since SMS codes can arrive late during a port.
How does Google account security affect your social media accounts?
For example, many people open Instagram, Facebook or TikTok accounts with their Gmail address. Consequently, losing Gmail can make password resets impossible on those accounts too. An email account works like the key ring for your whole digital identity.
That is why, when we start social media management for a brand, we first map which email each account uses. We recommend linking business accounts to an address on the company domain rather than a personal Gmail.
If your Instagram account got disabled or you lost access, the process is different; I cover the official appeal routes on my Instagram account recovery page. And if a hijacked account starts posting on your brand's channels, the first-24-hours plan in my guide on handling a social media crisis will help.
Is recovery different after a hacked account?
Yes, slightly, because the starting point differs. If you lost the account to an attack rather than a forgotten password, the attacker has probably changed the recovery details too. In that case, giving Google your old details becomes even more important.
Google can take into account the recovery phone and email that existed before the recent changes. So do not hesitate to enter your old number and old email on the form. Also watch for phishing: genuine Google emails never ask for passwords or codes, so type g.co/recover yourself instead of clicking links in messages that pressure you.
After recovery, sign out of all sessions, change the password and review third-party app access. Then check Gmail forwarding rules and filters, because attackers sometimes leave rules that quietly forward your mail elsewhere.
What are the key steps in short?
To sum up, the "use a device where you've signed in before" message means Google wants stronger proof. The right approach is one calm, complete attempt from a familiar device and network.
Remember that Google account recovery has no official shortcut. Respect the waiting period, do not skip questions and never share codes. Once you are back in, update your recovery details so the next crisis never happens.
If you want to review the access structure of your company's Google, ads and social media accounts, my team and I can build an access map with you. That way a single lost phone never puts your entire digital presence at risk.




