Gmail and Photos content removals will begin December 1, Google says

Google has already confirmed that it is to start deleting, although purging might be a better term, certain personal Google accounts from December 1. This purge will include pretty much all the content you can think of: Gmail messages, Google Photos libraries, Google Calendar appointments, and Google Docs archives are all impacted.

Here’s everything you need to know ahead of the December deadline.

Google Content Deletion Countdown Clock Is Ticking

If news of this move to delete inactive Google accounts comes as a complete surprise to you, the fault cannot be laid at Google’s door. Back in July, Google sent emails warning that these account deletions would start in December. Those emails stated that any account that is considered to be inactive will receive “several reminder emails” before any action is taken. Now you may think you’ve spotted a flaw in the logic here, as an email to an account that isn’t currently active won’t be read, but Google has that covered. Notification emails will also be sent to any recovery email address on record. The first accounts to be targeted, in December, will be those that were created but never actually used again since.

Are Your Gmail And Photos At Risk?

With more than 1.8 billion Gmail users, rising to 2 billion as far as Google Photos users are concerned, will your account be among the unconfirmed number to be affected? The good news is that, statistically speaking, it’s unlikely. That’s because this purge, undertaken for security reasons according to Google, only applies to inactive personal accounts. More specifically, users who have not signed into their Google accounts for at least two years. If you’ve read or sent an email using Gmail, stored something in Google Drive, downloaded an app from the Google Play Store, added a photo to Google Photos, or even performed a Google search while logged into your Google account, your precious content is safe. Google business accounts are not affected.

MORE FROM FORBESChatGPT Down As Anonymous Sudan Hackers Claim ResponsibilityBy Davey Winder

Inactive Accounts Are A Compromise Waiting To Happen

Ruth Kricheli, a vice president of product management at Google, went on the record in May to explain the inactive account policy update. “If an account hasn’t been used for an extended period of time, it is more likely to be compromised,” Kricheli said. The reasoning is that accounts that remain unused for a long time will not have undergone regular security checks, will likely not have two-factor authentication activated, and could be using insecure passwords. “Our internal analysis shows abandoned accounts are at least 10x less likely than active accounts to have 2-step verification set up,” Kricheli said. Because, statistically speaking, these dormant accounts are more vulnerable than others, the risk of compromise is increased. A compromised Google account is like winning the lottery as far as threat actors are concerned, providing access to email messages and documents that can be used to reset account passwords, steal identities, and act as a launchpad for malicious activity in general.

MORE FROM FORBESHas Your iPhone Been Hacked? New Attack Mode Can Crash iOS 17 DevicesBy Davey Winder

What You Need To Do To Protect Your Gmail And Google Photos Content From Deletion

As I reported back in July, in order to protect your Gmail account, your Google Photos content, and anything else linked to your Google Account, most people will need to do precisely nothing. If you only have one Google account, and you’ve signed into it in any way across the last two years, you are safe. If, on the other hand, you have multiple accounts, now is the time to go check and sign into them. Ensure you do this at least once every 24 months and your account, and the content behind it, will also be safe from deletion. If you can’t remember your account details, all is not lost. Use the Google account recovery process which requires a recovery email or telephone number. Use known addresses and numbers and the chances are you’ll be OK. You’ll get a verification code sent by email or SMS, and then when you try to log in with an incorrect password you’ll get the opportunity to reset the password via the forgotten password route. Again, a code will be sent to you for verification.

Get the best of Forbes to your inbox with the latest insights from experts across the globe.

Follow me on Twitter or LinkedIn. Check out my website or some of my other work here.