Prime Highlights: 

• Google urges its 2.5 billion Gmail users to tighten security settings in the face of surging AI-facilitated phishing attacks. 

• The firm recommends using passkeys and private aliases to lock down accounts. 

Key Facts: 

• Phishing emails surged over 200% in late 2024, and credential theft rose more than 700%. 

• Inactive Gmail accounts (idle for 2+ years) are more likely to be hacked and deleted. 

• Google is launching “Shielded Email” aliases to protect users’ real email identities. 

Key Background : 

Google has sent a stern warning to its user base of Gmail, requesting them to secure their accounts more tightly as AI threats are increasing. The increase in phishing attacks—now intelligent due to artificial intelligence—has brought about a new era of cybersecurity threat. Cyber attackers now use AI to generate hyper-realistic phishing emails that come very close to genuine ones, increasing the likelihood of users unknowingly clicking on malicious links or supplying sensitive information. 

To battle against this, Google is proposing the use of more secure ways to authenticate, the use of passkeys most notable. Passkeys are newer protection that involves abandoning passwords and utilizing hardware or biometric ways to authenticate oneself with fingerprint or face recognition. It is a far more impossible threat for attackers to bypass compared to the case where regular passwords get stolen or hacked easily. 

Another new feature being rolled out is Shielded Email, a feature that allows users to create email aliases that forward emails to their original Gmail address. The aliases allow users to keep their real email address private and can be easily disabled if they begin receiving spam or suspicious mail.This adds an additional layer of privacy and control, making it more difficult for attackers to discover real email accounts. 

Besides, Google is also taking steps to combat the growing threat posed by inactive accounts. Those that have not been used for over two years have been considered high risk—they have less secure passwords and no two-factor authentication, which poses a vulnerable target. Google is now going to delete such inactive accounts to reduce the chances of them being hacked. 

The company’s multi-faceted strategy is reflective of the dynamic aspect of cybersecurity in an increasingly AI-influenced world. Users of Gmail are being strongly encouraged to review their security options, turn on passkeys, and consider setting up email aliases. Being alert for suspicious mail and minimizing the footprint of personal information online are practices that are now a must. 

Since phishing and identity theft are on the rise, Google’s message here is blunt: if you are on Gmail, your current level of protection may not be enough. Do something immediately—or risk compromise. 

Read More: Sundar Pichai Highlights Role of AI in Driving Googles Coding Efficiency