X

Gmail to alert users to suspicious activity

New Gmail feature displays banner warning when the automated system detects unusual activity.

Elinor Mills Former Staff Writer
Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service and the Associated Press.
Elinor Mills

Google launched a new feature in Gmail on Wednesday that will alert users when the system detects suspicious activity that might indicate the account has been compromised.

Gmail already displays information at the bottom of the in-box showing the time of the last activity on the account and whether it's still open in another location. But people often don't think to check that information, Will Cathcart, a Gmail product manager, said in an interview on Wednesday.

So Google is taking the extra step of displaying a warning to users in the form of a big banner that says "warning your acct was accessed from..." and which specifies a geographic region where the account was accessed when unusual activity was detected.

"For example, if you always log in from the same country and all of a sudden there is a log in from halfway around the world" that is suspicious, Cathcart said. Or, if the system detects that one particular IP address is accessing numerous accounts and changing passwords for them, that would trigger warnings for affected accounts, he said.

After receiving the warning banner, users can click a "details" link to get more information, such as where the last access points were. Users can change their password from that window.

More information about the warning system is on the Gmail blog.

Gmail will give users details about suspicious activity, such as the browser used, IP address, and date and time of recent account log-ins. Google