FamilyAtlasDo this first
- Use Google’s official compromised-account or recovery page.
- If still signed in, review security events and unfamiliar devices.
- Secure credentials and recovery contacts on a trusted device.
- Check Gmail forwarding, connected services and payment exposure.
- Contact the school administrator for a school-managed account.
Use Google’s official compromised-account guide or account recovery page, not a link in an alarming message. If the child is still signed in, review security events and unfamiliar devices, then protect credentials and recovery details. If the password or recovery phone/email was changed, the official recovery process is the starting point; a parent’s certainty about ownership does not bypass Google’s verification.
A Google incident can affect Gmail, Android, Chrome data, Photos, Drive, purchases and other services that use the email account for recovery. Prioritize the actual exposed services rather than assuming all of them were accessed. A supervised personal account and a school-managed Google Workspace account need different help: the school administrator handles the latter. Plan for legitimate sign-in on the child’s devices after a password reset. FamilyAtlas does not recover a Google Account or override Google’s supervision and security processes.
Google: Secure a hacked or compromised Google Account · Google: Provide consent and add supervision
The parent concern
One Google Account can connect schoolwork, photos, email and purchases. Review actual exposure while distinguishing personal supervision from school administration.
If still signed in: inspect security events and devices
In the Google Account, open Security & sign-in and review recent security events. Review Your devices > Manage devices for unfamiliar access and follow the account-security steps. Change the compromised password and review recovery information and available 2-Step Verification. Keep the child with you so you can distinguish expected activity from unfamiliar events.
If locked out or recovery details changed
Use accounts.google.com/signin/recovery for the affected account and follow Google’s recovery prompts. Do not repeatedly send codes to a recovery contact you no longer control, or give them to a purported helper. Save the provider’s case instructions. No article can promise that recovery is immediate or possible without verification.
Check Gmail, Chrome, Photos and payments
Google’s guide calls out Gmail forwarding/filters and other connected products. Review the services actually used: purchases, sensitive files/photos and Chrome-saved account access can need separate attention. If payment or identity information may have been used, contact the appropriate issuer or authority. Do not assume changing one password reverses transactions.
Google: Secure a hacked or compromised Google Account
Use merchant-specific refund routes for unauthorized purchases
Family Link: reset without abandoning supervision
Google documents that a parent changing a supervised child’s password notifies and signs out the child. Restore legitimate sign-in on the intended devices and verify supervision and rules afterwards; a password reset is not itself an instruction to remove supervision or recreate the account. Account status and country/age rules still matter.
Google: Provide consent and add supervision · Google: How Google Accounts work when children reach the applicable age
Troubleshoot Family Link after a sign-in or supervision change
School account: contact the administrator
If the affected login is school-managed, contact the school’s IT/safeguarding route promptly, explain suspicious activity and follow its recovery instructions. Do not treat personal Family Link management as administrator authority for the school account. After containment, review recovery options and strong authentication appropriate for each account.
Google: Manage your child’s account on Chromebook
Understand school-managed accounts and devices · Prepare authentication and recovery options
What you can do right now
- Use Google’s official recovery/security guide.
- Confirm the exact affected account.
- Review security events, devices and recovery details.
- Check connected services and payments.
- Restore supervised sign-in or contact the school administrator.
A way to start the conversation
“We will secure the actual Google Account first, then check what it could reach. Please tell me about any codes, links or installations, even if you think you made a mistake.”
A suggested script to adapt, not a clinical intervention.
What technology cannot solve
Google decides account recovery and verification. FamilyAtlas is not a Google account-recovery provider, password manager or school administrator.
Questions parents ask
Does a parent password reset remove supervision?
Do not treat it that way. Google documents notification and sign-out; restore legitimate sign-in and check the existing supervision state.
What if the recovery email was changed?
Use Google’s official account recovery process for that situation; do not give codes to a stranger offering help.
What about a school Google Account?
Contact the school administrator. Personal Family Link controls are not school-account administration.
Sources and review
Provider documentation explains settings and eligibility. Professional guidance provides context, while our suggested family strategies are labeled separately. FamilyAtlas claims were checked against implementation, with release limits stated above.
- Google — Secure a hacked or compromised Google Account fact · checked 2026-09-30
- Google — Provide consent and add supervision fact · checked 2026-09-30
- Google — How Google Accounts work when children reach the applicable age fact · checked 2026-09-30
- Google — Manage your child’s account on Chromebook fact · checked 2026-09-30
Next source review: 2026-12-30. Menus, eligibility and rollouts can change; follow the linked provider instructions if your screen differs.
Written by FamilyAtlas; product descriptions are not independent product recommendations. No claim of medical or psychological review is made.