Unknown app connected to email
Short answer
An authorized app may keep reading or sending mail even when browser sessions look normal. Review permissions and revoke apps you do not use or recognize.
What you need to know
Audit third-party access separately from logins.
-
Read the connection type and permissions
An app used for sign-in differs from an app granted access to account data. Review what access you approved and whether you still use it before treating every unfamiliar label as malicious.
-
Revocation has a limit
Google notes that removing a connection does not necessarily erase data already shared with the third party. Removal can stop the relevant future access; any request to delete retained data is a separate matter with that service.
Check, act, and the limit
-
Start by checking
Open the provider’s connected-app or permissions page.
-
Then act
Remove unknown access and rotate credentials if suspicious activity persists.
-
Know the limit
A connected app is not automatically malicious; verify before revoking an app you rely on.
Next guide: Emails sent that I did not write
Official sources
Provider security pages this guide is based on. Product details change, so check them before acting.
- Google Account Help: secure a compromised account support.google.com
- Google Account Help: third-party data access support.google.com
HackEmail is an independent guide. We never ask for your password or verification codes, never read messages and never access anyone’s inbox. Not affiliated with Google, Microsoft, Apple or Yahoo.