Who has delegated access to my email?
Short answer
Delegation and shared mailbox permissions can give someone access without a new personal-device sign-in. Check the access list in your provider’s account or mailbox settings.
What you need to know
Review another route into a mailbox.
-
Gmail delegation is a distinct permission
Google documents that a Gmail delegate can read, send and delete mail but cannot change the account password. A delegate is not simply another device entry; review the mailbox’s delegation setting.
-
Organizational access needs its own model
Shared mailbox or administrator permissions are different from personal Gmail delegation. Ask the organization’s authorized administrator about access you cannot explain. Removing a personal device is not proof that organizational permissions were removed.
Check, act, and the limit
-
Start by checking
Compare listed delegates with people you intentionally authorized.
-
Then act
Remove access you did not grant and review account activity.
-
Know the limit
The exact permission model differs across personal and work accounts.
Next guide: Emails sent that I did not write
Official sources
Provider security pages this guide is based on. Product details change, so check them before acting.
- Google Account Help: secure a compromised account support.google.com
- Gmail Help: delegation and removal support.google.com
HackEmail is an independent guide. We never ask for your password or verification codes, never read messages and never access anyone’s inbox. Not affiliated with Google, Microsoft, Apple or Yahoo.