Google's recovery form is scored, not verified. It does not check whether you are telling the truth. It weighs how much your answers match what Google already knows, and a confident wrong answer scores worse than an honest "I don't know".
- Answer from the device and location you normally used for the account. This is weighted heavily and costs nothing to get right.
- Skip what you cannot recall. Guessing lowers the score. Blank does not.
- You can submit again. Rejection is not permanent, and each attempt with better detail can score higher.
Before you start: if you can still get in, stop and add recovery methods instead. Everything below is harder than the five minutes you would spend now.
- The form is a scoring system. Nobody at Google reads your submission.
- Familiar device, browser and location raise the score more than most answers do.
- Approximate dates are fine. Google expects imprecision from real owners.
- If no recovery method was ever added and you cannot pass the form, there is often no route left. That is worth knowing early rather than after a week of attempts.
Why does the recovery form reject correct answers?
Because it is not asking whether your answers are correct. It is asking how strongly the whole submission resembles the real owner returning.
Google will not publish the weighting, for the same reason it will not publish its sign-up checks: doing so would hand a manual to anyone trying to take accounts. But the behaviour is consistent enough to describe.
The submission is scored as a whole. Your answers are one input. Equally weighted, and often more so, are the things you are not being asked about: the device, the browser, the IP address and the rough location the request comes from. A request made from the laptop that used the account for six years, on the home connection, starts from a far stronger position than a perfect set of answers typed on a borrowed machine in another country.
This explains the outcome people find maddening. Someone who genuinely owns the account and answers everything correctly from an unfamiliar device gets rejected, while someone who remembers almost nothing but is on their own phone at home gets through.
What actually raises your chances?
In rough order of how much they appear to matter.
| Do this | Why it matters |
|---|---|
| Use the device and browser you always used | The single strongest signal you control. Cookies and device history are recognised |
| Use your usual network | Home or mobile connection. Never a VPN, which makes the request look like the attack it is screening for |
| Answer from memory, not from guessing | Wrong confident answers actively lower the score |
| Give approximate dates | "Around March 2019" is expected. Real owners do not remember exactly |
| Name contacts you actually email | Frequent correspondents, if asked. Not people you emailed once |
| List an old password you genuinely used | Even a very old one is strong evidence. An invented one is not |
| Complete the whole form | Abandoning partway submits nothing |
The most common own goal is a VPN. People about to do something security-related turn one on out of caution. To a system screening for account takeover, a request from an unfamiliar country through a datacentre address is the exact profile it exists to stop.
What lowers your score without you realising?
- Guessing. Blank scores neutral; wrong scores negative. If you do not know, leave it.
- A brand-new browser profile or incognito window. It removes the device history that would have helped you.
- Submitting many attempts quickly. Rapid repeats look automated. Space them out and change something meaningful each time.
- Using a different device each attempt. Consistency is itself a signal; hopping between machines removes it.
- Answering on someone else's connection. A friend's wifi is an unfamiliar network, however trustworthy the friend.
You have been rejected. What now?
Rejection is not a permanent verdict, and the next attempt is not pointless if you change the inputs that matter.
- Wait, and get to the right device. Do not immediately retry. Get to the computer or phone that used the account, on its usual network.
- Try again with less, not more. Remove your guesses. A shorter honest submission often scores higher than a complete speculative one.
- Check whether you have an unnoticed route in. A tablet or old phone still signed in, a browser with a saved session, a linked device. An active session is a way back that skips the form entirely.
- Look for a recovery method you forgot adding. An old alternate email or a phone number from years ago may still be on the account and may still work.
- Accept the answer if there is none. If no recovery method was ever set and the form will not pass, there is usually no further route. Google support cannot override the form, and any service claiming it can for a fee is a scam.
No third party can recover a Google account. Not us, not a paid "recovery specialist", not anyone advertising in the search results for this problem. Anyone claiming otherwise wants your money, your remaining credentials, or both.
Making sure this never happens again
The recovery form exists because someone did not do the following five minutes. If you get back in, do them before anything else.
- Add a recovery email at a different provider. Not another Gmail address; one outage should not take both.
- Add an authenticator app and store its backup codes somewhere that is not the mailbox they unlock.
- Add a passkey on a device you keep.
- Sign in occasionally. Long-dormant accounts are treated as inactive.
Whether what you have set up would actually survive a lockout is testable in about thirty seconds with our account recovery checker — it scores independence rather than count, which is the part that decides the outcome. If you were avoiding a phone number, the alternatives to one are covered separately.
Sources
- Google: How to recover your Google Account or GmailGoogle's own recovery route, including its guidance to use a familiar device and location.
- Google: Verify your accountWhy verification is requested and when it appears.
- Google: Create a Google Account for GmailWhat recovery information is set at sign-up.
Frequently Asked Questions
Why does Google reject my recovery request when my answers are correct?
How many times can I try Google account recovery?
Should I guess if I cannot remember an answer?
Does using a VPN affect Google account recovery?
Can Google support or a paid service recover my account for me?
What if I never added any recovery method?
Why You Can Trust This Guide
MailFixly publishes plain-English fixes for email account problems. Every step is checked against the provider's current process and updated when their interface changes.
- Independently written. Not affiliated with, endorsed by, or sponsored by Google.
- No credentials collected. Always sign in on Google's own pages, never on a third-party form.
- Reviewed before publishing and at every update. See our editorial policy.
- Last reviewed: .