The primary driver behind this initiative is the increasing risk associated with "inactive" or "legacy" accounts, which are often prime targets for cyberattacks and identity theft.

Key Highlights of the New Policy

According to the official announcement, the following measures are being introduced:

1. Verification of Inactive Accounts: Users with accounts that have remained inactive for over two years will receive notifications to verify their identity or update their profile, including their primary username if it no longer meets current security standards.
2. Enhanced Naming Conventions: Google is encouraging users to adopt usernames that are more secure and harder to spoof. This helps in reducing the success rate of phishing attempts that target recognizable but outdated naming patterns.
3. Mandatory Security Upgrades: Alongside the username review, users will be prompted to enable advanced security features, such as Two-Factor Authentication (2FA) and Passkeys.

What Should Users Do?

To ensure uninterrupted access to their Gmail accounts, users are advised to take the following steps:

• Sign In Regularly: Ensure you log into your Gmail account at least once every few months to keep the account marked as "Active."
• Update Recovery Information: Verify that your recovery email and phone number are current. This is the only way to regain access if your username is flagged for a security update.
• Monitor Official Notifications: Keep an eye on emails from Google regarding account security. These messages will provide specific deadlines and instructions if your account is affected.

Why This Change Matters

This update is a proactive step in securing the digital lives of billions of users. By clearing out inactive accounts and forcing a refresh of legacy credentials, Google aims to shrink the "attack surface" available to hackers, making the entire platform safer for everyone.

Google has stated that the rollout will be gradual, and users will be given ample notice before any changes are finalized. Detailed information is available through the Google Safety Center.