10 Gmail Settings You Should Change Today
10 Gmail Settings You Should Change Today
Gmail's defaults are chosen for the average user across a billion accounts. That means they are reasonable for everyone and ideal for almost no one. Ten minutes in Settings can fix the most common annoyances and close a few security gaps that most people never look at.
This guide covers ten specific settings worth changing, ordered by importance. The first three are security checks that you should do even if you skip everything else. The remaining seven make Gmail meaningfully less irritating to use. Each one lists the exact path and what to change.
One caveat that applies throughout: the exact wording and layout of Gmail settings vary slightly between personal accounts, Google Workspace accounts, and the mobile app. The mobile app in particular exposes far fewer settings than the desktop version — for anything beyond basic preferences, use a browser. Paths below refer to the desktop web interface.
Key takeaways
- The three highest-value changes are security checks most people never look at: two-factor authentication, unauthorised forwarding, and third-party app access.
- Undo Send is off by default in effect — the window is only 5 seconds. Set it to 30.
- A filter is the single most useful organisational tool in Gmail, and most people have never made one.
- Gmail's mobile app exposes only a fraction of these settings. Use the desktop web version for anything beyond signatures and notifications.
- If your account is a Workspace account managed by an employer or school, some settings are controlled by the administrator and cannot be changed by you.
1. The three security checks (do these first)
These are not in the general Settings tab. They are in your Google Account security page, and they are the three settings that matter most because they affect what an attacker can do if they obtain access to your account.
1. Turn on 2-Step Verification (and prefer a passkey)
Where: myaccount.google.com → Security → 2-Step Verification, and
Security → Passkeys.
Two-step verification means your password alone is not enough to sign in — a second proof of identity is required. This is the single highest-impact security change available on a Google account, because it converts the most common attack (a stolen or reused password) from a breach into a non-event.
Google now offers three second factors, and they are not equal:
- Passkeys (strongest) — stored on your device, unlocked by fingerprint or face, and bound to the Google domain. Resistant to phishing, because a passkey registered to Google will not appear on a lookalike site.
- Authenticator app or security key (strong) — a time-based code generated on your device, or a hardware key. Resistant to most attacks, though codes can be relayed by sophisticated phishing.
- SMS (weakest of the three) — vulnerable to SIM-swap attacks, where an attacker convinces your carrier to transfer your number. Better than nothing, but not what you should choose if a better option is available.
If you have 2-Step Verification enabled with SMS only, adding a passkey is worth the five minutes. Both can be active at once; the passkey is used when available and SMS remains as a fallback.
2. Check for unauthorised forwarding
Where: Gmail → Settings (gear icon) → Forwarding and POP/IMAP.
This is the setting most people have never opened. It shows every address that receives a copy of incoming mail. Attackers who gain access to an account often set up forwarding before doing anything else — it lets them keep reading your email even after you change your password, because the forwarding rule persists.
Check the list against what you expect. If a forwarding address is there and you did not add it, remove it immediately, then change your password and sign out of all sessions. A forwarding address you do not recognise is a strong indication that someone else has had access to your account.
3. Review third-party app access
Where: myaccount.google.com → Security → Your connections to third-party
apps and services (the exact label varies by account type).
Every time you have clicked "Sign in with Google" and granted an app permission to read your email, access your calendar, or view your contacts, that permission persists until you revoke it. Apps you used years ago may still have access. Apps that have since been sold or compromised may still have access.
Go through the list and remove anything you do not recognise or no longer use. This takes ten minutes and cleans up permissions that accumulated over years. Doing it once a year is a reasonable habit.
If you are unsure about the difference between these checks and the broader question of how account compromise happens in the first place, the guide on how to spot a phishing email covers the attack patterns these three settings are designed to mitigate.
2. Five settings that make Gmail less annoying
These are in the Gmail Settings page itself, under the General tab. All five are quick changes with immediately visible effects.
4. Widen the Undo Send window to 30 seconds
Where: Settings → General → Undo Send → Send cancellation period.
Gmail has an "Undo" button that appears after you send an email. It is the single most useful feature in Gmail and almost nobody has configured it properly. By default, the window is 5 seconds — barely enough time to notice the "Undo" link has appeared. The options are 5, 10, 20, and 30 seconds. Set it to 30.
The 30-second option does not delay delivery of your email in any meaningful way — it holds it in Gmail's outbox for 30 seconds, so the recipient may see it arrive up to half a minute later. In exchange, you get half a minute to catch the wrong recipient, the missing attachment, or the sentence you immediately regretted. This is one of the highest value-to-effort changes in this list.
5. Set up a signature you actually like
Where: Settings → General → Signature.
Gmail does not have a signature by default, which means most people's emails end abruptly with no name or contact information. A signature solves this once and applies to every future email.
The practical version: your name, and one reliable contact method that is not the email address they are already replying to — a phone number, a website, a job title if it is relevant. Do not paste a motivational quote or a wall of legal disclaimer text unless you work in a role that requires it. A three-line signature is fine.
If you use Gmail for both personal and work correspondence and want different signatures for each, you can create multiple signatures in the same panel and select which one appears on new emails.
6. Turn on keyboard shortcuts
Where: Settings → General → Keyboard shortcuts → Keyboard shortcuts on.
Gmail has an extensive set of keyboard shortcuts that most users never discover because they are disabled by default. Turning them on costs nothing and unlocks a faster way of working with email, especially if you process a lot of it.
The four worth learning first: c to compose, e to archive the current
email, r to reply, and / to move the cursor to the search box. Once those
are habits, adding more is straightforward. Press ? any time to see the full list.
7. Configure a vacation responder before you need it
Where: Settings → General → Vacation responder.
Setting this up in advance is easier than setting it up on the morning of a trip. You can draft the message, save it, and then turn the responder on with a date range when you are ready to travel.
Two practical notes. First, Gmail's vacation responder only replies to people who email you once per day, not every time — so setting a start date is fine. Second, if you use Gmail for work, check whether your organisation has its own out-of-office process, which usually takes precedence.
8. Fix desktop notifications
Where: Settings → General → Desktop Notifications.
The default behaviour varies by browser and by how Gmail was opened. Many people end up with no notifications (missing important mail) or with notifications for every email (distracted constantly). The middle ground: enable notifications, and select "Important mail only" rather than "New mail" — this reduces interruption to mail Gmail's algorithm has flagged as important.
If you are on a laptop shared with others or working in a shared space, it is also worth checking the notification sound setting. Gmail's notification sound plays for every notification received; if that is annoying in your context, it can be turned off here without disabling notifications entirely.
3. Two settings for organising your inbox
These require slightly more effort than the previous five, but they have a much bigger long-term effect on how manageable your inbox is.
9. Create a filter (or three)
Where: Settings → Filters and Blocked Addresses → Create a new filter.
A filter is a rule that automatically acts on incoming email matching a condition. It is the most powerful organisational tool in Gmail and most people have never created one.
Three filters worth creating on almost any account:
- The "newsletters" filter. Condition: match emails from a specific list of sender addresses, or with a common word in the subject like "unsubscribe" or "newsletter". Action: apply a label called "Newsletters" and skip the inbox. Now promotional email no longer competes with real mail, but is not lost either.
- The "receipts" filter. Condition: subject contains "order confirmation" or "receipt" or "invoice". Action: apply a label called "Receipts". These are the emails you only look at when you need to, and having them pre-sorted means you find them instantly when you do.
- The "notifications" filter. Condition: from a specific service you use but whose emails are usually just FYI (GitHub, a bank, an airline). Action: apply a label and mark as read — you can see them without them cluttering the unread count.
Creating a filter takes about a minute. Gmail offers to test the filter against existing emails before applying it, which is worth using on the first filter you make to make sure it matches what you expect. If it matches more than expected, refine the condition before saving.
10. Adjust the inbox type
Where: Settings → Inbox → Inbox type.
Gmail's default inbox is a single chronological list. There are several alternative layouts that change how email is grouped on the main screen, and one of them may fit how you work better.
The most useful option for most people is Priority Inbox, which splits the inbox into sections — important and unread, starred, everything else — based on Gmail's own classification. It is not perfect, but it means the emails Gmail thinks are important are not buried under newsletters and notifications.
Multiple Inboxes is worth knowing about if you have several labels you check regularly — it lets you put them side by side on the main screen. And Unread First simply moves unread mail above read mail, which is a small change that makes triage easier.
If you also want to reduce what reaches your inbox in the first place, the broader guide on how to tell if a website is safe covers a related point: unsubscribing from promotional lists you no longer read is worth doing, and Gmail's built-in unsubscribe button in the header of promotional emails handles most of it in one click.
4. What you cannot change on mobile
The Gmail mobile app exposes a much smaller set of settings than the desktop web version. Specific things that are only available on the desktop:
- Filters — you can view existing filters on mobile but not create new ones.
- Forwarding and POP/IMAP — not accessible in the app at all.
- Most General tab settings — including Undo Send duration, default reply behaviour, and keyboard shortcuts.
- Inbox type — the app uses its own layout and does not expose the inbox type setting.
The mobile app does let you change notifications, signature (for the mobile client specifically), and a handful of display preferences. For anything else, open Gmail in a browser — either on your phone (requesting the desktop site) or on a computer.
Where this leaves you
Ten settings, most of which take under a minute each. The three security checks are the ones worth prioritising because they affect what happens if your account is compromised — everything else is convenience. If you only do the security checks and the Undo Send change, you have captured most of the value.
Gmail is a mature product with an unusual amount of hidden depth in its settings. The defaults are chosen to be safe for a very broad population, which is why so many of them are worth adjusting for a specific person's actual use. None of the changes above are obscure or risky; they are the settings that experienced Gmail users tend to have already changed and simply never mention.
Frequently asked questions
Where do I find Gmail settings?
On desktop, click the gear icon in the top right of the Gmail interface. On mobile, tap the three-line menu icon in the top left and scroll to Settings. The desktop version exposes far more settings than the mobile app.
What are the most important Gmail security settings?
Three: two-step verification (or a passkey), checking that no unauthorised forwarding addresses are set up, and reviewing third-party apps with account access. The first is the highest impact; the other two catch cases where someone has already gained access.
How do I increase the undo send time in Gmail?
Settings → General → Undo Send → change the cancellation period to 30 seconds. The setting is easy to miss because it is partway down the General tab, but it is one of the most useful changes you can make.
Can I see if someone else has accessed my Gmail?
Yes. Scroll to the very bottom of any Gmail page and look at "Last account activity." Click "Details" to see recent access from different devices and IP addresses. If you see activity you do not recognise, change your password and sign out of all sessions immediately.
What is the difference between 2-Step Verification and a passkey?
2-Step Verification requires a second proof of identity after your password — an SMS code, authenticator code, or hardware key. A passkey replaces the password entirely with a cryptographic credential stored on your device. Passkeys are stronger because there is no password to steal and they are resistant to phishing, but both are meaningfully better than a password alone.
Why can't I find a setting the article mentions?
Two possibilities. First, you may be using the mobile app, which exposes fewer settings than the desktop version. Second, if your account is a Google Workspace account managed by an employer or school, some settings are controlled by your administrator and cannot be changed by you.
Do Gmail filters apply to existing email?
Only if you choose that option when creating the filter. Gmail asks whether you want the filter to apply to matching conversations that are already in your inbox. If you want to organise existing mail as well as future mail, select that option before creating the filter.
Does Gmail have an out-of-office auto-reply?
Yes — called the "Vacation responder," in Settings → General. You can set a date range, and Gmail replies only to the first email from each sender within that period, which prevents reply loops.
Sources and further reading: Google Account Help documentation on 2-Step Verification, passkeys, and third-party app access; Gmail Help documentation on Forwarding and POP/IMAP, Filters, Undo Send, Signatures, Keyboard shortcuts, Vacation responder, Desktop notifications, and Inbox types; Google Security Blog posts on passkeys and account security; Google's transparency documentation on last-account-activity. Gmail settings change over time and vary between personal accounts, Workspace accounts, and regions. The paths described above reflect the current desktop web interface at the time of writing; if wording differs slightly on your account, the setting is in the same area.