Hidden Gmail setting lets strangers read your emails

A tech report warns about Gmail delegation, a feature that gives another Google account direct access to an inbox without sharing the password, allowing that person to read, send, and delete messages. According to the report, changing the password or enabling two-factor authentication does not remove this access because the delegate uses their own account. Personal Gmail accounts also do not show whether a delegate has read messages or log delegate sessions, while Google Workspace accounts offer more auditing. The report advises checking the setting in Gmail on the web under Settings, then Accounts and Import, then Grant access to your account, and deleting any unknown delegate.