I know. That’s a mouthful. I’m not sure where to post this. I had a “disposable” Google account that was used on any old Android devices. I logged into that account on my Chromebook. Wait. There are four email accounts in question.
So I logged into what I call “Gmail D” on my Chromebook. I think I noticed it didn’t have any recovery email. Then I logged into the disposable email account on it. This was two weeks ago and where the trouble began. I then tried to log back into “Gmail D” and my password wouldn’t work. I stepped away and came back later. When I came back to try again, I saw the option to use my student email (Outlook) to recover my account. I thought that was odd because I don’t remember providing that email address. I was desperate to log in to Gmail D so I went through that process.
If it sounds like I’m being paranoid and there’s nothing to worry about so far, please tell me. The cautious part of me is thinking that the disposable account is compromised (being used on any device without security measures), that “Gmail D” got compromised because I logged in right afterwards, and what hackers wanted was my student email credentials so they’re the ones to select it as my backup email to “Gmail D.”
What I’ve done so far: I reached out to my IT friend. He said no one wants my email, I probably just forgot what backup email I provided, and that unless people are asking for money or Apple gift cards I have nothing to worry about. I also powerwashed (reset) my Chromebook and logged in with a different Gmail address.
There was also some problems with the ChromeOS recovery tool but I really don’t think that was related to security issues but it was a big part of why I powerwashed my Chromebook. I might add that I forgot what the problem with my Android phone was. It uses yet another Gmail address (It uses the one that was on my Chromebook before I powerwashed it). I haven't changed any passwords or set up 2FA, but I have scanned with the Avira antivirus android app on my computer and on my phone. Is antivirus even necessary on Android or ChromeOS?

If you suspect that your email accounts were hacked, then you start by changing the passwords on all 4 accounts. Use a different password for each one, of course.

1 members found this post helpful.

dugan, is it necessary to use a different device to change the 4 passwords. Maybe I can use Guest mode on my Chromebook. Is that how I should go about doing it?

I don't know if this should be a new thread, but can I trust the USB drive I was using on the Chromebook before I powerwashed (did a factory reset)?

I don't remember where I read this but I heard that if a device is hacked...

1. Backup all important files.
2. Perform a factory reset.
3. Know that your backups can't be trusted.

I have had other flash drives I didn't feel comfortable using. I just tell myself I can use them in a live environment or better yet in guest mode on an OS.

I was unable to log in to one of the Email accounts (Gmail D.) and I know I didn't change the password recently. What's the first thing I should do? I really think someone else has access to it.

Google recently announced they were going to clean house a little and delete inactive gmail accounts. If you haven't used this account in a long time, it's likely been deleted by Google. One would have to have simply logged into the account prior to the Deletion deadline.

Okay, I didn't know that Google announced they were going to "clean house a little." It's just that I logged into Gmail D. like 10 minutes before my password stopped working. I know my OP wasn't very clear or simple.

Here's what happened:

1. I logged into the gmail account I call Gmail D on my Google Chromebook.
2. I logged out and then logged into a family member's disposable Gmail address.
3. I sign out and then tried to log into "Gmail D." and my password wouldn't work.

Between step 2 and 3, like 5-10 minutes passed.