Gmail Now Lets US Users Change Their @gmail.com Address: Security Risks, Safeguards and What Happens to the Old Address

This revised report explains Gmail Now Lets US Users Change Their @gmail.com Address: Security Risks, Safeguards and What Happens to the Old Address in a cleaner structure, retaining the original article’s core technical details and context.

Google introduced a major change to Gmail accounts in 2026: eligible users can change the username portion of an existing @gmail.com address without creating a completely new Google Account.

For years, a Gmail address was effectively permanent. Someone who regretted an old username usually had to create a new account, move services and manage forwarding.

Google began rolling out the change earlier and announced on 31 March 2026 that the ability was available to all Google Account users in the United States.

The change naturally raised security questions because a Gmail address is often used not only for email but also as a login identifier across Google services and third-party websites.

Google’s design includes several safeguards: the old Gmail address remains attached to the same account as an alternate address, nobody else can claim it, both old and new addresses can receive mail, and users can sign in with either.

What exactly can users change?

Eligible users can change the part of the Gmail address before @gmail.com.

For instance, a user with an old address based on a childhood nickname could choose a new available username.

The underlying Google Account remains the same.

Does changing the Gmail address delete emails?

No.

Google says account data remains attached to the same account.

Existing Gmail messages, Drive files, Photos and other Google data are not deleted simply because the primary email identifier changes.

What happens to the old address?

The old Gmail address becomes an alternate email address on the account.

Messages sent to it still arrive.

The user can continue signing in with it.

Google does not release the old username for another person to claim.

Why keeping the old address is an important security safeguard

If old addresses were recycled, a new owner could receive messages intended for the previous user.

Those messages might contain password-reset links or private information.

Google’s decision not to recycle the old address substantially reduces that risk.

Can somebody take the old username later?

No.

Google’s help documentation says the old Gmail address stays with the same account.

Even if the account is later deleted, previously used Gmail usernames are generally not made available for another person to register.

Can users switch back?

Yes.

The previous Gmail address can be made primary again.

The newer address then remains associated with the account according to Google’s rules.

How often can the address be changed?

Google says users can create a new @gmail.com address for the same account only once every 12 months.

There is also a lifetime limit on the number of new Gmail addresses that can be created for one account.

This helps prevent rapid username hopping and abuse.

Why Sign in with Google can be affected

Many third-party websites identify users partly through their Google account details.

Changing the primary email can confuse services that stored the old email as a unique identifier rather than using Google’s stable account ID correctly.

Google warns users to review Sign in with Google connections before changing the address.

Could a third-party site create a duplicate account?

Potentially, if that site incorrectly treats the new email address as a completely new identity.

This is an integration issue rather than someone taking over the Google Account itself.

Users should verify important external accounts after a Gmail username change.

Chromebook users need extra care

Google specifically recommends Chromebook users back up local data before changing the account email.

Some local profile paths and device integrations may temporarily behave differently after the change.

A backup provides protection if a device-specific problem occurs.

What happens to Google Drive shares?

Google says some services may continue displaying the old email address for a period.

Shared Drive files or collaboration records can therefore look inconsistent immediately after a change.

The underlying account ownership remains the same.

What happens to Calendar?

Users may be signed out temporarily or see invitations associated with the old identity.

Google provides troubleshooting guidance for these transition problems.

They are generally account-mapping issues rather than evidence that the data has been lost.

What happens to Gmail subscriptions?

Some newsletters or external subscription systems may continue sending to the old address.

Because the old Gmail address still receives mail, those messages should continue arriving.

However, some external services may need the new address added manually if the user wants records updated.

Why scammers may exploit the new feature

Any major account-change feature can become a phishing theme.

Attackers may send fake “confirm your Gmail change” messages or claim that an address will be lost unless the user signs in through a malicious link.

Users should navigate directly to their Google Account settings rather than trust unexpected links.

Google’s email-change notifications

Google sends security notifications when an account email is changed.

The old address receives a notice, giving the owner a warning if someone else initiated the change.

Verification steps are also used during legitimate changes.

What if you did not request a change?

Treat an unexpected email-change notification as a possible account-compromise warning.

Go directly to Google’s account-recovery and security pages.

Do not reply to suspicious messages or enter credentials through links in them.

Two-step verification remains important

Changing a Gmail address does not replace normal account security.

Users should enable strong two-step verification or passkeys where available.

A unique password and up-to-date recovery information remain essential.

Why passkeys help

Passkeys are resistant to many common phishing attacks because authentication is tied cryptographically to the legitimate service.

An attacker cannot simply steal a passkey by convincing someone to type it into a fake website.

Can UK users change their Gmail address?

Google’s March announcement said the full feature was available to all Google Account users in the United States.

Availability outside the US has been more limited and subject to rollout.

A UK user may therefore find that the option is not present.

The account settings page is the best way to check current eligibility.

How to check whether your account is eligible

Open the Google Account page, select Personal info, then Email and Google Account email.

If the option to change the Google Account email is available, the account can use the feature.

If the setting cannot be opened or there is no change option, the account may not yet be eligible.

Work and school accounts are different

Google Workspace accounts are controlled by organisation administrators.

Employees and students usually cannot independently rename the primary organisational address using the consumer Gmail process.

The administrator manages addresses and aliases.

Why dots are not separate Gmail addresses

For personal Gmail addresses, Google ignores periods in the username for mail delivery.

johnsmith@gmail.com and john.smith@gmail.com route to the same account if the underlying letters are identical.

This behaviour has existed for years and is separate from the new username-change feature.

Can a user rename only by adding a dot?

Google’s current help documentation says punctuation changes of that type are not treated as a new primary Gmail username in the normal way.

Dotted variations already function as aliases for mail delivery.

Why security concerns are real but manageable

The feature expands the number of account transitions users can perform, so it creates opportunities for confusion and phishing.

But Google’s decision to keep the old address permanently tied to the same account eliminates one of the biggest theoretical dangers: username recycling.

The more practical risks are external account mapping, social engineering and users failing to recognise legitimate security notifications.

What should users do before changing an address?

Review important third-party logins.

Back up local Chromebook data if relevant.

Make sure recovery email and phone information are current.

Confirm two-step verification or passkeys are enabled.

Then use only Google’s official account settings to make the change.

Conclusion

Google’s new Gmail username feature solves a problem users have complained about for years: an embarrassing or outdated address no longer requires abandoning an established Google Account.

The change does introduce security and compatibility considerations, especially around third-party logins and phishing.

However, Google preserves the old address as an alternate identity, continues delivering mail to it and prevents anyone else from claiming it.

For eligible users, the safest approach is to prepare before changing the address and verify important external accounts afterwards.

Sources and further reading

See Google’s 31 March 2026 announcement and the Google Account help page explaining what happens after a Gmail address change.

Why the old address staying active can also create confusion

Keeping the old address protects users from takeover and lost mail, but it means a person can effectively have multiple valid sign-in names for the same account. That can confuse family members, colleagues or help-desk staff who assume the new address completely replaced the old one. Users should document the change and update important contacts so the alternate address is understood rather than mistaken for a separate account.

One more security check after renaming

After the change, review Google’s recent security activity and connected devices. If an unfamiliar device, forwarding rule or recovery address appears, investigate it immediately rather than assuming it is part of the rename process.