Gmail passowrd bruteforced?

[Westquestion]

Friends, a wuick question. I,ve recently activated two factor authentication on both gmail and facebook- i only use them through my phone. I fear that someone may have logged to my gmail, but i have no evidence about it besides people in my office knowing things that they should know, unless they touched my phone, which they didn,t, at least physically. Here are the questions..
My password is kinda difficult one containing many letters that make no sence, so there is no whey anyone could guess it. I also never open mysterious emails and what soever.
Can gmail/ facebook be bruteforced. Do they have deffence against it. Will gmail notify me that someone else logged to my phone, since i never logged elswhere than my samsung edge phone. I also use only my mobile provider network. Now very impotantly, if someone acesses my gmail can he take and add photos to my gallery? For example, can he get acces to my phone gallery and review photos and also will he be able to add photos to my phone galley, because creepeky enough i saw a photo last week i never remember taking. I am freaking out. Also now that i have two factor how can i log out other devices on gmail that may have alredu been logged. Thanks for the answers.

 

[SpookDroid]

Hi there,

That scenario is highly unlikely. Yes, you can technically 'bruteforce' the password, but Google will stop the attempt after a few erroneous tries. Even if they knew your password, with 2-factor authorization, you'd have seen the prompt for the additional code. EVEN if they had somehow managed to get your phone for that, Google still notifies you of every log in attempt to verify it's you. Facebook I'm not sure, but I believe they do, too.

On both, you can review which devices/sessions are open or have been opened recently, so if you see any device that you don't recognize, you can revoke access or at least know that someone did, in fact, log in to your account.

If the event that someone does have access to your Google credentials and has been granted 2-factor authorization on their device, they can only view and edit and add files to your Google-connected services. They won't be able to access your phone's Gallery, for instance, but they would be able to access any pictures stored in Photos that have already been backed up to the cloud.

 

[Westquestion]

Thanks for the quick responce friend The thing is i only activated two factor recently, so i fear the access may have happened before. So, gmail would have notifed me if someone else have logged to the account? Is that default option on gmail or you have to turn it on, because i never touched anything. If they notify me with email is it possible the intruder to have deleted it after he logged, or i will get notifyed that someone logged no matter what he do. About the photos i never backed anything, i store my photos the way the phone stores them in gallery. If he adds some photo to gmail cloud you are talking about, will those photo appear near my normal photos in gallery or in specials section somewhere. In other worrds, when i open my gallery on my samsung, is it possible to find a photo that had been remotely added to my normal gallery through gmail. My questipns probably sound quite stupid, but i am a little behind with this things. Thanks again

 

[SpookDroid]

Google sends those e-mails by default unless you turn them off. But if someone has access to your e-mail, they could have deleted such notification. Still VERY unlikely.

As for the pictures, nope. Unless you sync to Samsung (and they got access to your Samsung account), they wouldn't be able to upload pictures directly to your phone (even with the Samsung account, but if you sync your Gallery to S-Cloud, then they could add a picture on a device and have it sync back to yours). If they uploaded a picture to Google Photos or Drive, you wouldn't see it in the Gallery, just in the aforementioned apps.

As far as I know, you can't delete the access record from your Google account, just the notification e-mails.