i finally setup two factor authentication on my google account and everything else was up to date. I already changed my password after the first attempt. I resisted the two factor security before because i thought i had to get a code every time i sat at my desktop and would be annoyed if my phone was not nearby. Turns out it has trusted devices just like you can trust bluetooth devices on your phone.