Context
An acquaintance has a strange problem with her Google Account. I'm a developer (not Android specialist) while she's just a plain user.
She forgot her Google account password, but her old tablet still has it and she can send and receive e-mail using both e-mail and gmail apps.
We tried recovery from old and new tablet.
Google offered to send an SMS to her phone (Google displayed only last 3 digits, which match), nothing received on her phone. Same for automated voice message.
When recovering from another computer, Google asked for the complete phone number, we typed it and got a reply that it was wrong, which suggests it was changed.
The e-mail address for recovery is wrong (Google displays first 3 letters which don't match).
At this point we suspect her account was hacked by someone who changed the contact options to prevent password recovery.
We also tried the option to answer questions but she does not know exactly the last login date and creation date of the account. We tried anyway but Google replied it didn't match. At this point I understand that it is difficult for Google to tell if our request is legitimate or not (after all our exact behavior might be the behavior of an attacker).
Questions
- (1) I'm wondering if it is possible to recover the password by digging (even through adb if needed) in the e-mail app config (Gmail add and e-mail app have the password).
- (2) What else can we do?