Skip to content
Workspace Forensics

This tool is not affiliated with, endorsed by or sponsored by Google LLC. Google Workspace, Gmail and Google Drive are trademarks of Google LLC. Other names are trademarks of their respective owners.

Glossary

Impossible travel

Two sign-ins by the same account from locations too far apart for the time between them, suggesting that one session is not the user.

Impossible travel is a detection that compares consecutive sign-ins of the same account. If the distance between their locations divided by the time between them exceeds a plausible travel speed, one of the sessions is probably not the user. The alternative explanation is a VPN or proxy.

It needs a location for each sign-in. In Google Workspace, the Reports API gives a region code per event, and console CSV exports often don't. This site's analyzer flags two successful sign-ins more than 500 km apart at over 900 km/h, using country-level positions only.

See: suspicious logins and 2SV changes.

This tool is not affiliated with, endorsed by or sponsored by Google LLC. Google Workspace, Gmail and Google Drive are trademarks of Google LLC. Other names are trademarks of their respective owners.