biznatchio posted:

Check the filters on your gmail account. It's possible they set up an inbound email filter that will forward a copy of all your incoming mail to another address, so even if you were to lock them out of your account, they'd still be able to read your mail. (Gmail shows a warning message on the user interface whenever a new forwarding filter is set up, so it's not likely one of these snuck by without you noticing, but it's worth checking because it used to be a pretty common attack vector.