This question already has an answer here:
My owner has recently accessed my personal email and was showing as an active device to that email on my google account.
He recently changed my recovery email to his own on two of the work email accounts I use. One was already setup upon hire and the other I created. He is a hard, unfriendly man to work for and I assume is getting ready to fire me after 2 years of working my butt off, but never enough for him (Pay decent and single mom).
I kinda get he wants to see what I am doing, sending and receiving... But today I noticed he accessed my personal email also and was showing as a active device. Is he allowed to do this? I rarely use this personal account at work. It was linked with other email accounts through Google I believe and I assume that is how he got into it. I put the 2 step verification on now and changed my password.
This is happening in Ohio.