Question: I have an older relative whose Google account is compromised (phishing email from a known person whose account was also compromised, entered google password in a popup window). I walked them through going to the Google account page to change the password, but Google is preventing password reset for up to 72 hours, and won't even allow "forgot password" process to work. The actor appears to be actively emailing contacts with the same phishing email and replying to inbound emails. Any idea how to secure a personal google account when it won't let you change the password?

Separately, what is the recommended password manager for an iPhone for a non-techie person? I don't have an iPhone, so I can't directly evaluate the options.