We recommend using a VPN if you intend to log into a compromised account through a Gmail site or app: it will help hide your IP address and personal information from Google's security system if it identifies logging into a compromised account as suspicious activity.