How to Remove Unknown Devices From Your Online Accounts

 

Seeing an unfamiliar device in your account can be a warning sign that someone else has accessed it.

However, an unfamiliar name does not always mean your account was hacked. A new phone, browser, smart TV, old device, VPN, or location estimate can sometimes look unfamiliar.

Before removing anything, check the details carefully.

1. Review Your Signed-In Devices

Open the security settings of the account and look for options such as:

• Your devices

• Where you're logged in

• Active sessions

• Recent login activity

• Manage devices

Review the device name, browser, approximate location, and recent activity when available.

2. Decide Whether the Device Is Really Unknown

Before assuming an account compromise, think about whether you recently:

• Bought or used a new device

• Signed in from another browser

• Used a VPN

• Traveled to another location

• Used a shared or work computer

• Signed in on a smart TV or another app

Location information can also be approximate, so do not rely on location alone.

3. Sign Out or Remove Suspicious Devices

If you do not recognize a device or session, use the account's official security settings to sign it out or remove access.

Google also lets you review devices signed in to your account and remove access from devices you do not recognize.

If available, you may also use Sign out of all devices when you believe the account has been compromised.

Afterward, sign back in only on devices you trust.

4. Change Your Password

If an unknown device appears to have accessed your account, change your password.

Use a strong and unique password that you do not use on other websites.

If you reused the compromised password elsewhere, change it on those accounts too.

If you suspect your password was exposed, follow our guide on what to do if your password has been leaked.

5. Enable Two-Factor Authentication

Two-factor authentication (2FA) adds another layer of protection if someone obtains your password.

After enabling it:

• Review your authentication methods

• Remove unknown phone numbers or devices

• Protect backup or recovery codes

• Never share verification codes with anyone

6. Check Recovery Information

Attackers sometimes change recovery settings to maintain access.

Check your:

• Recovery email

• Recovery phone number

• Backup authentication methods

Remove anything you do not recognize and make sure your own recovery information is current.

7. Review Connected Apps and Permissions

An attacker may retain access through a connected third-party app even after a device is removed.

Review apps and services connected to your account.

Remove access for anything you:

• Do not recognize

• No longer use

• Do not trust

8. Secure Your Email Account

Your email may be the recovery key for many other accounts.

If you find suspicious activity, also check your email for:

• Unknown devices

• Changed recovery details

• Unexpected forwarding rules

• Suspicious connected apps

• Password reset messages you did not request

Secure the email account immediately if anything looks wrong.

9. Continue Monitoring the Account

Removing an unknown device is not always the end of the problem.

For the next few days, watch for:

• New login alerts

• Password reset attempts

• Unknown devices returning

• Changes to security settings

• Messages or activity you did not create

If suspicious access returns, review your password, recovery methods, connected apps, and device security again.

For broader protection, review our complete guide on how to protect your online accounts from hackers.

Quick Security Checklist

• Review signed-in devices

• Verify unfamiliar sessions carefully

• Remove suspicious devices

• Change a compromised password

• Enable two-factor authentication

• Check recovery information

• Remove suspicious connected apps

• Secure your email account

• Monitor future login activity

Final Thoughts

An unknown device can indicate unauthorized access, but first verify whether it belongs to you.

If the device is genuinely suspicious, remove it and secure the account—not just the device session.

Changing the password, enabling two-factor authentication, reviewing recovery information, and checking connected apps can help prevent an attacker from regaining access.