How to remove unknown devices from account
If you notice an unfamiliar phone, laptop, or browser session in your account, act quickly.
This guide explains how to remove unknown devices from account access, sign out active sessions, and tighten security before the problem spreads.
What an unknown device usually means
An unknown device is any device, browser, or app session you do not recognize in your account activity.
It may be a legitimate device you forgot about, a shared device still signed in, or an unauthorized login that requires immediate action.
Most major services, including Google, Apple, Microsoft, Meta, Amazon, and banking apps, keep a record of devices that have signed in.
These lists can show device type, location, time of access, and recent activity, which helps you decide whether the entry is safe or suspicious.
First steps to take before removing anything
Before deleting device access, confirm whether the device belongs to you or someone you trust.
Check recent travel, new phones, work laptops, tablets, smart TVs, and browsers you may have used for temporary access.
- Review the device name, operating system, and approximate location.
- Check the sign-in time against your own activity.
- Look for repeated logins, unusual countries, or impossible travel patterns.
- Note whether the session is marked as active, recently used, or trusted.
If you still cannot identify the device, treat it as suspicious and move forward with account protection immediately.
How to remove unknown devices from account settings
Most platforms let you remove unknown devices from account settings by opening the security or privacy section and ending the session.
The exact menu names vary, but the process is similar across services.
Google Account
Open your Google Account, go to Security, and review Your devices.
Select the unfamiliar device, then choose to sign out or remove access.
After that, check Recent security activity for suspicious login attempts and change your password if needed.
Apple ID
On an iPhone, iPad, or Mac, open Settings, tap your name, and scroll through the list of devices linked to your Apple ID.
Select the unknown device and remove it from the account.
If the device is still signed in, use Find My and review trusted devices and sign-in notifications.
Microsoft account
Visit your Microsoft account security page and look for Devices or Recent activity.
Remove devices you do not recognize, then sign out of all sessions if the activity looks suspicious.
Microsoft also allows you to review sign-in attempts and security alerts.
Facebook and Instagram
In Meta accounts, open Password and security or Where you’re logged in.
You can end the session on any device you do not recognize.
If the login seems unauthorized, update your password and enable stronger authentication immediately.
Amazon and shopping accounts
For Amazon and similar services, review the Login and security settings and any list of devices, browsers, or sessions.
Sign out of unfamiliar sessions and check saved payment methods, addresses, and recent orders for signs of misuse.
Should you sign out of all devices?
If you suspect account compromise, signing out of all devices is often safer than removing one device at a time.
This forces every session to reauthenticate and can interrupt an attacker who still has a valid login token.
Use this approach when you see any of the following:
- An unfamiliar device with recent active use
- A login from a location you have never visited
- Password changes you did not make
- Messages, emails, or purchases you do not recognize
After signing out everywhere, change your password from a trusted device and re-sign into only the devices you own.
Secure the account after device removal
Removing a device is only one part of the fix.
To fully protect the account, you should change the password, review recovery options, and strengthen sign-in controls.
- Use a unique, long password that is not reused elsewhere.
- Enable multi-factor authentication with an authenticator app or security key.
- Review recovery email addresses and phone numbers.
- Remove unknown backup codes, app passwords, or connected apps.
- Check for mail forwarding rules, shared calendar access, or delegated permissions.
These steps matter because an attacker may keep access through a recovery channel even after the visible device is removed.
How to check for signs of unauthorized access
Unknown devices often appear alongside other warning signs.
Review account logs, inbox rules, and recent security emails for activity you did not initiate.
Common warning signs
- Password reset emails you did not request
- Security notifications from new cities or countries
- Unrecognized app authorizations
- Messages sent from your account without your knowledge
- Changes to profile details, recovery settings, or payment methods
If the account is tied to business services, cloud storage, or financial records, preserve screenshots or timestamps before making changes.
This can help with support requests or incident reporting.
What to do if you cannot remove the device
Some accounts will not let you remove certain devices immediately, especially if they are flagged as trusted or recently verified.
In that case, sign out all sessions, change the password, and revoke third-party access from the security dashboard.
If the device remains active, contact the platform’s support team and ask them to review login history, session tokens, and recovery settings.
For work accounts, notify your IT or security team so they can check for broader access issues.
How to prevent unknown devices from appearing again
Prevention depends on reducing the chance that someone can reuse your credentials or approve a login without your knowledge.
Good account hygiene makes future intrusions much harder.
- Use a password manager to create unique passwords for every account.
- Turn on login alerts and device-based security notifications.
- Avoid approving sign-in prompts you did not start yourself.
- Keep devices updated with the latest operating system and browser patches.
- Do not stay signed in on shared computers, hotel devices, or public kiosks.
When possible, choose phishing-resistant authentication, such as hardware security keys or passkeys, especially for email, cloud storage, and banking accounts.
When to escalate the issue
Escalate immediately if the unknown device was used to access email, financial accounts, business data, or cloud storage.
Email is especially important because it often controls password resets for other services.
You should also escalate if you notice malware, repeated login attempts, or unauthorized purchases.
In serious cases, take screenshots, save security logs, and contact the platform, your bank, or your employer’s security team without delay.