Seeing an unfamiliar phone, computer, or location in your Google Account can be worrying. You might wonder whether someone has your password or is reading your Gmail messages without your permission.

The first step is to check which devices have accessed your account recently. Google lets you review signed-in devices and browser sessions, and you can sign out of anything you no longer recognize. If the activity looks suspicious, secure your account immediately rather than relying on sign-out alone.

1. Check Which Devices Are Signed In to Your Google Account

You can review recent device activity directly through Google’s account settings. The quickest way is to open the official device management page.

1. Visit Google Account device activity.
2. Sign in if Google asks you to verify your identity.
3. Review the list of devices and sessions associated with your account.
4. Select a device to see the available activity details.
5. Look for devices, browsers, or recent activity you cannot explain.

You can also reach this page by opening your Google Account, selecting Security & sign-in, and finding Your devices → Manage all devices. The labels may vary slightly across devices or interface versions.

2. How to Identify an Unrecognized Device

Do not assume that every unfamiliar entry means your account has been hacked. Google may display separate sessions for the same physical device.

For example, signing in through a new browser, using a private browsing window, or reconnecting an application can create another session. A device name or location may also look unfamiliar even when the activity is legitimate.

Before taking action, check the available details:

• Device type: Does it match a phone, computer, or tablet you own?
• Browser: Could you have used another browser or signed in through an app?
• Recent activity: Does the time correspond to when you used Google services?
• Location: Does the approximate location make sense given your travel or network connection?

Google notes that the displayed time can reflect background syncing rather than a moment when you actively used the device. Locations can also be approximate. If you still cannot identify a session, treat it cautiously and investigate further.

3. Sign Out of Devices You Do Not Recognize

If a device genuinely does not belong to you, or you no longer own it, sign it out of your Google Account.

1. Open Google Account device activity.
2. Select the unfamiliar device or session.
3. Choose Sign out, then follow any confirmation prompts.
4. Review the remaining sessions to make sure you have removed other unfamiliar access.

If several sessions appear under the same device name and you cannot determine which one is legitimate, Google recommends signing out of the sessions you do not recognize.

Remember that signing out removes that session’s access, but it does not necessarily solve the underlying problem if someone knows your password or has access through another method. Continue with the security checks below if the activity seems suspicious.

4. Change Your Google Account Password if Necessary

If you find evidence of unauthorized access, change your Google Account password as soon as possible. Use a strong, unique password that you do not use on another website.

1. Open your Google Account security settings.
2. Find the password option and verify your identity if prompted.
3. Choose a new password that is difficult to guess.
4. Save the password in a trusted password manager if you use one.

If you reused the old password on other websites, change it on those accounts as well. An exposed password may be tried against multiple services.

Changing your password may sign you out of many devices, but some sessions or third-party connections can behave differently. Review the device list afterward and sign out of any remaining unfamiliar sessions.

5. Review Recent Security Activity and Recovery Details

Removing a device is only part of securing an account. Someone with unauthorized access might also have changed your recovery information or added another way to sign in.

Open Google’s Security settings and review these items:

• Recent security activity: Check for unfamiliar sign-ins or changes to account settings.
• Recovery phone and email: Remove or correct details that you did not add.
• Two-step verification: Confirm that your verification methods are yours and enable two-step verification if you have not already.
• Connected apps and services: Review third-party access and remove connections you do not trust.

If you use Gmail and suspect someone entered your account, check for unfamiliar forwarding addresses, filters, delegated access, or other changes to mail settings. These can matter even after you change your password.

6. What If You Cannot Sign In to Your Google Account?

If someone has changed your password or recovery information and you can no longer access the account, use Google’s official recovery process instead of contacting an unknown recovery service.

Visit Google Account Recovery and follow the instructions. Answer the questions as accurately as possible. When practical, use a device, browser, and location from which you normally sign in.

After recovering access, review devices, recent security activity, recovery details, and connected applications. Secure any other account that used the same password.

Google provides additional instructions in its guide to securing a hacked or compromised account.

How to Prevent Unauthorized Google Account Access

A few habits make it harder for someone to take over your account:

• Use a unique password and enable two-step verification or a passkey where appropriate.
• Keep your phone, computer, browser, and applications updated.
• Never share verification codes with someone who contacts you unexpectedly.
• Review security alerts and remove access from devices you no longer use.
• Avoid signing in on untrusted shared computers, and sign out when finished.

Final Thoughts

If you suspect someone has signed into your Google Account, start by reviewing the devices and sessions on Google’s official device activity page. Sign out of unfamiliar entries, change your password if unauthorized access is plausible, and review recovery information and recent security activity.

An unfamiliar device is not always proof of a hack, but unexplained access should not be ignored. Taking these steps helps you identify the problem, remove unwanted access, and make your account harder to compromise again.