Signing out a device you do not recognise

Every time you sign in somewhere, that device gets its own session. Sessions outlive a password change, so if you suspect somebody else has been in your account, changing the password is only half the job — the other half is on this page.

Seeing the list

In a browser or the desktop app, open Settings and choose Sessions. On Android, it is Settings → Login & Security → Sessions.

The one you are using now is at the top, under Current Session. Everything below it is another device, newest first, with the date it was created.

Reading the list

Each session is named after the browser or app that created it, and shown with the icon for its operating system. That name is a reasonable guess and no more: it comes from what the device said about itself when it signed in.

So judge the list by dates and by count rather than by names alone. Two sessions when you own two devices is right. A session created last Tuesday when you were not signing into anything is worth ending, whatever it calls itself.

You can rename any session — including the current one — to something you will recognise next time. It is worth doing: Firefox on Linux and Firefox on Linux tell you nothing about which is the laptop.

Ending them

• Log Out on a single session ends that one device.
• Log Out Other Sessions ends every session except the one you are using, and is the right button when you are not sure which of them is wrong.

Either way you will be asked to confirm it is you first — with your authenticator code or a recovery code if you have two-step verification turned on.

A signed-out device has to sign in again from scratch, with the password. If the reason you are here is that somebody else may know that password, change it as well, and in that order: change the password, then end the sessions.