More and more hackers are targeting regular people with the goal of breaking into their bank accounts, stealing their crypto, or simply stalking them<\/a>. These types of attacks are still relatively rare, so there\u2019s no need for alarm. But it\u2019s important to know what you can do to protect yourself if you suspect someone accessed your email, social media account, chat apps, or any other major service and platform.<\/p>\n A few years ago, I wrote a guide<\/a> to help people protect themselves, and understand that most of the companies you have an account with already offer you tools to take control of your accounts\u2019 security, even before you contact them for help, which in some cases you still should do.\u00a0<\/p>\n Here we break down what you can do on several different online services, including Gmail (and more broadly a Google account), Facebook, Apple ID, and more. And come back often because this is a regularly updated resource, both in terms of making sure the instructions for each individual service or platform are up to date, as well as to add new ones.\u00a0<\/p>\n Just like in the previous guide, there\u2019s an important caveat. You should know that these methods don\u2019t guarantee that you haven\u2019t been compromised.\u00a0<\/p>\n If you still aren\u2019t sure, you should contact a professional, especially if you are a journalist, a dissident or activist, or otherwise someone who has a higher risk of being targeted, such as a person in an abusive relationship. In those cases, the non-profit Access Now has a digital security helpline<\/a> that will connect you to one of their experts.<\/p>\n Another caveat: If you haven\u2019t already, you should enable multi-factor authentication<\/a> on all your accounts, or at least the most important ones (email, banking, social media). This directory of websites that use MFA (or 2FA) is a great resource<\/a> that teaches you how to enable multi-factor authentication on more than 1,000 websites. (Note that you don\u2019t have to use the multi-factor app promoted on that site, there are<\/a> plenty<\/a> of other<\/a> alternatives<\/a>.)\u00a0<\/p>\n Increasingly some online services offer the use of a physical security key or a passkey stored in your password manager<\/a>, which is one of the highest safeguards to prevent account intrusions that rely on password-stealing malware<\/a> or phishing.<\/p>\n Explore below, or skip directly to the section of your choice.<\/p>\n The first thing you should do if you suspect someone has broken into your Gmail account (and by extension all the other Google services linked to it) is to scroll all the way down in your inbox until you see \u201cLast account activity\u201d in the bottom right corner.<\/p>\n Click on \u201cDetails.\u201d You will then see a pop-up window that looks like this:\u00a0<\/p>\n These are all the places where your Google account is active. If you don\u2019t recognize one of them, for example if it comes from a different location, like a country you haven\u2019t visited recently or have never been, then click on \u201cSecurity Checkup.\u201d Here you can see on which devices your Google account is active.\u00a0\u00a0\u00a0<\/p>\n If you scroll down, you can also see \u201cRecent security activity.\u201d<\/p>\n Check this list to see if there are any devices that you don\u2019t recognize. If in any of these places above you see something suspicious, click on \u201cSee unfamiliar activity?\u201d and change your password:<\/p>\n After you change your password, as Google explains here<\/a>, you will be signed out of every device in every location, except on the \u201cdevices you use to verify that it\u2019s you when you sign in,\u201d and some devices with third-party apps that you\u2019ve granted account access to. If you want to sign out there too, go to this Google Support page<\/a> and click on the link to \u201cView the apps and services with third-party access.\u201d<\/p>\n Finally, we also suggest considering turning on Google\u2019s Advanced Protection on your account<\/a>. This enhanced security protection makes phishing your password and hacking into your Google account even harder. The drawback is that you need to purchase security keys, hardware devices that serve as a second-factor. But we think this method<\/a> is important and a must-use for people who are at a higher risk.\u00a0<\/p>\n Also, remember that your email account is likely linked to all your other important accounts, so getting into it could turn out to be the first step into hacking into other accounts. That\u2019s why securing your email account is more important than virtually any other account.<\/p>\n If you are concerned about hackers having accessed your Microsoft Outlook account, you can check \u201cwhen and where you\u2019ve signed in,\u201d as Microsoft puts it in the account settings.<\/p>\n To go to that page, go to your Microsoft Account<\/a>, click on Security on the left-hand menu, and then under \u201cSign-in activity\u201d go to \u201cView my activity<\/a>.\u201d\u00a0<\/p>\n At this point, you should see a page that shows recent logins, which platform and device was used to log in, the type of browser and the IP address.\u00a0\u00a0<\/p>\n If something looks off, click on \u201cLearn how to make your account more secure<\/a>,\u201d where you can change your password, check \u201chow to recover a hacked or compromised account<\/a>\u201d and more.\u00a0\u00a0<\/p>\n Microsoft also has a support portal with information on the Recent activity page<\/a>.<\/p>\n As we noted above, your email account is the cornerstone of your online security, given that it\u2019s likely that most of your important accounts \u2014 think social media, bank and healthcare provider, etc. \u2014 are linked to it. It\u2019s a popular target for hackers who want to then compromise other accounts.\u00a0<\/p>\n LinkedIn has a support page detailing the steps you can follow<\/a> to check if your account is logged into a device or location on the web, iOS and Android that you don\u2019t recognize.\u00a0<\/p>\n LinkedIn has a specific page on its website<\/a> where you can check the places where you are logged in.<\/p>\n If you don\u2019t recognize one of those sessions, click on \u201cEnd\u201d to log out of that particular session, and enter your password when prompted. If you click on \u201cEnd these sessions,\u201d you will be logged out of all the devices other than the device that you are using.\u00a0<\/p>\n On iOS and Android, the process is the same. In the LinkedIn app, tap on your profile picture on the top, tap on \u201cSettings,\u201d then \u201cSign in & Security,\u201d then \u201cWhere you\u2019re signed in.\u201d At that point you will see a page that is essentially identical to the one you can see on the web.\u00a0<\/p>\n LinkedIn also has a security feature that requires you to confirm on your app if someone tries to log into another device.\u00a0<\/p>\n If you tap on the sign-in request notification, you will see a page that asks you to confirm that it was you who just attempted to login. There you can confirm the log in, or block the attempt.\u00a0<\/p>\n Like other email providers, Yahoo (which owns TechCrunch) also offers a tool to check your account and sign-in activity with the goal of allowing you to see any unusual activity that could be a sign of compromise.\u00a0<\/p>\n To access this tool, go to your Yahoo My Account Overview<\/a> or click on the icon with your initial next to the email icon on the top right corner, and click on \u201cManage your account.\u201d\u00a0<\/p>\n Once there, click on \u201cReview recent activity.<\/a>\u201d On this page you will be able to see recent activity on your account, including password changes, phone numbers added and which devices are connected to your account, as well as their corresponding IP addresses.\u00a0<\/p>\n Given that it is likely that you have linked your email address to sensitive websites like your bank, your social media accounts and healthcare portals, among others, you should make an extra effort to secure it.\u00a0<\/p>\n Apple allows you to check which devices your Apple Account (formerly Apple ID) is logged in directly through the iPhone and Mac system settings, as the company explains here<\/a>.\u00a0<\/p>\n On an iPhone or iPad, go to \u201cSettings,\u201d tap your name, and scroll down to see all the devices that you are signed in on.\u00a0<\/p>\n On a Mac, click on the Apple logo on the top left corner, then \u201cSystem Settings,\u201d then click on your name, and you will also see a list of devices, just like on an iPhone or iPad.\u00a0<\/p>\n If you click on any device, Apple says, you will be able to \u201cview that device\u2019s information, such as the device model, serial number\u201d and operating system version.<\/p>\n On Windows, you can use Apple\u2019s iCloud app to check which devices are logged into your account. Open the app, and click on \u201cManage Apple Account\u201d There you can view the devices and get more information on them.<\/p>\n Finally, you can also get this information through the web, going to your Apple ID account page<\/a>, then clicking on \u201cDevices\u201d in the left hand menu.\u00a0<\/p>\n The social networking giant offers a feature that lets you see where your account is logged in. Head to Facebook\u2019s \u201cPassword and Security<\/a>\u201d settings and click on \u201cWhere you\u2019re logged in.\u201d\u00a0<\/p>\n In the same interface you can also see where you are logged in with your Instagram account, provided it\u2019s linked to your Facebook account. If the accounts are not linked, or you just don\u2019t have a Facebook account, go to Instagram\u2019s \u201cAccount Center\u201d<\/a> to manage your Instagram account and click on Password and Security, and then \u201cWhere you\u2019re logged in.\u201d\u00a0<\/p>\n Here you can choose to log out from specific devices, perhaps because you don\u2019t recognize them, or because they are old devices you don\u2019t use anymore.\u00a0<\/p>\n Just like Google, Facebook offers an Advanced Protection<\/a> feature as well as for Instagram<\/a>, which essentially makes it harder for malicious hackers to log onto your account. \u201cWe\u2019ll apply stricter rules at login to reduce the chances of unauthorized access to your account,\u201d the company explains. \u201cIf we see anything unusual about a login to your account, we\u2019ll ask you to complete extra steps to confirm it\u2019s really you.\u201d\u00a0<\/p>\n If you are a journalist, a politician or otherwise someone who is more likely at risk to be targeted by hackers, you may want to switch on this feature.\u00a0<\/p>\n In the past, it was only possible to use WhatsApp on one mobile device only. Now, Meta has added functionalities for WhatsApp users to use the app on computers, and also directly via browser.\u00a0<\/p>\n Checking where you logged in with your WhatsApp account is simple. Open the WhatsApp app on your mobile phone. On iPhones and iPads, tap on the Settings icon in the bottom right corner, then tap on \u201cLinked devices.\u201d\u00a0<\/p>\n There, you will be able to see a list of devices, and by clicking on one of them you can log them out.\u00a0<\/p>\n On Android, tap on the three dots in the top-right corner of the WhatsApp app, then tap \u201cLinked devices\u201d and you will see a page that\u2019s very similar to what you would see on Apple devices.<\/p>\n Like WhatsApp, Signal now lets you use the app via dedicated Desktop apps<\/a> for macOS, Windows, as well as Linux.\u00a0<\/p>\n From this screen of Linked Devices, you can tap on \u201cEdit\u201d and remove the devices, which means your account will be logged out and unlinked from those devices.\u00a0<\/p>\n To see where you are logged into X (formerly Twitter), go to X Settings<\/a>, then click on \u201cMore\u201d on the left-hand menu, click on \u201cSettings and privacy,\u201d then \u201cSecurity and account access\u201d and finally \u201cApps and sessions.\u201d<\/p>\n From this menu, you can see which apps you have connected to your X account, what sessions are open (such as where you are logged in) and the access history of your account.\u00a0<\/p>\n You can revoke access to all other devices and locations by hitting the \u201cLog out of all other sessions\u201d button.<\/p>\n Snap has a feature that allows you to check where you are logged in. A Snapchat support page details the steps you can follow<\/a> to check. You can use both the app on iOS and Android, or Snapchat\u2019s website<\/a>.\u00a0<\/p>\n On iOS and Android, open the app, tap on your profile icon, then the settings (gear) icon, then tap on \u201cSession Management.\u201d At that point you will be able to see a list of sessions your account is logged into. It looks like this:<\/p>\n On the web, go to Snapchat Accounts<\/a>, then click on \u201cSession Management.\u201d There you will see a list of logged-in sessions that looks essentially the same as the image above. Both on the web and in the app, you can log out of sessions that seem suspicious or you don\u2019t recognize.\u00a0<\/p>\n Snapchat also has a security feature that alerts you on your phone when someone is logging into your account, whether it\u2019s you or a would-be intruder.\u00a0<\/p>\n TechCrunch tested this sign-in flow on different devices. The notification above may not display if you log back into a device you had already logged into. But if Snapchat thinks a login is \u201csuspicious\u201d\u00a0\u2014 perhaps because the person logging in is using a different device or IP address \u2014 the app will show whoever is attempting to log in a new screen asking them to verify the phone number associated with the account, showing only the last four digits.<\/p>\n If the person attempting the login then taps \u201cContinue,\u201d the account owner will receive a text message on their phone number with a code, which prevents the other person from logging in.\u00a0<\/p>\n However, you will only get this alert after the person has entered your correct password. That\u2019s all the more reason to make sure you use a long and unique password, which makes passwords harder to guess, and enable multi-factor authentication with an authenticator app, rather than your phone number.\u00a0<\/p>\nGmail lists all the places your account is active<\/h2>\n
![\"Google's](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/google-security-checkup.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/google-recent-account-activity.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/google-lets-secure-account.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/google-third-party-access.png\")
Outlook and Microsoft logins are in the account settings<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/msft-sign-in-security.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/msft-session-type.png\")
Keep your LinkedIn account locked down<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/linkedin-1.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/linkedin-2.jpg\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/linkedin-3.jpg\")
Yahoo offers email tools to help<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/yahoo-manage-your-account.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/yahoo-recent-sessions.png\")
![\"another](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/yahoo-current-devices.png\")
Ensure your Apple Account is safe<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/apple-iphone-logged-in.png\")
![\"A](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/apple-mac-logged-in.png\")
![\"A](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/apple-web-logged-in.png\")
How to check Facebook and Instagram security<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/facebook-instagram-security-login.png\")
It\u2019s easy to see whether your WhatsApp is safe<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/whatsapp-linked-chromeos.png?w=333\")
![\"another](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/whatsapp-linked-iphone.png?w=333\")
Signal also lets you check for anomalies<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/signal-linked-devices.png?w=680\")
X (Twitter) lets you see what sessions are open<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/x-logged-in-sessions.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/07\/x-account-access-history.png\")
<\/figure>\nSecuring your Snap account<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/snapchat-1.jpg\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/snapchat-2.jpg?w=680\")
Discord lets you see which apps and devices have access to your account<\/h2>\n
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/image22.png?w=680\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/image28.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/image29.png\")
![\"the](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/image18.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/image15.png\")
![\"a](\"https:\/\/techcrunch.com\/wp-content\/uploads\/2024\/08\/image19.png\")