Instagram or Facebook shows an unfamiliar device. What do I do?
The short answer
Open signed-in sessions in security settings and compare the device and time with your activity. If the access is not yours, end that session and secure your password, email and second sign-in method.
What this answer is based onWhat to do
Check the specific device and time. Do not approve a login request you did not start.
- Open the app yourself. In security settings, look for the device list or “Where you’re logged in”. Names can differ: some people now see Meta Account instead of Accounts Center.
- Compare sessions with your devices and recent logins. End any session that is not yours or remains on someone else’s computer. Review each entry before deciding whether to leave it signed in.
- If there are signs of unauthorised access, use a unique new password, check contact details and email security, and set up two-factor sign-in. If you are already locked out or contacts were changed, use hacked-account recovery.
The situation
A computer login alert arrives in the evening. You used Facebook on a friend’s laptop earlier and cannot remember signing out. Now you need to check that session rather than dismiss the alert.
The situation and an improvement
Approve an unfamiliar login just to make the notification go away.
Reject a request you did not start and review active devices in settings.
What this answer is based on
Meta — Keeping Instagram Safe and Secureabout.fb.comMeta — Account security after credential theftMeta — Accounts Center and Meta Account settingsGuide based on Meta’s materialReview details
Source reviewed:
We read the official source listed for this topic. Other Meta rules are reviewed separately.
Primary source reread: . This does not mean every supplementary source, translation or app screen was rechecked.
Read the official explanations of session review, login alerts and password protection, plus the Meta Account transition article. These are review and security steps, not a diagnosis of a particular account or a test of every interface version.
Material published: July 13, 2021
Include the guide link, language and wording that needs checking. Add an official source link if you have one. Do not send passwords, login codes or photos of identity documents.
Examples are made up to explain the guidance. Meta decides individual account and content cases.
Study this topicUnauthorised access: where to startSources and related topicsPolicy Graph · Demo in development