Think someone else may be using your Facebook account?

You can check the devices and sessions currently connected to your account and remove anything you don't recognise.

1. Open Facebook's Accounts Center

On the Facebook app:

Menu ☰ → Settings & privacy → Settings → Accounts Center

Then select:

Password and security → Where you're logged in

Facebook will show sessions associated with your account, including information such as the device and approximate location.

The exact appearance of the menu can vary depending on your Facebook app version.

2. Look through your active sessions

Don't panic if you see a location you don't recognise immediately.

Facebook's displayed location may be approximate, especially when you're using mobile data, a VPN or certain internet providers.

Instead, look for combinations such as:

  • A device you don't own

  • A browser you don't use

  • A login at a time you weren't using Facebook

  • Multiple unfamiliar sessions

  • A device that remains active after you have stopped using it

3. Log out unknown devices

If you identify a session you don't recognise, select it and choose the option to Log out.

If several sessions look suspicious, you can use Facebook's option to log out of multiple or all sessions, depending on what your account currently shows.

After removing unknown sessions, don't stop there.

4. Change your Facebook password

Go back to:

Accounts Center → Password and security → Change password

Create a strong, unique password that you don't use for another website.

Avoid using:

❌ Your name
❌ Birthday
❌ Phone number
❌ Simple sequences such as 123456
❌ A password you already use for email or banking

Changing your password is especially important if you believe someone accessed your account.

5. Turn on two-factor authentication

Go to:

Accounts Center → Password and security → Two-factor authentication

Choose the Facebook account and follow the available setup options.

Two-factor authentication adds another layer of protection if someone obtains your password.

Where available, consider using an authenticator app or security key rather than relying only on SMS.

6. Check whether your account details were changed

If you suspect someone accessed your account, check:

  • Email addresses

  • Phone numbers

  • Password

  • Two-factor authentication settings

  • Accounts linked to your Accounts Center

  • Recent posts

  • Messages you didn't send

  • Friend requests you didn't make

  • Pages or groups you don't recognise

An attacker may change account-recovery information to maintain access.

7. Secure your email account too

Your email account is extremely important because it can potentially be used to reset your Facebook password.

If your Facebook email account is compromised, changing only your Facebook password may not be enough.

Secure the email account with:

🔐 A unique password
🔑 Two-factor authentication
📱 Recovery information you control

8. Remove suspicious apps and websites

Check which apps, websites or services are connected to your Facebook account.

If you see something you don't recognise, remove its access.

Be particularly careful with apps promising:

  • Free followers

  • Free likes

  • Profile viewers

  • "Who viewed your profile" information

  • Free verification

  • Unusual giveaways

These services can be used to trick people into handing over their login details or granting account access.

Signs Someone May Have Accessed Your Facebook

Watch for:

🚨 Messages you didn't send
🚨 Posts you didn't publish
🚨 Password-reset emails you didn't request
🚨 New friends you don't recognise
🚨 Login notifications from unfamiliar devices
🚨 Your email or phone number being changed
🚨 Facebook telling you that your password was changed

One strange location alone doesn't necessarily mean you've been hacked. Look at the device, time and other account activity together.

If You Can No Longer Access Your Account

If someone has changed your password or recovery information and you can no longer log in, use Facebook's official account-recovery process rather than giving your password to someone claiming they can recover it for you.

Never pay a stranger on Instagram, WhatsApp or Telegram who claims to be a "Meta recovery agent."

Quick Security Checklist

Check sessions → Log out unknown devices → Change password → Enable 2FA → Check recovery details → Secure your email → Remove suspicious app access.

You don't have to wait until your account is hacked to check this.

Take two minutes today and see exactly where your Facebook account is logged in.