How to Tell If Someone Logged Into Your Google Account (And What to Do Next)

If you suspect someone else is reading your emails, checking your Google account for unauthorized logins is the first step to securing your data. Google accounts hold our emails, search history, private photos, and saved passwords. If an attacker gains access, they can lock you out of everything in seconds.

How to Tell If Someone Logged Into Your Google Account in Under Two Minutes

You don’t need to wait for Google to send a security alert to audit who has access to your account. The fastest way to check is through your Google device activity page, which lists every phone, tablet, and computer currently signed into your profile.

Using Device Activity to Tell If Someone Logged Into Your Google Account

To see your active sessions, follow these simple steps:

Go directly to myaccount.google.com/device-activity or type google.com/devices into your browser bar.
Sign in with your Google credentials if prompted.
Review the list of devices displayed on the screen.
Click on any device to see more detailed information, such as the last active time and approximate location.

If you spot an unfamiliar device, don’t panic immediately. Sometimes a device you own will appear under a generic name or show a slightly different location due to your internet service provider. But if you see an iPhone located in another country and you only own an Android, you have a clear problem.

The Hidden Gmail Feature: Checking Recent IP Addresses

Attackers can sometimes mimic your device type or access your account through a hidden browser session. Fortunately, Gmail has a built-in tool that tracks the exact IP addresses accessing your inbox.

You can only access this feature on a desktop computer. Scroll to the bottom of your Gmail inbox and look in the bottom-right corner. Right next to your last account activity, you will see a link that says “Details.”

Spotting Sneaky Activity in Gmail

Clicking “Details” opens a pop-up window showing the last ten IP addresses that accessed your mail. It also displays the access type, indicating whether it was a mobile browser, a mail app, or a desktop browser.

Compare these IP addresses. If you see an IP that doesn’t match your home network or mobile carrier, someone else might be reading your messages, or they may have already exploited a silent backdoor hiding in your inbox. To see what else an intruder might have viewed, you can check our guide on [how to manage your Google activity history].

What to Do If You Find an Unauthorized Login

If you find an intruder, you need to act fast. First, remove their access immediately. On the device activity page, click on the unrecognized device and select “Sign out.” This instantly revokes their access and forces them off your account.

Next, change your password. If they managed to log in, your old password is compromised. Create a strong, unique password that you do not use anywhere else. If you reuse that same password across different sites, you will need to change those as well, as part of a broader approach to small business cybersecurity protection.

Securing Your Account with Two-Factor Authentication

Once you have removed the intruder, you should secure your account by turning on 2-Step Verification.

Go to your Google Account security settings.
Select “2-Step Verification” and follow the prompts to set it up.
Choose a secure verification method, like Google Authenticator or a physical security key, rather than standard SMS codes.

With two-factor authentication active, an attacker cannot access your account without that secondary code, even if they steal your password. It is a highly effective layer of security that takes only a few minutes to configure.