Find Where Facebook Is Logged In & Secure It

This guide shows you how to see every device and location where your Facebook account is currently logged in, and exactly what to do if you spot a session you don’t recognize. You’ll learn how to review active sessions, log out unfamiliar devices remotely, and lock down your account to prevent future unauthorized access. No special tools are needed—everything is done through Facebook’s own security settings.

What You’ll Need

Access to your Facebook account (you’ll need your password or a saved login).
A web browser on a computer, or the Facebook app on your phone.
Your phone (for two-factor authentication, if you have it enabled).

Step-by-Step

Open Facebook and go to Settings. On a computer, click your profile picture in the top-right corner, then select Settings & privacy > Settings. On the mobile app, tap the three-line menu (bottom-right on iPhone, top-right on Android), then scroll down and tap Settings & privacy > Settings.
Navigate to Security and Login. In the left sidebar on desktop (or the menu on mobile), click Security and login. This page is your command center for all login activity.
Review the “Where you’re logged in” section. This is usually near the top. You’ll see a list of all active sessions, each showing a device type (e.g., “Chrome on Windows”, “iPhone”), a rough location (city and country), and the last time it was active. Look for anything you don’t recognize—an unfamiliar city, an old phone model, or a device you no longer own.
Click or tap the three-dot menu next to a session. Each entry has a small menu (⋯) on the right. Clicking it reveals options like Log out and Not you?.
Log out any session you don’t recognize. If you see a device or location that isn’t yours, click Log out. Facebook will immediately end that session. If you’re unsure, log it out anyway—you can always log back in later.
Use “Not you?” for suspicious activity. If you believe someone else is using your account, click Not you? instead. Facebook will guide you through securing your account, which includes changing your password and reviewing recent actions.
Log out of all other sessions at once. At the bottom of the “Where you’re logged in” list, you’ll find a button that says Log out of all sessions. Use this if you’ve lost a device or suspect a breach. It will sign you out everywhere except your current device.
Change your password. After removing unknown sessions, go to the Change password section on the same page. Create a strong, unique password that you don’t use for other sites.
Turn on two-factor authentication. Scroll down to Two-factor authentication and click Edit. Choose an authentication app (like Google Authenticator) or a text message code. This adds a second step to login, making it much harder for anyone else to get in.
Check your email for alerts. Facebook sends a notification when you log in from a new device. If you see an alert you didn’t trigger, follow the “This wasn’t me” link in that email immediately.

Common Mistakes

Confusing “active” with “logged in” — Facebook shows sessions that were active recently, but some may show as “Active now” even if you haven’t used them in hours. Check the “Last active” timestamp, not just the device name.
Logging out your own phone by accident — If you log out of all sessions while using your phone, you’ll be signed out there too. Make sure you’re on the device you want to keep before using that button.
Ignoring the location data — Locations are approximate and based on IP address. A session showing your city but a different device could still be you (e.g., a work computer). Don’t panic; just verify the device type.
Only checking the app — The mobile app shows the same list, but it can be harder to read. Use a desktop browser for the clearest view and easiest navigation.

Tips

Do a monthly check — Make it a habit to review this page once a month. It takes under a minute and catches stale sessions from old devices.
Use a password manager — A password manager generates and stores unique, complex passwords for each site, so you don’t reuse the same one.
Log out of shared devices — If you log in on a friend’s computer or a public library machine, always log out manually when you’re done, and don’t check “Keep me logged in.”
Review your email and phone number — On the same Security and login page, check that your contact info is correct. If someone changed it, that’s a red flag.
Use “Get alerts about unrecognized logins” — This option is right below the session list. Turn it on to receive notifications for every new login.

Troubleshooting

You can’t log in because your password was changed. Go to the Facebook login page and click Forgot password?. Enter your email or phone number. Facebook will send a reset link. If you don’t have access to those, click No longer have access to these? and follow the identity verification steps (usually answering security questions or identifying friends from photos).

You see a session but can’t log it out. If the “Log out” button doesn’t work, try refreshing the page. If it still fails, use the Log out of all sessions button instead—that usually clears everything.

Facebook says your account is locked. This happens when Facebook detects suspicious activity. Follow the on-screen prompts to verify your identity. You may need to enter a code sent to your phone or email, or confirm your date of birth.

You don’t see the “Security and login” option. Make sure you’re using the latest version of the Facebook app or a current web browser. If you’re on an older version, update it first. Also, ensure you’re on your personal profile, not a Page or Group admin view.

Someone is still logging in after you changed your password. This can happen if they have a saved session token on an old device. Log out of all sessions again, then change your password once more. Also, check that your email and phone number haven’t been changed by the attacker.

Frequently Asked Questions

Q: How often does Facebook update the session list?
A: The list updates in near real-time. A new login appears within seconds, and logging out a session takes effect immediately.

Q: Can I see the IP address of each session?
A: No, Facebook only shows the device type, approximate location, and last active time. It does not display IP addresses to users.

Q: What does “Active now” mean exactly?
A: It means that device has been used in the last few minutes. If it says “Active 2 hours ago,” that’s the last time the session communicated with Facebook’s servers.

Q: Will logging out a session delete my messages or photos?
A: No. Logging out only ends the login session. All your data stays on Facebook’s servers and will be there when you log back in.

Q: If I log out of all sessions, will I be logged out of Messenger too?
A: Yes, Messenger sessions are tied to your Facebook login. You’ll need to log back into Messenger on any device you want to keep using.

Q: Is it safe to use “Log out of all sessions” if I think I was hacked?
A: Yes, it’s one of the first things you should do. It cuts off the attacker’s access immediately. After that, change your password and enable two-factor authentication.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →